The US government is prosecuting American citizen Sam Tunick for allegedly giving authorities a password that wiped his phone during a search at Atlanta's airport on January 24, 2025. The case, filed as United States v. Tunick (case number 1:25-cr-00499) in a federal court in Georgia, uses a law that makes it illegal to destroy property to stop authorities from seizing it (The Verge).

Tunick used a feature of GrapheneOS, a phone operating system built for privacy. The feature is sometimes called a "duress password." Think of it like a secret code you can type instead of your real password. Instead of unlocking the phone, it immediately erases everything on it. It is meant for situations where someone is being pressured or forced to hand over their phone and would rather destroy the information than give it up.

According to a legal filing by Tunick's lawyers, federal agents refused to let him speak to a lawyer, did not show a warrant, and did not inform him of his legal rights while detaining him. The filing argues the detention was really an excuse to dig into Tunick's connections to the Stop Cop City movement in Atlanta (The Verge). The government responded that no warrant was needed because Tunick had not yet been granted permission to enter the US, pointing to the wide authority that border agents have at ports of entry.

The Guardian first brought the case to wide attention on July 23, 2026, describing Tunick as a "Cop City protester" in its headline (The Guardian). TechCrunch followed on July 24, 2026, and The Verge published its report on July 26, 2026, citing the filing by Tunick's defense team. The CourtListener docket for the case was last updated on July 17, 2026 (CourtListener).

404 Media had previously covered Tunick's initial indictment in December of the prior year, a detail surfaced by a later Gizmodo report published July 25, 2026 (Gizmodo). Marlon Kautz, a member of the Atlanta Solidarity Fund, was quoted in The Guardian's July 23 article commenting on the case.

The prosecution applies a law about destroying property to the act of typing a password that tells the phone to erase itself. The duress password is a standard feature built into GrapheneOS, not a tool created specifically to evade law enforcement. It is designed to work exactly the way it did in Tunick's situation. Charging someone for using it means treating a privacy feature, doing what it was built to do, as a crime.

The border search context matters. The government's argument that no warrant was needed relies on the border search exception to the Fourth Amendment. That exception is a long-standing legal rule giving customs agents wide latitude to search people and belongings at the border or at airports without the usual requirement for a warrant. Whether a destruction charge can hold up when the search itself lacked a warrant, and when the person was denied a lawyer and not read their rights, is a new legal question. The defense argues the whole encounter was really about targeting Tunick's political associations, which brings free-speech concerns into what might otherwise be a simple property case.

This is not the first time privacy technology and law enforcement have clashed, but the specific mechanism here is unusual. The government is not forcing Tunick to unlock his phone or punishing him for refusing to cooperate. It is charging him for the act of destroying data, using a feature whose stated purpose is to keep data out of authorities' hands.

In this author's view, the case turns a security feature into potential legal liability. If typing a self-destruct password at a border crossing can be prosecuted as destroying property, the practical effect is to make the feature useless for the very people it was built for: anyone who expects to face coercive searches. That shift deserves close attention, not because the outcome is certain, but because it tests whether people have the right to use privacy-protecting software when it directly gets in the way of a lawful seizure.