Riley v. California, decided in 2014, established the modern baseline: police search your phone only with a warrant once you’re under arrest, not as a matter of routine, because the Supreme Court concluded a phone is not a cigarette pack. The old rule let officers search an arrestee’s pockets on the spot, no warrant needed. The justification was simple: officers might find a weapon, or evidence might vanish. A phone holds something different: years of messages, photos, and financial records, all in one seized object. The Court declined to stretch a pocket-search rule built for physical objects onto that much information.
Why Police Search Your Phone Differently Than Your Pockets
The Supreme Court’s holding was direct: “police generally may not, without a warrant, search digital information on a cell phone seized from an individual who has been arrested.” The search-incident-to-arrest exception exists for a reason: officers might find a weapon, or evidence might disappear in the moment. That reasoning covers a wallet, a cigarette pack, the contents of a pocket. It does not cover a phone’s data. A phone isn’t a container in the traditional sense; it’s a window into someone’s entire digital life. Modern phones hold more personal information than most homes do. The Court measured the search against that scale, not the old rule built for physical objects.
The Exceptions Riley Still Allows
Riley did not eliminate every path around a warrant; it preserved the exigent-circumstances exception that already existed, covering a suspect about to destroy evidence, a fleeing suspect, or someone hurt and needing immediate help. Courts assess each of those case by case, on the specific facts in front of them. None of that is unique to phones — it’s the same exigency doctrine that applies to a house or a car. Consent is a separate route entirely, and it has nothing to do with Riley. Ordinary Fourth Amendment law has long allowed a search when someone voluntarily agrees to it. That rule traces back to Schneckloth v. Bustamonte, decided decades before smartphones existed. Handing over an unlocked phone, or reciting a passcode out loud, waives the warrant requirement. It works the same way unlocking a front door for police does.
Your Phone Isn’t the Only Source: Cell-Site Location Data
Carpenter v. United States, decided in 2018, extended the warrant requirement somewhere unexpected: your phone company’s own records. The Court held that obtaining historical cell-site location records from a wireless carrier “was a search” requiring “a warrant supported by probable cause.” Cell towers log which tower your phone connects to throughout the day. That builds a map of your movements even if you never unlock the screen. Carpenter’s holding was narrow on purpose. It covered seven days of records. The Court declined to say whether a shorter stretch needs a warrant too. The lesson carries beyond location history: the phone in your pocket isn’t the only path to what it knows about you.
Can Police Search Your Phone at the Border?
The border is where the warrant requirement genuinely breaks down. Federal appeals courts don’t even agree on how far the exception reaches. The Ninth Circuit and the Fourth Circuit both require reasonable suspicion before agents run a forensic search of a device. That’s the kind of search that plugs the phone into equipment copying and analyzing everything on it. The Eleventh Circuit disagrees entirely: it requires no suspicion at all, even for that same forensic search. The Supreme Court hasn’t stepped in to resolve the split. So the rule that applies can depend on which circuit’s airport you land in.
Customs and Border Protection has its own internal policy layered on top of all this — not a court ruling. CBP Directive 3340-049A, issued in January 2018, separates a “basic” search from an “advanced” one. A basic search is an agent manually scrolling through the phone. An advanced search uses forensic tools, and agency policy says that one needs reasonable suspicion or a national-security concern. That distinction is policy, not constitutional law, and policy can change without a court ever weighing in.
Passcodes vs. Fingerprints: The Compelled-Unlock Split
Whether police can force you to unlock your phone turns on a decades-old doctrine with nothing to do with phones. Fisher v. United States created the “foregone conclusion” exception. The Fifth Amendment offers no protection once the government already knows a thing exists, that the person has it, and that it’s genuine. State supreme courts have split hard on applying that old doctrine to a passcode stored only in someone’s memory. New Jersey, Massachusetts, and Illinois allow compulsion on a narrower showing. Prosecutors there just have to prove the person knows the passcode. Pennsylvania, Indiana, and Utah demand more. Prosecutors there have to show the government already knows what’s on the device before a court will compel the code. The Supreme Court has not resolved the split, and it denied review in both the Illinois and Utah cases in 2024.
Biometrics get treated as a different problem entirely, and the asymmetry is the sharpest point in this whole area of law. The Ninth Circuit held in United States v. Payne that pressing a suspect’s thumb to a phone isn’t testimonial at all. So the Fifth Amendment never comes into play, and the Supreme Court denied review of that case in November 2024. The practical asymmetry is the sharpest point here: a passcode is something you know, and the constitution can protect that. A fingerprint is something you are, and courts have generally treated that as far easier to compel.
The bottom line
Riley’s core rule is about as clear as constitutional criminal procedure gets: absent an exception, police search your phone only after a judge signs a warrant, not as a routine add-on to an arrest. Everything else in this area is far less settled than that headline rule suggests. Exigency and consent both predate smartphones and get applied case by case, not according to any phone-specific standard. The border split between circuits remains genuinely unresolved, with no Supreme Court answer in sight. And whether police can force open a locked screen still depends on which state you’re in. Biometrics get treated as fair game far more often than a passcode does. That gap between a passcode and a fingerprint is the honest state of the law right now. The law shields what you know far more reliably than what you simply are.
Frequently asked questions
Generally no. Riley v. California held that police need a warrant to search a phone’s digital data even when the phone was seized during a lawful arrest.
Because a phone holds far more personal information than a physical object ever could, and the Supreme Court refused to apply the old pocket-search rule to that much data.
Yes. Riley preserved the exigent-circumstances exception for things like a suspect destroying evidence, a fleeing suspect, or someone needing immediate help, decided case by case.
Yes. That’s ordinary Fourth Amendment consent doctrine going back to Schneckloth v. Bustamonte, separate from Riley, and it waives the warrant requirement the same way consenting to any other search does.
Usually, yes. Carpenter v. United States held that obtaining seven days of historical cell-site location records is a search requiring a warrant backed by probable cause, and left shorter periods unresolved.
It depends which circuit you’re in: the Ninth and Fourth Circuits require reasonable suspicion for a forensic search, the Eleventh Circuit requires none at all, and the Supreme Court hasn’t resolved the split.
A basic search is an agent manually scrolling through the phone, while an advanced search uses forensic tools; under CBP policy, only the advanced kind is supposed to require reasonable suspicion.
State supreme courts disagree. New Jersey, Massachusetts, and Illinois allow it once prosecutors show the person simply knows the code; Pennsylvania, Indiana, and Utah require much more before compelling it.
Courts have generally treated this differently than a passcode. The Ninth Circuit held in United States v. Payne that compelling a fingerprint isn’t testimonial, so the Fifth Amendment doesn’t block it.
A passcode exists only in your memory, while a fingerprint is a physical feature, and courts have found that distinction changes how the Fifth Amendment applies.
Ready to meet your legal match?
Right case, right lawyer, zero awkward first dates. Tell us what happened and we’ll introduce you to attorneys who actually fit.
Get MatchedThis article is general information about search and seizure law and is not legal advice. Laws differ by state and change over time, and the facts of your situation matter. For guidance on your own circumstances, consult a licensed attorney in your state.
More guides on Criminal Defense
- Do You Have to Show ID to the Police?
- What Does It Mean to Be Read Your Miranda Rights?
- Being Arrested in Arizona: What Happens in the First 24 Hours
- Do You Have to Let Police Search Your Car?
- Arizona Bail and Release Conditions: How a Judge Decides at Initial Appearance
- Do You Have to Answer Police Questions?