CBP is US Customs and Border Protection, the federal agency responsible for border security, immigration enforcement at ports of entry, and customs enforcement. Around 60,000 employees in 2026, with operational presence at every US port (airport, land crossing, seaport). The lead agency for the border-search exception, with the documented authority to search travelers’ devices without warrant or probable cause. The operational interface between US borders and travelers’ digital privacy.
What it means in practice
CBP’s authority and limitations. At the border, CBP has the broadest search authority of any US federal agency: warrantless device search (basic and, in most circuits, advanced), authority to detain travelers for inspection, authority to refer for secondary screening, and (for non-citizens) authority to deny entry on broad discretionary grounds. The internal policy framework (CBP Directive 3340-049A and its periodic updates) sets some constraints on advanced device searches, including supervisory approval requirements for forensic extraction, but the operational discretion remains broad. The 2024-26 environment includes ongoing litigation around device-search procedures, the documented pattern of disproportionate screening for journalists and Muslim-American travelers, and the Trump-administration-era policies that expanded several aspects of CBP discretion.
Who it affects, and how
Affects: every traveler entering the US (including US citizens, who retain certain constitutional protections but not exemption from device search), with disproportionate concentration on the populations CBP screening patterns target: journalists carrying source-protection material, Muslim-American travelers (the documented profiling pattern), travelers from countries on rotating CBP attention lists, lawyers carrying privileged-communication devices, and NGO and human-rights workers. Devices may be searched, copied for forensic analysis, and (in some cases) retained for extended forensic examination. The Predaxia operational frame: US border crossing is a structural privacy event for sensitive travelers, requiring the assumption that device search may occur and the operational discipline (clean device, BFU power-off, hardware-key separation, content minimization) needs to be in place before arrival.
What you can change today
Four steps for sensitive US border crossings. First, travel with a clean device: minimal content, factory-reset-recent if practical, no source identifiers, no privileged-material caches. Second, power the device fully off before the border so it boots BFU; the practical security difference between AFU and BFU is significant against forensic capability. Third, use a long alphanumeric passphrase rather than a 6-digit PIN. Fourth, know your specific rights in advance: US citizens cannot be denied entry for refusing to unlock a device (though the device may be detained for further forensic examination); lawful permanent residents and visa holders face different calculus where refusal can have immigration consequences. Carry a lawyer’s contact, the EFF border-crossing guide for the specific situation, and the awareness that non-cooperation has costs that should be weighed against the protection it preserves.
Related articles
- The US government now requires visa applicants to make their social media public.
- Border agents can search your laptop without a warrant.
- Border agents seized a journalist’s laptop. It took 11 minutes to access everything.
- Border control AI in 2026. The new questions, the new flags, the new refusals.