You do not have to divulge your password. If you don't, you might be deported if you are not a citizen. If you're a citizen, your device might be seized and you lose a day or so, but that's the worst of it