All your devices should be protected with a password, PIN, or biometric lock (for example, face- or fingerprint). That way, even if someone were to steal, seize, or just open your device, they would not be able to easily access its contents without the password or biometrics. We recommend not to use the pattern/ swipe unlock for two reasons: it’s reasonably easy for someone who observes you move your finger to guess the pattern, and you can leave fingerprint smudges which reveal the shape of this swipe.

mobile phone with passcode on the screen. next to a cup of coffee

Photo by Jakub Żerdzicki on Unsplash

In Malaysia, the police can request you to unlock your devices or give out your password as part of conducting a criminal investigation (per section 116, Criminal Procedure Code). However, in situations where it might incriminate yourself in a crime, you may choose to refuse or choose the right to remain silent.

The first layer of defense is to know your legal rights and what police are and are not allowed to ask of you (also remember that police do not always keep to the rules they set for themselves). Check out the following links for guidance on what to do when stopped by police and they try to search your devices:

There are also several other security steps you could take to protect your data even during a search. Those include:

  • If possible, save some of your sensitive contacts under pseudonyms rather than their real names. You can also use code words when texting people about sensitive locations, matters, or events.

  • Some apps, such as Google Photos, will have a hidden folder that requires additional steps to find. Since different apps and different makes of phones have different settings, spend some time researching which one of them has hidden folder functionality.

  • Some messengers, like WhatsApp, will also have the option to hide certain chats so they cannot be accessed without an additional passcode or unlock.

  • Different versions of Android also allow you to hide certain apps. The exact steps depend on your device manufacturer. You can use those features to hide sensitive apps, such as dating apps.

  • Finally, Android allows you to run several user accounts on the same device. That way, you can have one account where you are always logged in and which has all of the innocuous apps and content and another account where you keep sensitive content.

All of the above steps will allow you to hide content in such a way that a police officer or someone else who is not very experienced in device searches will not be able to see sensitive details stored on your phone. At the same time, somebody who is experienced and actively looking for hidden content might have little trouble finding it. You can always explain that you are hiding files like this because they are secret work or personal files.

Therefore, it Is still highly recommended to protect your devices with passwords. If you use a PIN or passcode to log into your device, make sure that it is not captured by high resolution cameras, for example security cameras in elevators.

Be aware that law enforcement and security agencies may also have the technical knowledge to unlock certain makes and models without needing either a passcode or biometrics, but this type of unlocking usually requires significant resources and investment. The best way to protect yourself against such forced unlocking is to have a longer, more complex passcode and keep the operating system on your device up to date.

 

(content adapted from SaferJourno)

Last modified: Wednesday, 4 February 2026, 6:09 AM