Can the government see your search history without a warrant? In some situations, yes. Federal investigators have several legal routes that stop short of a full warrant — court orders with a lower standard of proof, national security letters, border inspections of your devices, emergency requests, and mandatory tech-company reporting. For the actual content of what you typed into a search bar, though, a warrant backed by probable cause is usually required, and search engines generally insist on one before handing over query records.
How much protection your searches get depends on who holds the data, where you are when you’re searching, and what the government suspects.
When a Warrant Is Required
The Fourth Amendment sets the baseline. To get the content of your communications or private digital records, investigators generally have to convince a judge there is probable cause to believe your data contains evidence of a specific crime. The warrant has to describe what agents are looking for with enough precision to prevent open-ended fishing through years of unrelated queries. A warrant that simply authorized seizure of “all internet activity” would be constitutionally suspect.
The Supreme Court established in Katz v. United States that the Fourth Amendment “protects people, not places,” which brought electronic communications under its umbrella even when no physical intrusion occurs.1Cornell Law School. Katz and the Adoption of the Reasonable Expectation of Privacy Test If agents skip the warrant process and obtain search history anyway, the evidence can be thrown out under the exclusionary rule, and the target may have grounds for a civil suit against the officers involved.
In practice, the content of your search queries — the exact words you typed — sits on the warrant side of the line for most criminal investigations. Search engine companies generally require a warrant before producing that content to law enforcement.
What the Government Can Get Without a Warrant
Several categories of search-related data are reachable through legal tools that do not require probable cause or a warrant.
Subscriber and Connection Records
Under 18 U.S.C. § 2703, the government can obtain non-content information — subscriber names, billing records, IP addresses, session times, and the domains you connected to — with a subpoena or court order rather than a warrant.2Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records Your internet service provider sees that you visited google.com, and that connection data is available to investigators on a lower legal showing.
Here’s the practical limit: most of the web now runs on HTTPS encryption. Your ISP can see that you connected to a search engine, but it cannot see what you typed into the search bar or which results you clicked. So the records available from your ISP without a warrant are real, but they are less revealing than many people assume.
Search Engine Records Under a Court Order
Search engines themselves keep detailed logs of your queries. Under 18 U.S.C. § 2703(d), the government can obtain certain records from these companies through a court order by showing “specific and articulable facts” that the information is relevant to an ongoing criminal investigation.2Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records That standard is lower than probable cause. The investigator doesn’t need to prove you committed a crime, just that there are concrete reasons to think your records relate to one.
The legal theory behind this is the third-party doctrine: if you voluntarily share information with a company, your expectation of privacy in that information is weaker. The Supreme Court’s 2018 decision in Carpenter v. United States put some limits on that doctrine in the digital context, requiring a warrant for historical cell-site location data. Whether Carpenter extends fully to search queries hasn’t been definitively resolved.
National Security Letters
National Security Letters let the FBI demand certain subscriber and transactional records from communications providers without going to a judge. The FBI director or a senior designee certifies in writing that the information is relevant to an authorized counterterrorism or counterintelligence investigation. That relevance standard is far easier to meet than probable cause.
NSLs typically come with a gag order prohibiting the recipient company from telling anyone — including the person whose data was requested — that the letter exists. Recipients can challenge these nondisclosure orders in court, and under 18 U.S.C. § 3511, the government must apply for a court order within 30 days if the recipient pushes back.3United States Court of Appeals for the Ninth Circuit. In Re National Security Letter The nondisclosure order stays in effect during the entire litigation.
Border Searches of Your Devices
If you’re carrying a laptop or phone across a U.S. border, the rules change dramatically. Customs and Border Protection distinguishes between “basic” and “advanced” searches of electronic devices. A basic search — an officer manually scrolling through your browser history, photos, or apps — can happen at primary inspection with no suspicion of wrongdoing at all. An advanced search, which involves connecting external equipment to copy or analyze the device, requires reasonable suspicion of a legal violation or a national security concern.4U.S. Customs and Border Protection. Border Search of Electronic Devices at Ports of Entry
So an officer at the border can open your laptop, pull up your browser, and read your recent search history without a warrant, probable cause, or any specific suspicion at all. For anyone concerned about digital privacy while traveling internationally, this is the biggest gap in the warrant framework.
