Smartphones hold our most private information \u2014 chats, photos, bank details, locations, and more. They contain the “intimate details of life.” When police seize a phone during investigation, can they force the owner (especially an accused person) to disclose the password? This clashes with two big constitutional rights: the right to privacy (under Article 21) and the right against self-incrimination (Article 20(3) of the Indian Constitution).<\/p>\n
What Does Article 20(3) Say?<\/strong><\/p>\n “No person accused of any offense shall be compelled to be a witness against himself.”<\/p>\n This protects you from being forced to give evidence that can harm your own case. Courts distinguish between the following:<\/p>\n Testimonial evidence<\/strong>\u2014sharing knowledge from your mind (e.g., telling a fact, password, or confessing). This is usually protected.<\/p>\n Physical evidence<\/strong>\u2014giving something physical like blood, fingerprints, or handwriting samples. This can often be compelled because it doesn’t involve “speaking” from your mind.<\/p>\n A password lives in your mind \u2014 it’s like mental knowledge. Revealing it helps police access potentially incriminating data on your phone. Many argue this is testimonial compulsion.<\/p>\n Key Case Laws<\/strong><\/p>\n Indian courts are divided on this issue. There is no clear Supreme Court ruling yet settling the exact question for passwords (as of early 2026), so the law remains evolving and fact-specific. Here are the main judgments:<\/p>\n In a narcotics case, the accused refused to give his mobile and email passwords. The court directed him to provide the password\/passcode or biometrics.<\/p>\n Reasoning:<\/strong> Providing a password is like producing a “document” or “identification mark” (under old CrPC provisions, now similar under BNSS). It is not testimonial compulsion under Article 20(3) because the password itself doesn’t prove guilt \u2014 the data found later does. The accused must cooperate with the investigation. The court also allowed biometrics (fingerprint\/face) as they are physical, not mental.<\/p>\n The court followed a similar view: the accused can be directed to give a password\/biometrics to unlock devices. Accessing the phone data does not violate Article 20(3)\u2014the prosecution still has to prove the evidence in court. One Kerala case even made phone access a condition for bail.<\/p>\n The CBI wanted the accused to give the computer password and user ID for the seized devices. The court refused.<\/p>\n Reasoning:<\/strong> Asking for a password is compelling the accused to give self-incriminating testimony. It violates Article 20(3) and the right to silence (Section 161(2) CrPC). Police can use forensic experts to try unlocking the device themselves (at the risk of data loss). A password is not just a “document”\u2014it is knowledge from the mind.<\/p>\n The court criticized the Karnataka view for not properly following Supreme Court precedents like Kathi Kalu Oghad<\/em>.<\/p>\n During trial, CBI wanted the accused to disclose passwords for digital evidence. The High Court said no \u2014 the accused cannot be coerced while the trial is ongoing. He is protected under Article 20(3).<\/p>\n Takeaway:<\/strong> “The CBI cannot expect the accused to sing a tune that is music to their ears.” Non-cooperation on passwords alone is not enough to cancel bail.<\/p>\n Other High Courts (e.g., some Kerala rulings like T.G. Mohandas<\/em>) have leaned toward protecting the accused from being forced to produce phones or passwords if it amounts to self-incrimination.<\/p>\n Biometrics (Fingerprint, Face ID, etc.) vs. Alphanumeric Passwords<\/strong><\/p>\n Courts often treat biometrics differently. They are seen as physical characteristics (like giving a thumb impression), not mental testimony. So, police may compel you to place your finger or look at the camera to unlock it. But entering a PIN\/password\/pattern requires you to reveal or use knowledge from your mind\u2014stronger protection here. This distinction is still debated and evolving.<\/p>\n Important Background Supreme Court Cases<\/strong><\/p>\n State of Bombay v. Kathi Kalu Oghad (1961):<\/strong> Giving handwriting, signatures, or fingerprints is not self-incrimination (physical, not testimonial). But compelled oral or documentary evidence from personal knowledge can be protected. Many courts rely on this.<\/p>\n Selvi v. State of Karnataka (2010):<\/strong> Narco-analysis, brain mapping, and polygraph tests violate Article 20(3) because they extract information involuntarily from the mind. It links self-incrimination with privacy and mental privacy.