The Short Version
Hong Kong's national security framework, as amended through 2024–2026 implementation rules, does criminalize refusing to provide passwords or decryption assistance to police. However, the claim omits important conditions: the offense applies only when police lawfully demand passwords during a national security investigation, and only when the person has no "reasonable excuse." It is not a blanket obligation to surrender passwords in all circumstances. The core claim is accurate but its unqualified phrasing overstates the scope of the law.