[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"stats-overview":3,"kb-article-section-49":10},{"officers":4,"forces":5,"courts":6,"prisons":7,"hearings":8,"legals":9},769,50,224,120,41,11437,{"id":11,"slug":12,"name":13,"content":14,"category_id":15,"source":16,"source_url":16,"source_ref":16,"licence":16,"sort_order":17,"published":18,"created_at":19,"updated_at":20,"category":21,"category_icon":22,"category_slug":23,"excerpt":24,"word_count":25,"reading_time":26,"is_official":27,"related":28,"previous":16,"next":56},"16","section-49","Section 49 RIPA notices: being ordered to hand over a password","Section 49 of the Regulation of Investigatory Powers Act 2000 (RIPA) is the power that turns a request for your password into a legal order. It is used against encrypted phones, computers and files that the police cannot otherwise get into.\n\nWhat a section 49 notice is\n\nA written notice requiring you to disclose a key, password, PIN or passcode, or to put protected information into an intelligible form, within a set time. For the police to serve one, the following must be true:\n\n- They have lawfully obtained the protected information, for example on a seized device.\n- They have reasonable grounds to believe the key is in your possession.\n- Disclosure is necessary in the interests of national security, for preventing or detecting crime, or for the economic well-being of the UK.\n- The requirement is proportionate to what it is meant to achieve.\n- It is not reasonably practicable to get the information any other way.\n\nPermission to serve the notice must normally be given by a judge (a Circuit Judge or District Judge in England and Wales). The notice itself must be in writing, describe the information it relates to, state the time limit, say which office or rank gave permission, and explain how the disclosure is to be made.\n\nWhat happens if you don't comply\n\nFailing to comply is an offence under section 53, punishable by up to two years' imprisonment, or up to five years where the case concerns national security or indecent images of children. It is a separate offence from whatever is being investigated, and people have been imprisoned under it where no other charge was ever brought.\n\nThe defence of not having the key\n\nSection 53 has a built-in defence: if you can show there is enough evidence to raise the issue that you did not have the key at the time the notice was served, the prosecution must then prove beyond reasonable doubt that you did. Genuinely forgetting a password is therefore a defence, but a court will test how plausible that is in your circumstances: how recently the device was used, whether you had set the password yourself, and what you said when first asked. Inventing a forgotten password is lying to the police and can be perverting the course of justice.\n\nSecrecy\n\nSection 54 allows a notice to include a secrecy requirement: in some cases you are not permitted to tell anyone (other than your lawyer) that you have received it. Breaching that is also an offence.\n\nWhat to do if you receive one\n\n- Do not respond immediately. Tell the officers you want to speak to a solicitor, and do so before saying anything about whether you know the password.\n- Keep the notice and note the time limit.\n- Your solicitor can check whether the notice was properly authorised and proportionate, and advise you on compliance or on challenging it.\n\nSection 49 notices are relatively rare: most investigations rely on forensic extraction or on persuasion. But if you are served with one, treat it as seriously as a charge.\n\nThis is general information for England and Wales, not legal advice. If you have been arrested or charged, speak to a solicitor: advice at the police station is free for everyone.","8",null,0,true,"2022-04-13T20:05:27.000Z","2026-10-06T09:14:18.000Z","Sections","mdi:format-section","sections","Section 49 of the Regulation of Investigatory Powers Act 2000 (RIPA) is the power that turns a request for your password into a legal order. It is used…",544,3,false,[29,35,42,51],{"id":30,"slug":31,"name":32,"source":16,"source_url":16,"sort_order":17,"category":21,"category_icon":22,"category_slug":23,"excerpt":33,"word_count":34,"reading_time":26,"is_official":27},"15","section-50","Section 50: when the police can demand your name and address","Normally you do not have to give the police your name and address. Section 50 of the Police Reform Act 2002 is the main exception, and it is linked to…",526,{"id":36,"slug":37,"name":38,"source":16,"source_url":16,"sort_order":17,"category":21,"category_icon":22,"category_slug":23,"excerpt":39,"word_count":40,"reading_time":41,"is_official":27},"17","section-8","Section 8 PACE: how police search warrants work","A \"section 8\" is the standard police search warrant in England and Wales, issued under section 8 of the Police and Criminal Evidence Act 1984. If officers…",652,4,{"id":43,"slug":44,"name":45,"source":16,"source_url":16,"sort_order":17,"category":46,"category_icon":47,"category_slug":48,"excerpt":49,"word_count":50,"reading_time":26,"is_official":27},"23","can-my-password-be-bypassed","Can the police get into my phone without my password?","CyberCrime","mdi:shield-lock","cybercrime","Often, yes. Police digital forensics units use commercial tools (the best known are made by Cellebrite, Magnet Forensics and Grayshift) that can extract data…",531,{"id":15,"slug":52,"name":53,"source":16,"source_url":16,"sort_order":17,"category":46,"category_icon":47,"category_slug":48,"excerpt":54,"word_count":55,"reading_time":26,"is_official":27},"do-i-have-to-give-the-police-my-password","Do I have to give the police my password?","Not unless they serve a formal notice under section 49 of the Regulation of Investigatory Powers Act 2000 (RIPA), or you are being examined at a port or…",591,{"slug":31,"name":32}]