A federal magistrate in Colorado, in Equal Employment Opportunity Commission (EEOC) v. The Original Honeybaked Ham Company of Georgia, Inc., has ordered the claimants in an employment discrimination suit to provide a special master with their social media and email passwords so that the master could gather discoverable information from their social media and email accounts. Courts have struggled with how to gain access to evidence that is password-protected, and what parameters to put on searches of digital media. These issues often arise in criminal cases, but they also come up in civil litigation. One would expect that it would be relatively rare that a court would have to order a party to turn over a password (or a decryption key) rather than just have the party search for relevant information herself. And, in this case, citing privacy concerns, the judge instituted a strict process to govern the special master’s collection of information. Still, the willingness of courts to compel people to turn over their passwords or decryption keys shows that there are always limits to the data protection that any technology affords.