GrapheneOS Duress Passcodes Draw Scrutiny After U.S. Border Seizure Case

Destructive duress passcodes on smartphones are drawing attention after reports highlighted how the feature can wipe a device instead of unlocking it when a user is under coercion. On GrapheneOS for Google Pixel phones, the duress PIN feature introduced in June 2024 erases user profiles, their data, and the eSIM partition by destroying disk-encryption keys, making recovery impractical. The reports note that stock Android and iOS do not provide an equivalent built-in duress passcode, relying instead on slower local or remote wipe options.

The legal risks of using the feature came into focus through the case of Atlanta resident Samuel Tunick, who allegedly triggered a duress passcode during a Customs and Border Protection inspection at Hartsfield-Jackson International Airport in January 2025. Prosecutors charged him under 18 U.S.C. § 2232 for allegedly destroying property to prevent lawful seizure, while his attorneys are contesting the device seizure on Fourth Amendment grounds. The case underscores unresolved legal questions in the U.S. and other jurisdictions over compelled device unlocking and whether intentionally wiping a phone during a lawful search can itself become a criminal act.