Ethical Hacking Laws in India — What's Legal & What's Not

Hacking Laws in India

Understanding the law is crucial. The difference between a cybersecurity career and prison is permission.

IT Act 2000 — Key Sections

Section 43: Unauthorized Access

Accessing any computer without permission → compensation up to ₹1 crore

Section 65: Tampering with Source Code

Modifying computer source code → imprisonment up to 3 years + ₹2 lakh fine

Section 66: Computer Related Offences

Dishonestly destroying/altering data → imprisonment up to 3 years + ₹5 lakh fine

Section 66B: Receiving Stolen Data

Possession of stolen computer data → imprisonment up to 3 years + ₹1 lakh fine

Section 66C: Identity Theft

Using another person's digital identity → imprisonment up to 3 years + ₹1 lakh fine

Section 66F: Cyber Terrorism

Acts threatening national security via cyber means → Life imprisonment

How to Hack LEGALLY

• ✅ Get written permission from system owner
• ✅ Bug bounty programs (HackerOne, Bugcrowd) = legal authorization
• ✅ Practice on your own systems and lab environments
• ✅ Use platforms like TryHackMe, HackTheBox
• ✅ Report vulnerabilities through CERT-In

What's ALWAYS Illegal

• ❌ Scanning/testing systems without permission
• ❌ Accessing someone's accounts/data
• ❌ DDoS attacks (even "testing")
• ❌ Creating/distributing malware
• ❌ SIM swapping, phishing real people

🔥 Learn legal ethical hacking at Code Hacker →