GrapheneOS Defends Duress Code as US Privacy Case Advances
GrapheneOS asserts its software is legal as the first US prosecution over a duress password feature proceeds. Activist Samuel Tunick wiped his phone during a warrantless border search and faces five years in prison. A judge will rule on his motion to suppress later this year.
Quick Take
GrapheneOS says its duress PIN feature is constitutionally protected and legal.
Samuel Tunick charged after wiping his phone at a border search in January 2025.
His public defender argues agents could have obtained a warrant but did not.
A ruling on his motion to suppress is expected no earlier than October 2026.
Market Impact Analysis
NeutralNon-crypto legal case with no direct market implications.
Speculation Analysis
Key Takeaways
- GrapheneOS says its duress PIN feature is constitutionally protected and legal.
- Samuel Tunick charged after wiping his phone at a border search in January 2025.
- His public defender argues agents could have obtained a warrant but did not.
- A ruling on his motion to suppress is expected no earlier than October 2026.
- The case may set a precedent on digital privacy rights, with only one prior prosecution under the statute.
What Happened
GrapheneOS, the privacy-focused mobile operating system, defended its duress password feature as "completely legal" and constitutionally protected. The statement came as the first U.S. prosecution involving the feature moves forward. Atlanta activist Samuel Tunick is accused of entering a duress PIN that wiped his Google Pixel during a warrantless border search in January 2025. He faces up to five years in federal prison under 18 U.S.C. § 2232. His public defender argues agents could have obtained a warrant but chose not to, and calls the charge extraordinarily rare.
The Numbers
The case, unfolding in federal court, hinges on a rarely used statute. Only one other prosecution under 18 U.S.C. § 2232 exists, making this a potential landmark. The duress PIN feature, added by GrapheneOS in June 2024, allows users to wipe their device by entering a specific code. Tunick’s arrest followed a year of surveillance, including a car tracker and subpoenas for his phone and email records. DHS officers called ahead to have him stopped and his phone searched, but found nothing incriminating on his person or in his bags before the phone wipe.
Why It Happened
GrapheneOS added the duress PIN to protect against data extraction at borders and other coercive scenarios. The feature is designed to be irreversible, with the company stating it cannot assist in recovering wiped data. Tunick’s defense argues the search was unconstitutional and that the government is using the case to intimidate privacy-conscious individuals. The outcome could influence how digital privacy tools are legally treated and whether users have a right to proactively protect their data from warrantless searches.
Broader Impact
If the motion to suppress is granted, it could limit the government’s ability to prosecute individuals for using privacy tools at borders. Conversely, a conviction could chill the development and use of such features. The case arrives amid growing tension between law enforcement and encrypted communications, with potential implications for device manufacturers and software developers globally.
What to Watch Next
- Motion to suppress: A ruling is expected no earlier than October 2026, which will determine the admissibility of the phone wipe as evidence.
- Legal precedent: If the case goes to trial, an appeal could shape digital privacy rights for years to come.
- Policy response: Watch for legislative or regulatory reactions that could impact the legality of duress features in operating systems.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