Emergency Requests
When someone faces an immediate threat of death or serious physical injury, law enforcement can request search data under exigent circumstances without prior court approval.5Legal Information Institute (LII). Exigent Circumstances If someone’s recent queries suggest they are about to carry out a violent attack, a tech company can share that data to help prevent it. The urgency has to be real. This exception doesn’t apply retroactively to justify a search agents simply didn’t bother getting a warrant for.
Mandatory Reporting by Tech Companies
Federal law requires tech companies to report child sexual abuse material they discover on their platforms to the National Center for Missing and Exploited Children. The REPORT Act expanded these obligations, extending data retention from 90 days to one year and broadening the categories of content that must be reported to include child sex trafficking and enticement of minors. The scale is substantial: in the first 11 months of 2025, online platforms submitted over 98,000 reports related to child sex trafficking alone, up from roughly 8,500 voluntary reports in 2023, before the law took effect.6United States House Oversight and Government Reform Committee. Testimony of Melissa Snow, Executive Director, Child Sex Trafficking Programs, National Center for Missing and Exploited Children Automated scanning does most of the detection, and NCMEC routes the reports to law enforcement.
Keyword and Reverse Warrants
One of the more aggressive tools in the government’s toolkit is the keyword search warrant, sometimes called a reverse warrant. Instead of identifying a suspect and then requesting their search history, investigators go the other direction. They ask a search engine to identify everyone who searched for a specific term during a particular window. If someone was killed at an unusual address, agents might seek records of anyone who searched that address in the days before.
These warrants raise serious Fourth Amendment concerns. The particularity requirement is supposed to prevent general searches that sweep up innocent people, and a warrant that captures the search activity of thousands of uninvolved users tests that boundary. Courts are still working through the questions, and outcomes vary by jurisdiction.
National Security Investigations
When an investigation involves foreign intelligence or terrorism, the rules loosen. The Foreign Intelligence Surveillance Act created a specialized court, the FISC, that reviews government applications for surveillance authority in closed, one-sided proceedings where only the government appears.7Foreign Intelligence Surveillance Court. About the Foreign Intelligence Surveillance Court Section 702 of FISA authorizes the collection of communications of non-U.S. persons located abroad but can incidentally capture data involving Americans. Section 215 of the USA PATRIOT Act, which once authorized production of “any tangible things” for foreign intelligence investigations, has since expired.8Justia. 50 USC 1861 – Access to Certain Business Records for Foreign Intelligence and International Terrorism Investigations
Data Stored Overseas Isn’t Out of Reach
If your data happens to sit on a server outside the United States, that geography does not shield it from American investigators. The Clarifying Lawful Overseas Use of Data (CLOUD) Act clarified that a valid U.S. warrant or subpoena can compel American companies to produce data regardless of where the servers physically sit. If you use a U.S.-based search engine, the location of its data centers offers no additional legal protection.
The CLOUD Act also created a framework for foreign governments to enter agreements for more direct access to data held by U.S. tech companies. As of early 2026, only two such agreements are in effect, with the United Kingdom and Australia. Negotiations with the European Union and Canada have stalled.
What You Can Actually Control
The framework above describes what the government is allowed to do. The practical question most people care about is what reduces exposure day to day. HTTPS encryption already prevents your ISP from seeing the specific terms you search for, though it still sees which sites you visit. A VPN hides your browsing destinations from the ISP, though the VPN provider itself can see your traffic unless it maintains a genuine no-logs policy. Search engines that don’t link queries to user accounts or IP addresses reduce the pool of data available if the government comes knocking. Enabling full-disk encryption on your devices raises the bar for any physical search, including at the border.
None of this makes you invisible to a determined federal investigation backed by court orders. A warrant served directly on a search engine can produce your query history regardless of what VPN you used, because the search engine recorded the query on its end. But each layer reduces the number of access points available to investigators and raises the legal threshold they need to clear.