# Hong Kong Can Jail You for 1 Year If You Won't Unlock Your Phone

**URL:** <https://onehack.st/t/hong-kong-can-jail-you-for-1-year-if-you-wont-unlock-your-phone/320164>\
**Category:** News & Articles\
**Tags:** eye-opening\
**Created:** [March 25, 2026, 2:24pm UTC](https://onehack.st/t/hong-kong-can-jail-you-for-1-year-if-you-wont-unlock-your-phone/320164 "2026-03-25T14:24:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [March 25, 2026, 2:24pm UTC](https://onehack.st/t/hong-kong-can-jail-you-for-1-year-if-you-wont-unlock-your-phone/320164/1 "2026-03-25T14:24:48Z")

</div>

# 🔐 Hong Kong Can Jail You for 1 Year If You Won’t Unlock Your Phone

_Police can now demand passwords under National Security Law — refuse and you’re looking at a year in jail_

**Hong Kong police gained the power to demand phone and computer passwords from anyone suspected of breaching the National Security Law. Refuse? One year in jail and a $12,700 fine. Lie about it? Three years behind bars.**

The amendments were gazetted Monday by Hong Kong leader John Lee, bypassing the legislative council entirely. Customs officials also gained authority to seize items with “seditious intention” — whatever that means.

![Locked Phone](https://media4.giphy.com/media/v1.Y2lkPTc5MGI3NjExaHlrZ2JndmE3OTVkb2hrODdscDJtdGJ6OWM5YmVvMHpsc3ZiMmZiMCZlcD12MV9naWZzX3NlYXJjaCZjdD1n/3og0IuymsB9sy0C2Vq/giphy.gif)

> **🧩 Dumb Mode Dictionary**
>
> | Term | Translation |
> | --- | --- |
> | **National Security Law (NSL)** | Sweeping law passed in 2020 after Hong Kong’s pro-democracy protests — targets “terrorism” and “secession” but critics say it crushes dissent |
> | **Gazetted** | Published in the official government record — making it legally binding |
> | **Seditious intention** | Vague legal term for content authorities deem threatening to state security |
> | **Bypass legislative council** | The leader announced it without a vote — no debate, no input from elected officials |

> **📜 What the Law Actually Says**
>
> The amendments to Hong Kong’s National Security Law now grant police three new powers:
> 
> - **Demand passwords** from anyone suspected of NSL violations
> - **Jail refusers** for up to one year plus fines up to HK$100,000 (~$12,700 USD)
> - **Prosecute liars** who provide “false or misleading information” for up to three years
> 
> Customs officials also gained seizure authority over items with alleged “seditious intention.” The government claims this “effectively prevents, suppresses and punishes activities endangering national security” while protecting “lawful rights and interests of individuals and organizations.”
> 
> But here’s the thing — the NSL already allows trials behind closed doors. And John Lee bypassed the legislative council to announce these changes.

> **📊 The NSL Track Record**
>
> | Metric | Number |
> | --- | --- |
> | **Year NSL passed** | 2020 |
> | **Jail time for password refusal** | Up to 1 year |
> | **Fine for password refusal** | $12,700 |
> | **Jail time for lying about password** | Up to 3 years |
> | **Legislative votes required** | 0 (bypassed) |

> **🗣️ What Authorities Are Saying**
>
> Hong Kong officials framed the amendments as necessary for stability. According to the government statement:
> 
> > “Activities endangering national security can be effectively prevented, suppressed and punished, and at the same time the lawful rights and interests of individuals and organizations are adequately protected.”
> 
> The NSL itself was introduced in 2020 following massive pro-democracy protests in 2019. Authorities argue laws targeting terrorism and secession are essential for order. Critics? They call it a tool to silence dissent.

> **🌍 The Bigger Picture**
>
> This isn’t happening in a vacuum. Hong Kong’s National Security Law has been controversial since day one. It criminalizes secession, subversion, terrorism, and collusion with foreign forces — all under definitions broad enough to include peaceful protest.
> 
> Since 2020, the law has been used to arrest pro-democracy activists, shut down independent media outlets, and dismantle civil society organizations. Trials can happen behind closed doors. Appeals are limited.
> 
> Now, your phone is fair game. And refusing to hand over your password is a criminal offense punishable by jail time.

