[kaba0]

Oh yeah, for some reason my brain reversed the logic, thanks! :D

Though certain EU courts can “make you give up” your password, as far as I know. Nonetheless, security is only good when it is used — widely-used biometrics with a potentially stronger password (due to not having to enter it all the times) is statistically safer for the population over everyone having “password1” as a secret. Especially with a good fallback like emergency mode on iphone/apple watch. Afterwards only the password can unlock the device, and it is a single long press of two hardware buttons.

[crimsontech]

They can’t …prove… you know a key to decrypt data, but in the UK you can be charged under the Regulation of Investigatory Powers Act.

“RIPA regulates the manner in which certain public bodies may conduct surveillance and access a person's electronic communications. The Act:

enables certain public bodies to demand that an ISP provide access to a customer's communications in secret;

enables mass surveillance of communications in transit;

enables certain public bodies to demand ISPs fit equipment to facilitate surveillance;

enables certain public bodies to demand that someone hand over keys to protected information;

allows certain public bodies to monitor people's Internet activities;

prevents the existence of interception warrants and any data collected with them from being revealed in court.”

https://en.m.wikipedia.org/wiki/Regulation_of_Investigatory_...

[krastanov]

You are right about the EU. There are many free democracies that do not consider passwords to be protected under their "no self-incrimination" version of the US 5th amendment.