GrapheneOS duress PIN could land a man in prison

https://www.androidauthority.com/grapheneos-duress-pin-us-prosecution-3691271/

Comments

pogueJul 26, 2026, 7:57 AM
If he hadn't given the authorities the duress pin, and presumably they had seized it, would the encryption/protection GrapheneOS provides have been enough to keep them from accessing it's contents? I've never used Graphene so I'm unfamiliar with all it's features.

My Samsung phone has a feature to automatically format the device if the wrong code is entered X number of times, and I have security software that would let me wipe it remotely (if it still had internet access) so this whole situation brings up a lot of questions about features like this.

EDIT More discussion about it here, but it's quite technical. I was a bit confused about the rate limiting stuff and etc.

GrapheneOS protections against data extraction from locked devices - HN Post https://news.ycombinator.com/item?id=49055169

harshrealityJul 26, 2026, 11:28 AM
Providing a duress PIN to wipe your phone when they ask for the passcode? Any realistic person can predict that could have major legal repercussions. Cypherpunks have pondered the legal consequences of blatantly doing things like that for decades.

Props to the defendant for volunteering as a test case. He should've powered off his phone before he went through customs, or better yet traveled with a burner phone.

It doesn't matter if the feds are doing something wrong... if you interfere or destroy potential evidence, rather than simply recite your 5th and 6th amendment rights, you've put yourself in a whole new ball game.

He probably would've been fine if he'd maintained his refusal contingent on talking to a lawyer first. They might not have even attempted to crack the phone, and if they had, he'd have a better chance of getting the contents thrown out than he has now of fighting the destruction of evidence charge. The two issues are largely separate, unless a court decides the detention and attempted search were so egregious that they negate his separate, intentional act of wiping his phone when he was being detained.

We might wish for a mobile device to be a mobile castle immune from any [request for] search or seizure without a warrant, but that hasn't been established in case law, and everything else crossing the border (except what's diplomatically immune) is subject to some warrantless scrutiny.

halJordanJul 26, 2026, 3:32 PM
Maybe as a middle ground it could be that the duress pin is simply easier to brute force. And when the cracker gets to a 4 digit pin before the 6 digit one it triggers the erasure. Maybe wouldn't help an online attack but also wouldn't implicate a willful destruction of evidence
type0Jul 26, 2026, 5:53 PM
> ... if you interfere or destroy potential evidence,

So everything is potential evidence, even any memory in your brain, were're soon be at Johnny Mnemonic situation here.

harshrealityJul 27, 2026, 8:18 AM
No, not things in your brain. That's covered under the 5th amendment. Refusing to provide information is not the same as interfering. The portable brain scanner issue is an issue, but the legal system will get around to addressing that if and when it becomes practical enough for police to attempt using it.

The exceptions I know of are things like:

- In some situations you have to ID yourself (not just when you're driving, but that's the usual case, where they have legal authority to ID you, and if you don't have ID you have to provide the equivalent from memory so they can check your identity.)

- Face and Fingerprint unlocks are not things in your mind, they're not testimony, therefore you can be compelled to provide them, though usually by court order. If a cop in the field is forcing you to face- or fingerprint-unlock your phone, that might not be allowed.

- In a few jurisdictions, if it's a "foregone conclusion" what's on your phone, i.e. they know from other threads of the investigation what's on it, but it's just encrypted, they might be able to force you to unlock it in that case, but that's through a court order not during a field investigation.

eggn00dlesJul 26, 2026, 6:15 PM
he also told them something to the effect of ‘is my phone acting weird? the password i gave you wiped it lol’ during the process. doesnt help for a case that can set a precedent
GuestFAUniverseJul 26, 2026, 9:43 AM
Doesn't make sense to me to undermine the right to refuse information. From my POV dictatorships try to do that, not a rule of law.
inigyouJul 26, 2026, 10:08 AM
[flagged]
prisondroidJul 26, 2026, 1:45 PM
Try living in a country under a real dictatorship, one where there's no elections, where online posts will get you thrown in prison for years. Trump haters have no clue how good you have it.
inigyouJul 26, 2026, 3:22 PM
That is the country in question. I'm not going to travel there, thanks.
inigyouJul 26, 2026, 10:12 AM
Just like when India banned Bitchat, this proves GrapheneOS works and you should use it.