On March 23, 2026, Hong Kong changed the implementing rules for its National Security Law. The change expanded police powers over personal electronic devices. It matters for Bitcoiners even though it is not a Bitcoin law. It is a custody story. A phone or laptop can hold the keys to a wallet, or the backups that restore one.
What changed
Under the updated rules, police may apply to a magistrate for a warrant to require a person to give access to a device or data. That means handing over a phone or computer passcode. It also means providing decryption keys or other access. Refusal is a criminal offence. The penalty is a fine of up to HKD 100,000 and up to one year in prison. Providing false or misleading information carries a heavier penalty, up to three years in prison and a fine of up to HKD 500,000. The US Consulate General in Hong Kong and Macao warned that the change applies to everyone in Hong Kong. That includes residents, visitors, arrivals, and people transiting through Hong Kong International Airport. The same rules change expanded powers to take and keep personal devices as evidence in claimed national security cases. Customs officers also gained wider seizure powers.
Why Bitcoiners should care
Bitcoin itself does not sit inside a phone. Ownership is recorded on the Bitcoin network. A wallet holds the keys that let the owner spend it. That distinction cuts both ways. Seizing a phone does not seize the bitcoin. But a seized phone can expose far more than a balance. It can expose a wallet app, messages, contacts, photos, and notes. A photo of a seed phrase turns a device search into a wallet compromise. A laptop with an unlocked wallet or saved exchange login creates the same risk. The threat is not only confiscation. It is exposure of the information that controls the funds.
Travel hygiene for Hong Kong transits
Treat every device you carry as searchable. Travel with a clean device where you can. Do not carry seed phrases on paper, in photos, or in notes on a device you take through Hong Kong. Do not store a seed phrase in cloud notes tied to a phone you carry. Keep backups somewhere else, secured before you travel. A hardware wallet kept separate from its backup reduces single point risk. If a device is taken, assume its contents are read. Change passwords and revoke sessions tied to that device once you can do so safely. Never give false passcodes or false information. The penalty for false information is far heavier than the penalty for refusal, and deception creates a second legal problem. This article is not legal advice. Anyone facing a demand should seek a lawyer in Hong Kong before deciding how to respond. 
The wider lesson
Self-custody means controlling your own keys. That control is only as strong as the device and the backup that guard them. The Hong Kong rule shows how fast that guard can fail at a border. Good custody is boring by design. Separate the device from the backup. Keep the backup off the device. Keep the device clean when you travel. Read more on why true Bitcoin ownership demands self-custody. For what holders actually fear losing, see the Custody Anxiety Index. Sources for the law itself are the US Consulate security alert and the Hong Kong e-Legislation rules, Cap. 622L.
This is not breaking news. The rule dates to March 2026. The risk it creates is still live for every traveller passing through Hong Kong today. Plan for it before you board, not at the border.