#### Cool. Your Phone’s Password Just Became State Property… Now What the Hell Do We Do? ಠ\_ಠ

![VPN](https://media4.giphy.com/media/v1.Y2lkPTc5MGI3NjExbjdrYXZyaDNsYng1Ymptb2l2eDNtY2dkMjFhdTg4amg4MXlneHplaSZlcD12MV9naWZzX3NlYXJjaCZjdD1n/QpVUMRUJGokfqXyfa1/giphy.gif)

> **🛡️ Use a Burner Phone for Protests**
>
> Keep a second phone with zero sensitive data. Use it for public activities. Store nothing incriminating.
> 
> 🧠 _Example:_ A journalist in Hong Kong carries an iPhone 8 with only WhatsApp and Signal installed — no contacts, no photos, no notes. Their real phone stays home. When police demand the password at a protest checkpoint, they unlock the burner. Nothing to find.
> 
> > 📈 **Timeline:** Set up in 1 day with a used phone from local markets (~$50-150 USD)

> **🔐 Enable Full-Disk Encryption + Wipe Features**
>
> Turn on encryption and remote wipe capabilities. If police seize your device, trigger the wipe remotely before they crack it.
> 
> 🧠 _Example:_ A developer in Shenzhen enabled FileVault on macOS and Find My iPhone with remote wipe. When stopped at customs, they remotely wiped the device from their laptop within 2 minutes using cellular data. Police got an activation-locked brick.
> 
> > 📈 **Timeline:** Enable encryption in 10 minutes; practice remote wipe once to know the drill

> **📱 Use Secure Messaging Apps with Disappearing Messages**
>
> Signal, Session, or Threema with auto-delete enabled. Set messages to vanish after 24 hours or less.
> 
> 🧠 _Example:_ An activist in Taipei uses Signal with disappearing messages set to 1 hour. All chats auto-delete. Even if police demand the password, there’s no message history to seize.
> 
> > 📈 **Timeline:** Download and configure Signal in under 5 minutes

> **💼 Store Sensitive Files in Encrypted Cloud Vaults**
>
> Use Tresorit, ProtonDrive, or Cryptomator. Keep zero sensitive files on your physical device.
> 
> 🧠 _Example:_ A researcher in Singapore stores all interview recordings and notes in a Tresorit vault encrypted with a 24-character password. Their phone has nothing but a browser bookmark. Police demand the password, unlock the phone, and find… a weather app and Spotify.
> 
> > 📈 **Timeline:** Set up encrypted cloud storage in 30 minutes; migrate files over 1-2 days

> **🌐 Use a VPN or Tor for All Browsing**
>
> Route all traffic through ProtonVPN, Mullvad, or Tor Browser. Clear browsing history after every session.
> 
> 🧠 _Example:_ A freelance writer in Macau uses Mullvad VPN with DNS leak protection and clears cookies on browser close. Police unlock their phone and find a blank browser history. Nothing to investigate.
> 
> > 📈 **Timeline:** Install VPN in 5 minutes; configure auto-clear settings in 10 minutes

> **🛠️ Follow-Up Actions**
>
> | Want | Do |
> | --- | --- |
> | 🛡 **Test your setup** | Ask a friend to try unlocking your burner phone and see what they find |
> | 📖 **Learn your rights** | Read up on Hong Kong’s NSL and know what police can (and can’t) legally demand |
> | 🌐 **Join privacy communities** | r/privacy, r/opsec, or Techlore’s forum for ongoing advice |
> | 💬 **Share this info** | Forward to friends in Hong Kong or regions with similar laws |

**⚡ Quick Hits**

| Want | Do |
| --- | --- |
| 🔐 **Protect your phone now** | Enable full-disk encryption + remote wipe |
| 📱 **Go burner** | Buy a second phone with zero sensitive data for public use |
| 🌐 **Route traffic safely** | Install ProtonVPN or Mullvad and auto-clear browser history |
| 💾 **Move files off-device** | Use Tresorit or ProtonDrive to store sensitive docs in encrypted cloud vaults |
| 🗣 **Use disappearing messages** | Turn on Signal’s auto-delete for all chats |

_Your phone’s password is now a get-out-of-jail card — or a ticket in._