<\/p>\n Justice K.S. Puttaswamy v. Union of India (2017):<\/strong> Right to privacy is a fundamental right under Article 21. Smartphones contain highly personal data, so any intrusion needs strong justification and must be proportionate. This adds protection against forced digital access.<\/p>\n Statutory Provisions <\/strong><\/p>\n Section 94 BNSS (earlier Section 91 CrPC): A<\/strong>\u00a0court or police officer can summon a person to produce “documents or other things” (including electronic devices) needed for investigation. Debate continues whether this covers forcing a password (a mental act) versus just handing over the phone.<\/p>\n Section 69 IT Act:<\/strong> Government can direct decryption in certain cases (national security, etc.), but applying it to force an ordinary accused to reveal a personal handset password is contested when it hits Article 20(3). Police have broad search\/seizure powers, but constitutional rights override if compulsion becomes testimonial.<\/p>\n Here\u2019s a clear, concise paragraph explaining the interaction between Section\u202f94\u202fBNSS<\/strong> and Section\u202f69\u202fIT\u202fAct<\/strong>:<\/p>\n Section\u202f94\u202fBNSS<\/strong> empowers courts or investigating officers to summon or require the production of \u201cdocuments or other things,\u201d including electronic devices, for investigation. However, it does not explicitly authorize compelling a person to reveal a password\u2014a mental act protected under Article\u202f20(3).<\/p>\n In contrast, Section\u202f69 of the IT Act<\/strong>\u00a0allows the government to direct decryption of electronic information in cases involving national security or public order. The tension arises because Section\u202f69 operates at an institutional level (targeting service providers or intermediaries), while Section\u202f94 targets individuals.<\/p>\n Forcing an accused to disclose a personal password under Section\u202f94 may breach constitutional safeguards against self\u2011incrimination, whereas Section\u202f69\u2019s decryption orders are administrative and subject to procedural oversight. Together, they illustrate the delicate balance between investigative necessity and the constitutional right to privacy and mental autonomy.<\/p>\n Current Legal Position (Practical Takeaway)<\/strong><\/p>\n No uniform rule yet<\/strong>: Different High Courts have taken opposite views. Karnataka\/Kerala lean toward allowing compulsion for better investigation (especially in serious crimes like drugs, terrorism, or fraud). Delhi courts emphasize constitutional protection and the right to silence.<\/p>\n Police cannot physically torture or illegally coerce you. They can:<\/p>\n For biometrics:<\/strong> It’s easier for police to compel in many views.<\/p>\n The law is rapidly evolving. Petitions have reached the Supreme Court on device seizures and passwords; a clear authoritative ruling is needed.<\/p>\n Key Principles at a Glance<\/strong><\/p>\n Testimonial vs. Physical Evidence<\/strong><\/p>\n Privacy vs. Investigation<\/strong><\/p>\n Biometric vs. Password Access<\/strong><\/p>\n Conclusion<\/strong><\/p>\n Police and courts want access to digital evidence for modern crimes, but the Constitution strongly protects against forcing someone to “speak” from their mind against themselves. The prevailing protective view (especially in Delhi rulings) is that police cannot legally force disclosure of a password if it amounts to testimonial compulsion under Article 20(3). They should rely on technical bypassing methods instead. However, in practice, cooperation is often expected, and refusal can have consequences depending on the court.<\/p>\n Note:<\/strong> This is not legal advice. Outcomes depend on specific facts, the crime, and the court. Consult a lawyer immediately if your device is seized. The Supreme Court may soon provide clearer guidelines, balancing investigation needs with fundamental rights. The area continues to develop through new judgments.<\/p>\n","protected":false},"excerpt":{"rendered":" Smartphones hold our most private information \u2014 chats, photos, bank details, locations, and more. They contain the “intimate details of life.” When police seize a phone during investigation, can they force the owner (especially an accused person) to disclose the password? This clashes with two big constitutional rights: the right to privacy (under Article 21)<\/p>\n","protected":false},"author":49,"featured_media":21716,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"two_page_speed":[],"_jetpack_memberships_contains_paid_content":false,"_joinchat":[],"footnotes":""},"categories":[97],"tags":[3343,28],"class_list":["post-21717","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology-laws","tag-technology-laws","tag-top-news"],"yoast_head":"\n\n
\n
\n
\n
\n
\n
\n
\n