Depending on the facts and jurisdiction, you could be held indefinitely if you don't at least unlock the device where a password is required (if they can prove its a password).

I'm not expert on this matter, but it seems requiring a second device to unlock or access data would be far safer. They'd have to prove it exists and you know where it is.