PanicStation.org
UK USA
uk Legal, police, prison & official contact

What to do if…
police ask you to hand over passwords or account logins

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Pause before giving any password, code, recovery key, or live account access. Ask for legal advice and ask whether the request is voluntary or based on a formal written notice requiring disclosure.

Do not do these things

  • Don’t hand over a password or log in “just to get it over with”.
  • Don’t open apps, email, cloud storage, social media, or a password manager so someone can “have a quick look”.
  • Don’t give one-time codes, app approval prompts, backup codes, recovery keys, or password-reset access casually.
  • Don’t guess passwords or repeatedly try codes under pressure if that could lock an account or change security settings.
  • Don’t delete, wipe, factory reset, hide, move, or “tidy up” devices, accounts, or messages.
  • Don’t assume every informal request is a legal requirement.
  • Don’t ignore a formal written notice if one is served; get legal advice immediately.

What to do now

  1. Ask what your position is. Use calm, simple questions:

    • “Am I under arrest, or am I free to leave?”
    • “Is this a voluntary request, or are you requiring it under a formal power?”
    • “Which device, account, password, code, or login are you asking about?”

  2. Ask for legal advice before providing access. Say: “I want legal advice before I answer questions or provide any password, code, recovery key, or login.”

    • If you are in police custody or due to be interviewed at a police station, ask for free independent legal advice.
    • If you do not have your own solicitor, ask for the duty solicitor or local equivalent.

  3. Ask to see any formal written notice. Police may, in some circumstances, use a formal written notice under the Regulation of Investigatory Powers Act 2000 that requires disclosure of a key, password, or information needed to access protected material.

    • Ask for the notice in writing.
    • Ask what law or power is being used.
    • Ask what exactly must be disclosed and by when.
    • Ask to speak to a solicitor before responding.
    • Do not treat a casual conversation as the same thing as a properly served notice.

  4. If the request is still informal, repeat one sentence. Say: “I am not refusing anything lawful; I am asking for legal advice before I provide any password, code, recovery key, or login.”

  5. Avoid accidental over-disclosure.

    • Keep the device locked unless your solicitor advises otherwise.
    • Do not sign in to email, cloud drives, social media, banking, messaging, or password managers.
    • Do not hand over recovery email access, printed backup codes, authenticator app access, or password manager master passwords.
    • If they ask for a specific item, ask them to identify it clearly rather than opening whole accounts yourself.

  6. Write down the basics as soon as you safely can. Note the date, time, police force, officer names or numbers, whether you were arrested or attending voluntarily, what device or account was mentioned, what exact access was requested, and whether any written notice was shown or given.

  7. If you are free to leave, leave and get legal advice. You can say: “I will respond through a solicitor.” Then end the interaction calmly.

What can wait

  • You do not need to decide right now whether to cooperate beyond what the law requires.
  • You do not need to explain your side immediately.
  • You do not need to contact employers, schools, family, or account providers right now unless a solicitor advises it.
  • You do not need to change passwords, close accounts, wipe devices, or reorganise messages now.
  • You do not need to work out the whole investigation today.

Important reassurance

It is normal to feel pressured when police ask for access. Taking a pause, asking for legal advice, and asking for the request to be put through the correct process is a legitimate response, especially when passwords or account logins could expose much more than one item.

Scope note

These are first steps only. The right next move may depend on whether you are a suspect, witness, victim, arrested, voluntarily interviewed, or served with a formal notice, and UK procedure can differ across England and Wales, Scotland, and Northern Ireland.

Important note

This is general information, not legal advice or professional advice. If police ask for passwords, codes, recovery keys, or account logins, speak to a solicitor as soon as possible before providing access.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us