In a case that could have far-reaching implications for digital privacy and border search authority, the United States government is prosecuting American citizen Sam Tunick for allegedly using a 'duress password' to wipe his smartphone when federal agents attempted to seize it at Atlanta's Hartsfield-Jackson International Airport on January 24, 2025. The incident, which unfolded as Tunick was returning from an international trip, has become a flashpoint in the ongoing debate over the rights of travelers — even U.S. citizens — to protect their personal data from warrantless searches at the border.
What Happened at the Airport?
According to court documents and statements from Tunick's legal team, he was detained by federal agents upon arrival at the Atlanta airport. The agents allegedly questioned him about child exploitation images — an accusation Tunick's lawyers vehemently deny. In a motion filed by his defense, they argue that the line of questioning was nothing more than 'a pretext for a fishing expedition into Mr. Tunick’s connections' to the Stop Cop City movement, a protest campaign opposing the construction of a police training facility in Atlanta.
When agents demanded access to Tunick's phone, he allegedly provided a 'duress password' — a special passcode that triggers the device to wipe its data rather than unlock it. This feature is built into GrapheneOS, a privacy-focused mobile operating system designed to give users greater control over their data. Upon entering the duress password, the phone's contents were erased, preventing the agents from accessing the device.
The Legal Charge: 18 U.S.C. § 2232
The government has charged Tunick under Title 18, United States Code, Section 2232 — a rarely invoked statute that makes it illegal to destroy or damage property with the intent to prevent its seizure by federal authorities. The law, originally enacted to combat the destruction of evidence in criminal investigations, carries penalties that could include fines and imprisonment. Prosecutors allege that Tunick knowingly wiped his phone to obstruct the investigation, while the defense maintains that the detention itself was unlawful, and therefore any subsequent seizure or questioning violated his Fourth Amendment rights.
Tunick's attorneys argue that the agents did not produce a warrant, did not inform him of his legal rights, and refused his request to speak with a lawyer. The government counters that, under current border search doctrine, agents are not required to obtain a warrant or provide Miranda warnings when detaining travelers at the border — even U.S. citizens — because border searches are considered 'routine' and exempt from the usual probable cause requirement.
Digital Privacy at the Border: A Growing Concern
This case is the latest in a series of high-profile incidents highlighting the tension between national security and individual privacy. Federal law grants customs and border protection officers broad authority to search the belongings of anyone entering the United States, including electronic devices. While the U.S. Supreme Court has recognized that cell phones contain vast amounts of personal data and generally require a warrant for searches, it has not yet squarely addressed the application of that principle at the border.
Lower courts have issued conflicting rulings. Some have held that border agents may conduct manual, non-forensic searches of phones without a warrant, but that more intrusive forensic searches require reasonable suspicion. Others have suggested that any search of a digital device at the border is a significant intrusion that must be justified by a warrant or at least by reasonable suspicion of criminal activity. The Tunick case could force a higher court to weigh in, especially given the use of a duress password, which raises novel questions about the legality of deceiving authorities to protect one's data.
Duress Passwords and GrapheneOS
GrapheneOS, the operating system on Tunick’s phone, is an open-source, privacy-focused mobile OS based on Android. It offers advanced security features, including the ability to set multiple passwords — a primary password for normal use and a duress password that can wipe the device, reboot it into a safe mode, or perform other actions. This feature is designed to protect sensitive information from coercive searches, particularly in environments where government agents or other adversaries might compel a user to unlock their device.
Privacy advocates have hailed such tools as essential for journalists, activists, and others who may be targeted for their work. Critics, however, argue that they provide a means to obstruct legitimate law enforcement efforts. The government’s decision to prosecute Tunick for using a duress password suggests that it views such behavior as a criminal act, not a legitimate exercise of self-help privacy protection.
The Stop Cop City Connection
The defense has emphasized that Tunick’s alleged involvement with the Stop Cop City movement is the real reason for his detention. The movement, which has drawn national attention, opposes the construction of a $90 million police and firefighter training facility near Atlanta. Protesters have argued that the facility will militarize police and contribute to environmental damage. In response, authorities have conducted widespread surveillance and arrests, labeling some activists as domestic terrorists.
‘This is a clear attempt to intimidate and silence those who oppose government overreach,’ said Marlon Kautz of the Atlanta Solidarity Fund, speaking to The Guardian. ‘We all have a right to secure our private data against unconstitutional searches. And we should — especially in a time of rising authoritarianism.’ The Trump administration’s aggressive enforcement of border policies has made international travel more risky for many Americans, with reports of prolonged detentions and demands for social media passwords becoming more common.
Broader Implications for Travelers
Legal experts warn that the outcome of this case could set a precedent for how far the government can go in compelling travelers to unlock their devices. If the courts uphold the government’s authority to prosecute individuals for wiping their phones, it may effectively eliminate the ability to use duress passwords or other privacy measures at the border. Conversely, a ruling in favor of Tunick could establish that such actions are protected by the Fourth Amendment’s prohibition against unreasonable searches and seizures.
‘The government’s position is that once they seize your device, you have no right to protect its contents, even if the seizure itself is unconstitutional,’ said a noted civil liberties attorney who wished to remain anonymous. ‘That is a dangerous proposition. It would essentially give border agents the power to demand access to anything, and if you resist, you face criminal charges.’
Tunick’s case is currently in the early stages of litigation, with a hearing on the motion to suppress evidence scheduled for later this year. Depending on the outcome, it could ultimately reach the U.S. Supreme Court, where justices would have to grapple with the collision of digital privacy, border search doctrine, and the right against self-incrimination.
What’s Next?
As the legal proceedings unfold, the case has already sparked renewed calls for legislation to protect travelers’ digital privacy. Some lawmakers have introduced bills that would require a warrant for any search of electronic devices at ports of entry, but those efforts have stalled in the face of opposition from law enforcement agencies. For now, travelers — particularly those returning from abroad — are advised to be cautious about what they carry on their devices.
The American Civil Liberties Union (ACLU) has filed an amicus brief in support of Tunick, arguing that the government’s interpretation of the law would criminalize ordinary behavior. ‘Using a duress password is not destruction of evidence; it is a reasonable precaution against an unconstitutional search,’ the brief states. ‘If the government can charge someone for simply protecting their data, then every traveler who encrypts their phone or uses a password could be at risk.’
Sam Tunick remains free on bail pending trial. His legal team is preparing to challenge the legality of the initial detention and the seizure of his phone. The case, which has already drawn national attention, is being closely watched by civil liberties advocates, privacy experts, and legal scholars who see it as a potential bellwether for the future of digital rights at the border.
Source: The Verge News