Detention risk: planning data, contact and responsible help

If detention, device seizure or a forced inspection is a real possibility for you, it is better to have made some decisions before that day arrives. This page is not legal advice and it does not replace a lawyer. Its aim is to reduce the data you carry, make emergency contact clear, and avoid steps that, done without coordination, put other people at risk. Do not push other people into actions that would put them at risk as well.

Lock details and carrying less are covered further in the guides to physical information security and digital security while traveling. Build the backup from backups you can restore.

Carry less data

A phone or laptop that is with you may be unlocked or taken. Do not carry files and accounts you do not need that day. Every open app, every synced chat and every file on the desktop can widen what is exposed.

1. On a day when the risk is closer, review the device you will carry: which accounts are signed in and which files are unnecessary.
2. Move sensitive work documents off the device you carry to a place that is not coming with you, and remove those copies from the device if you no longer need them there.
3. Look at the gallery, downloads and messengers that keep a long history; an old file can disclose more than you need that day.
4. Do not put a second device or a home computer that holds your whole digital life into the bag if you do not need it that day.

Understand the lock, biometrics and encryption

Use a strong lock. In some legal systems compelling a fingerprint is treated differently from compelling a passcode, and some people turn biometrics off in that situation. That depends on local law and on your circumstances; it is not a single rule for everyone. Disk encryption helps while the device is locked, but if you are made to unlock it that layer no longer stands in the way.

1. Choose a lock you will actually use every day; a lock you constantly bypass is not really there.
2. If you turn biometrics off, practice signing in with the strong PIN or password beforehand so you do not drop the lock in a hurry.
3. Limit lock-screen notification previews for sensitive messengers.
4. Turn on disk encryption and keep the recovery key off the device you carry.

Keep backups and recovery off the device you carry

Do not keep recovery codes and backups only on that same device. If the device is taken, that only copy goes out of your reach as well. Keep a restore-able copy somewhere safe, with someone you trust or in an account that is separate from the device you carry.

1. Write the password vault, second-factor backup codes and the disk recovery key somewhere that will not disappear with the phone you carry.
2. Test a restore once in calm conditions so you do not discover on the day of an incident that the way back is closed.
3. Tell the person who holds a copy that they are not entitled to open your accounts or delete anything without a prior agreement.
4. If an account is reachable from another device, follow recovering a compromised account from that other device after an incident, not necessarily from the device that was taken.

Contact and responsible help

Agree in advance with one or two people what they should do if they do not hear from you: whom to call, what not to make public, and what data they are not entitled to open on your behalf. Rushed help — such as signing into your accounts or deleting things without a plan — can make a situation worse.

1. Choose one primary person and, if you can, one fallback who understand the local risk.
2. Write down after how long without news they should act, and what they should not do.
3. Say whether they may notify family, a lawyer or an organization, and whether they have any right to publish anything.
4. Keep an emergency contact list somewhere other than that same phone. If the device is taken, someone should still be able to find the people who need to know.
5. Do not push other people to hold highly sensitive data or to do something that would put them at risk of detention themselves.

Talk to a lawyer, not only to this page

Local law on searching a device, the right to remain silent and what can be demanded of you differs from place to place. This page does not interpret that law for you.

1. If this risk is serious for you, talk to a lawyer or another trusted person who understands the local situation.
2. Ask specific questions: what rights you have if a device is taken, and what people close to you can lawfully do.
3. Put the lawyer’s or trusted contact’s number on the list that does not live only on the phone.

What this page does not ask of you

• Hiding a crime or destroying evidence in order to interfere with a legal process.
• Pushing a friend or colleague to sign into your accounts or to lie on your behalf.
• Installing an unknown “instant wipe” tool in a moment of fear.

The aim is to reduce unnecessary data you carry and to have a clear contact plan so that if something happens the harm to you and to people around you is smaller, and so that nobody does something hasty out of fear or rush.

If the device comes back, do not trust it immediately

A device that has been out of your hands may have new settings or new content. That is not proof of a break-in; the practical meaning is that you should pause before opening every account on it again.

1. Review main accounts from another device that did not travel with you: new sessions, a password change or a change to the second factor.
2. If you can, do not change passwords from the returned device itself.
3. If you see signs, follow the malware-response and account-recovery paths from the other device.
4. Until the situation is clearer, do not put fresh highly sensitive data on that same device.

Keep the plan confidential and simple

Writing a long plan in a large chat can itself involve more people. An emergency arrangement should be something those one or two people can actually carry out.

1. Do not write unnecessary details in a public group.
2. Walk through once with those people how they will recognize the “if you do not hear from me” point; a vague arrangement does not help in the moment.
3. If you belong to a group, see the group coordination in community physical and digital safety and do not mix it with your personal plan unless the group itself wants that.

Plan travel and public gatherings separately

Detention risk is not always tied to travel, but a border, a gathering or an assignment in another city can make that day more sensitive. The travel guide has more detail; here the link is only to the data you carry.

1. Before you leave, clear extra files and accounts from the device.
2. Do not plug an unknown charger or cable into a sensitive device.
3. If you can, take a simpler number or device for everyday coordination that day and leave the main archive at home.

Lighten the accounts in advance

Some disclosure does not come from the device itself, but from an account left open on it that shows everything through the cloud. Carrying less data includes closing extra sessions.

1. In messengers, review linked devices and cut what you do not need.
2. Close open browser sign-ins to mail and cloud storage if you do not need them that day.
3. Temporarily limit gallery or document sync if it pulls the whole archive onto the phone.
4. After that period, open sessions again deliberately and with a fresh password if needed.

Prepare a short explanation for family or a colleague beforehand

If people close to you do not know what to do if they hear nothing, they may write details on a social network out of fear that do not help. A short, agreed explanation in advance reduces a rushed reaction.

1. Say whom they should call and what they should not make public.
2. Do not ask them to do something that would put them at risk.
3. If you do not want them to know details of your work, respect that limit and keep only the contact plan clear.

Common mistakes

• Carrying the whole work archive “just in case” on a day when the risk is higher.
• The only backup and recovery codes sitting on that same phone.
• No arrangement with anyone, on the assumption that “the others will know what to do.”
• Asking others to wipe accounts without a plan and without understanding the risk to themselves.
• Assuming that disk encryption still hides the text after the screen has been unlocked under compulsion.

What to do today

1. If this risk is serious for you, talk to a lawyer or another trusted person who understands the local situation.
2. Take unnecessary data off the device you carry and keep a restore-able backup in a separate, very safe place that only you reach — completely outside the everyday bag and outside that same device you carry.
3. Agree a contact plan and an “if you do not hear from me” step with one trusted person.
4. Review the lock on the device you carry and the recovery path for your main accounts once in calm conditions, so you are not thinking about them freshly and in a hurry on the day of an incident.
5. Write the emergency contact list somewhere other than that same phone, and review it once with that trusted person so the “if you do not hear from me” arrangement is clear to both of you.