Australian man says border force made him hand over phone passcode

Original Article ↗ Hacker News Discussion ↗

Reports that Australian border officials compelled a dual national to hand over his phone passcode under threat of indefinite seizure have reignited concerns about digital privacy at national borders. Commenters compare similar practices in the US and other “Five Eyes” countries, noting that citizens and even permanent residents have limited protections against device searches and data imaging. Many propose practical countermeasures—such as traveling with wiped or burner devices, storing data in the cloud, or using separate profiles—while others argue these laws reflect a broader erosion of civil liberties justified by security and anti-terrorism rhetoric.

Digital privacy at borders

  • Many commenters describe border device searches (Australia, US, Canada) as increasingly normalized, with reduced rights at borders compared to inside the country.
  • Some note key-disclosure laws (e.g., Australia, UK) where refusing to provide passwords can itself be a crime.
  • Several share first-hand experiences of being compelled to unlock devices or face confiscation and lab analysis, especially as non‑citizens or permanent residents.
  • There is concern that governments justify powers via terrorism/child protection but then use them broadly, with little accountability or transparency.

Travel strategies to protect data

  • Common advice:
    • Travel with a wiped or “factory fresh” phone and laptop, then restore from cloud backup after crossing the border.
    • Use a dedicated “travel phone” or burner with only minimal, non‑sensitive data (contacts, hotel, airline apps).
    • Keep real data on home servers or cloud accounts and avoid storing sensitive material locally.
  • Practical issues raised:
    • Banking and 2FA apps often don’t restore cleanly and require re‑enrollment.
    • Keychain access means unlocking a device may expose nearly all online accounts.
    • Some worry that a wiped high‑end device may raise suspicion; others argue border agents see such setups regularly.
    • Suggestions include Android work/profiles, encrypted 2FA backups (e.g., Aegis, KeePassXC, password managers), and leaving main devices at home.

Duress and decoy concepts

  • Several wish for OS‑level “duress passcodes”:
    • Ideas include unlocking only a limited set of benign data or a fake profile.
    • Others note that obvious wiping/bricking under duress could backfire by signaling non‑cooperation.

Perceptions of border authorities

  • Some characterize border forces as effectively unaccountable in practice, with significant discretion to detain, search, or deny entry and little incentive to respect travelers’ feelings or privacy.
  • Others argue that most people pulled aside are eventually admitted and that plausible, calm explanations (e.g., fear of theft) can minimize trouble, though this is contested.

Broader political concerns

  • Discussion links these practices to wider trends: growing surveillance, facial recognition at airports, censorship, and “nanny state” tendencies.
  • Australia is noted as lacking a national bill of rights, making rights protections more piecemeal and vulnerable to overreach.