CBP Expands Authority to Search Travelers' Phones and Laptops at US Border

You have packed your bags, double-checked your itinerary, and finally landed after a long international flight. As you approach the customs booth, the officer asks for your passport—and then asks you to unlock your smartphone. For most travelers, the digital devices we carry hold our entire lives, from banking apps and private messages to sensitive work emails. Understanding what happens next is no longer just a concern for lawyers; it is a fundamental part of modern travel planning.[1]

In 2026, U.S. Customs and Border Protection (CBP) quietly updated its policies regarding the search of electronic devices at the border. The new guidance, known as CBP Directive 3340-049B, replaces the previous 2018 framework and significantly expands the scope of what agents can examine when you enter or exit the United States.[2][3]

The legal foundation for these inspections is known as the "border search exception." Under U.S. law, the government has a compelling interest in controlling who and what enters the country, meaning the standard Fourth Amendment protections against warrantless searches are significantly relaxed at ports of entry.[4]

The 2026 directive explicitly broadens the list of devices subject to inspection. While travelers typically worry about their phones and laptops, the updated policy now covers smartwatches, SIM cards, flash drives, GPS units, unmanned aircraft systems (drones), and even vehicle infotainment systems. If a device can store or transmit digital data, it is fair game at the border.[2]

CBP divides these inspections into two distinct categories: basic searches and advanced searches. A basic search is a manual review of the device. An officer can scroll through your photos, read your text messages, and open your emails just as you would. Crucially, CBP does not need a warrant, probable cause, or even reasonable suspicion to conduct a basic search. They can perform this inspection on any traveler at any time.[1][5]

An advanced search is far more intrusive. This occurs when an officer connects your device to external forensic equipment to copy, extract, or analyze the data stored within it. Under the new 2026 rules, advanced searches require either reasonable suspicion of a legal violation or a national security concern, along with supervisory approval.[1][6]

Despite this broad authority, there is one major limitation that protects travelers: the cloud. CBP officers are only permitted to search data that is physically stored locally on the device itself. They cannot intentionally access information stored remotely on servers, such as iCloud backups, Google Drive files, or Dropbox folders, unless that data has already been downloaded to the phone.[1][2]

To enforce this boundary, officers will typically ask travelers to disable their cellular data and Wi-Fi, or place the device in airplane mode, before the search begins. This ensures that the inspection is limited to the digital luggage you actually carried across the border, rather than your entire online footprint.[1]

The question of passwords remains a point of friction. CBP officers can, and frequently do, ask travelers to provide their passcodes or unlock their devices using biometrics like Face ID. The consequences of refusing depend entirely on your immigration status.[5]

For U.S. citizens, the law is clear: you cannot be denied entry into the United States for refusing to unlock your phone. However, non-compliance is not without cost. Officers can detain your device for further forensic examination—often for five to fifteen days, or longer with higher-level approval—and you may face hours of delay in a secondary screening room.[2][5]

For non-citizens, including visa holders and lawful permanent residents (green card holders), the stakes are much higher. Refusing to cooperate with a device search can be viewed as failing to establish admissibility, which could result in being denied entry to the United States and having your visa revoked.[1][5]

The courts have consistently backed CBP's authority in this arena. In July 2026, the U.S. Court of Appeals for the Seventh Circuit issued a ruling in United States v. Eta, reaffirming that manual, warrantless searches of cell phones at the border are a routine exercise of border search authority and do not violate the Fourth Amendment.[4]

This legal reality has prompted a shift in how business travelers and corporations approach international trips. Employees in technology, defense, and healthcare frequently carry devices loaded with trade secrets, patient data, and attorney-client privileged communications.[6]

The 2026 directive does include specific protocols for handling privileged information. If a traveler asserts that their device contains attorney-client communications or journalistic work product, the officer is required to pause the search and consult with CBP legal counsel. However, asserting privilege does not stop the search entirely; it merely triggers a more rigorous oversight process.[1][6]

Ultimately, while the prospect of a digital border search sounds intimidating, the statistical reality is that they remain rare. In recent fiscal years, CBP has searched the electronic devices of less than 0.01 percent of all arriving international travelers.[7]

Still, the best defense is preparation. Privacy experts and immigration attorneys increasingly advise travelers to treat their digital devices like their physical luggage: only pack what you actually need for the trip. By backing up data, removing sensitive files, and logging out of unnecessary applications before heading to the airport, travelers can cross the border with confidence and peace of mind.[1][2]