A U.S. criminal case involving an alleged phone-wiping ‘duress’ password is raising fresh questions about digital privacy at the border and how far authorities can go when searching personal devices.
Prosecutors have accused Samuel Tunick, an Atlanta resident and U.S. citizen, of giving border authorities a passcode that caused his phone to erase its contents during a search. Tunick has pleaded not guilty, and his lawyers are asking the court to throw out evidence from the seizure.
The case is important because it appears to involve a built-in privacy feature rather than a simple refusal to unlock a device. That puts border search rules, phone security tools, and constitutional rights into a complicated collision.
Tech Block Central has covered how security tools can create hard legal and policy questions, especially when defensive technology runs into broad enforcement concerns. This case shows a similar tension in personal device privacy.
What A ‘Duress’ Password Does
A ‘duress’ password is a separate passcode that can trigger a protective action if a person is forced to unlock a device. In this case, the phone reportedly used GrapheneOS, a privacy-focused operating system for Pixel phones.
GrapheneOS includes a duress feature that can wipe a device when a special passcode is entered instead of the normal unlock code. The idea is to protect sensitive data if someone is compelled to unlock the phone under pressure.
That kind of feature is not only relevant to activists or journalists. It can also matter for lawyers, business travelers, researchers, and anyone carrying sensitive personal or professional data across borders.
The legal problem is that authorities may view the same action very differently. A user may see it as a privacy protection. Prosecutors may argue it is destruction of evidence if they believe the person knew a seizure was happening.
What Prosecutors Alleged
The indictment accuses Tunick of knowingly causing data to be deleted before authorities could seize it. The charge is tied to 18 U.S.C. 2232, a federal law covering destruction or removal of property to prevent seizure.
According to his defense motion, Tunick was taken to secondary inspection at Hartsfield-Jackson Atlanta International Airport on January 24, 2025. His lawyers say he repeatedly asked for an attorney and was not properly informed of his rights before the phone was taken.
The defense also argues that the government’s stated basis for the search was a pretext and that investigators were actually interested in political activity connected to opposition against Atlanta’s law enforcement training center, often referred to as ‘Cop City’.
When the passcode was entered, the phone allegedly went blank, flashed, or restarted. Authorities seized the device, and Tunick was later allowed to enter the country.
Why Border Phone Searches Are Different
Device searches at the U.S. border operate under rules that are different from ordinary searches inside the country. The government has long argued that border authorities can inspect and seize electronic devices without a traditional warrant before allowing someone to enter.
Privacy advocates argue that modern phones are not like luggage. They can contain years of private messages, financial records, health data, work files, photos, passwords, location history, and attorney-client communications.
That is why this case could matter even beyond the facts of one prosecution. If courts accept broad government arguments around ‘duress’ passwords, travelers may face more legal risk for using privacy features that are built into their devices.
At the same time, authorities will argue they need tools to prevent evidence from disappearing during lawful searches. The court will have to consider whether the search itself was lawful and whether the alleged wipe can be treated as a criminal act.
What Travelers Should Take From This
This case is not a simple instruction manual for what to do at a border. Laws, device rules, and individual circumstances can vary, and the stakes can be serious.
The practical lesson is that sensitive data should be managed before travel. Many security experts recommend minimizing what is stored locally on a device when crossing a border, especially if the data is private, privileged, or unnecessary for the trip.
That can mean traveling with a clean device, using cloud access after arrival, signing out of sensitive accounts, or carrying only the data needed for the trip. Those approaches may reduce the pressure around device access without relying on a dramatic last-second privacy feature.
For companies, the case is another reminder to create travel policies for employees who handle confidential data. A border phone search is not only a personal privacy issue. It can become a business security issue as well.
The Bigger Privacy Question
The case highlights a broader problem with modern device security. Privacy features are increasingly built into mainstream tools, but the legal system has not fully settled how those features should be treated when law enforcement wants access.
If a phone automatically wipes after too many failed attempts, is that different from a ‘duress’ password? If a person uses encrypted cloud storage instead of local files, does that change the legal analysis? These questions are becoming more urgent as phones become the main archive of people’s lives.
The court is expected to rule on Tunick’s motion later this year. Whatever happens, the case will likely become a reference point for future debates over border searches, privacy operating systems, and device security.
Should travelers have stronger protections for phone data at the border, or should border authorities keep broad powers to inspect devices?
Further reading: GrapheneOS on ‘duress’ features, 18 U.S.C. 2232, and EFF border search resources.