Passcodes, biometrics, and preparing your device.

There is no universal passcode-versus-face rule.

Do not rely on the shorthand that a face or fingerprint can always be compelled while a passcode never can. Compelled unlocking raises fact-specific legal issues, and courts have reached different conclusions.

The relevant questions include the legal authority asserted, what the government already knows, the requested act, and the jurisdiction. A warrant to search and an order requiring your assistance are not interchangeable descriptions.

If you receive an order or demand, get advice about that specific situation. Changing a setting does not create a legal right to refuse, and this article cannot establish whether refusal is lawful or what consequences could follow.

Technical preparation can reduce avoidable exposure. It should happen as ordinary security practice, not as destruction or concealment of evidence in response to an investigation.

A restart changes the technical state, not the law.

On supported devices, some encryption keys become available only after the first passcode unlock following a restart. Locking the screen after normal use is not necessarily the same technical state. The details depend on the device, operating system, and data protection class.

Apple documents different protection classes and their key availability. That is a reason to understand your device's protections, not a guarantee that a powered-off phone cannot be examined. Vulnerabilities, device versions, available tools, and cloud-held copies can change the practical result.

Use a strong passcode, install supported updates, and verify backup and account recovery. Avoid keeping data on a travel device that you do not need, subject to legal and organizational preservation requirements.

Apple Platform Security: Data Protection. Consult the equivalent documentation for your device.

Prepare before you need the controls.

1. Update and back up. Confirm that important information can be recovered without the phone and that the backup itself is protected.
2. Review what is available while locked. Check notifications, voice assistance, accessories, and other lock-screen features against your needs.
3. Learn your model's controls. Follow the manufacturer's instructions for locking, restarting, and temporarily requiring the passcode. Practice without accidentally placing an emergency call.
4. Review the data you carry. Minimize unnecessary local copies under your organization's policies. Do not delete material you are required to preserve.
5. Keep essential contacts separately. Include someone who can help if your phone or account is unavailable.

Do not choose a security setting you cannot operate reliably. If you carry sensitive work material, make the preparation plan with the person responsible for that data.

Employer devices need a separate answer.

A workplace laptop, managed phone, or work account may be subject to organizational administration and monitoring. Review the actual policy, device management, and account ownership before assuming that activity is private.

That does not mean employers have unlimited authority. Privacy and employment rules, contracts, consent, and the facts can matter. Puerto Rico's constitutional privacy protections have been applied in private-employer disputes; this is not an automatic rule for every monitoring practice.

Keep personal accounts and sensitive personal activity off work systems where practical. If you believe monitoring is unlawful or creates a safety risk, seek advice using a safer device. Do not remove management software or alter evidence as a substitute for advice.