Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bitlocker]

A logical volume encryption feature included with specific versions of Microsoft Windows Vista and later.

45
votes
8answers
10k views

Force user to remove USB token

I'm looking at setting up secure laptops using BitLocker with pre-boot PIN and startup key. I'm wondering if there is a way to force the user, who is remote, to remove the USB with the startup key ...
1
vote
3answers
88 views

Is it ill-advised to use the same password for lock screen and full disk encryption (Windows 10 BitLocker)?

I am wondering which attacks can be prevented by using a different password for the lock screen and full disk encryption. The goal is to prevent people from accessing my data. The details of my setup ...
1
vote
1answer
54 views

Risk of removing the PIN from Bitlocker

Microsoft's implementation of BitLocker for hard drive encryption/protection and integrity supports multiple ways to boot into the system. I will list 3: TPM chip (those that support it) without Pre-...
0
votes
0answers
19 views

Bitlocker - no password option available [migrated]

I have a laptop with tpm and bitlocker support. I am trying to set up a simple password on startup by bitlocker just like veracrypt, though when I try to set bitlocker all I see is this: There is no ...
1
vote
1answer
47 views

Why Bitlocker requires partition on some computers but not all

We have HP desktop computers all identical. I setup Bitlocker encryption on one, no partition was required and the computer was fully encrypted. Second computer gave me a different result, Bitlocker ...
0
votes
1answer
57 views

BitLocker To Go password strength

When using BitLocker To Go, given that removable drives are inherently offline and may have to resist such attacks, what are the best practices / recommendations for password strength?
0
votes
1answer
73 views

BitLocker Recovery Key and Microsoft Account Password

I have a Windows 10 Pro machine; the administrator (and only) account is a Microsoft account. I am trying to set up BitLocker to ensure maximum security and safety, even from Microsoft. I understand ...
0
votes
1answer
65 views

Backing up an encypted drive on an encrypted drive

I have searched, and have been unable to find an adequate answer to my question. My apologies as I'm sure this is a relatively elementary question for the users here. I have encrypted my Windows 10 ...
0
votes
1answer
156 views

Where is Bitlocker encryption key stored in USB? [closed]

I have a USB that contains the Bitlocker key. When I open USB I dont see any files inside. How can I move the Bitlocker key to another USB?
6
votes
2answers
333 views

How to prevent Windows Update from suspending BitLocker encrytion?

I was quite shocked today to see that a Windows 10 Pro machine that I recently set up with BitLocker (startup PIN + TPM with full disk encryption) suddenly didn't have BitLocker enabled anymore: And ...
0
votes
1answer
820 views

Samsung EVO 970 SSD on laptop without TPM - secure erase, is the drive encrypted?

I have a Dell XPS 9550. This was shipped without a TPM. I have since installed a Samsung 970 EVO SSD which as I understand is a self-encrypting drive (SED) and, what I am not sure about is, it can be ...
3
votes
0answers
96 views

How does TPM and BitLocker work together?

When a computer has a TPM module, BitLocker doesn't seem to require a password, which makes me really uncomfortable. Where's the key coming from? What's preventing someone from grabbing the key by ...
3
votes
1answer
139 views

Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?

Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through "interdiction" (interception) or via the internet. They are able to exfiltrate data and conduct surveillance ...
1
vote
2answers
430 views

What are the considerations when migrating from Bitlocker to Veracrypt?

We are currently evaluating migrating from BitLocker to VeraCrypt. Based on the most recent update to VeraCrypt, there appears to be support for UEFI/GPT. Additionally, it seems that decryption isn't ...
1
vote
1answer
111 views

How to protect devices that are reliant on Bitlocker and a password without TPM?

In working with a number of non-profit organizations, devices such as laptops used by staff are encrypted using Bitlocker. Unfortunately since the devices (often donated) do not feature TPM, Bitlocker ...
0
votes
1answer
48 views

Startup PIN security considerations for BitLocker

I plan to implement Bitlocker encryption on my devices, but I wonder how to achieve the highest possible security against offline attacks. I understood the following: I can enable TPM based ...
1
vote
0answers
139 views

Can BitLocker simply be bypassed by just “waiting long enough” till it auto suspends due an update?

When you get an automatic feature or even only cumulative Windows 10 update with an activated BitLocker (password protected) system partition BitLocker will prompt you afterwards from the system tray ...
0
votes
2answers
96 views

Encrypting my hard drive using bitlocker

I would like to encrypt my C drive using bitLocker which is the only partition on my windows 10 computer. Is it better to separate the disk into partitions, for example: a partition for the OS and ...
2
votes
1answer
1k views

What is the relationship between Windows BitLocker and Hasleo BitLocker Anywhere?

Whilst researching alternatives to BitLocker which work on Windows 10 Home, I came across a product called "BitLocker Anywhere" from Hasleo. Since they use such similar names I was trying to figure ...
6
votes
3answers
1k views

How does Bitlocker + TPM prevent me seeing the HDD contents with another OS?

I've googled the heck out of this, and have read multiple related questions on this site, but I'm still missing a crucial piece of the puzzle. I have a (work) laptop with Win10 Pro which is encrypted ...
2
votes
1answer
517 views

What is the safest way to use Bitlocker with TPM?

I started using bitlocker yesterday and I have a TPM2.0 in my laptop. I enabled the option to enter a pin when starting and I enabled the option to use AES256 before encrypting. I don't really ...
3
votes
2answers
403 views

What are BitLocker requirements against computer theft?

I'm using Windows 10 Pro edition and took the following actions: I've set up Bitlocker on both disks using the TPM (2.0) to boot the computer. I've also set a Windows password and I have no guest ...
1
vote
2answers
101 views

Is it viable to encrypt a 'bitlocked' drive again? [duplicate]

If one had an encrypted drive using Bitlocker, is it worth it to encrypt that drive again using another tool like VeraCrypt? Does this provide an extra layer of protection? Not a duplicate of a ...
0
votes
0answers
128 views

How does Bitlocker encrypt a drive while it is being used?

By this I mean performing file transfers, downloads etc., I haven't read anywhere of this having an effect on how Bitlocker encrypts the drive. Also, how does Bitlocker handle the constant amount of ...
4
votes
1answer
2k views

BitLocker on Windows 10 Home

If I encrypt a flash drive using BitLocker on a Windows 10 Pro (With BitLocker supported and installed) device and put it in compatible mode, can I enter the key and read/write to and to/from it from ...
3
votes
1answer
300 views

Do pre-boot software keyloggers exist?

Let's sat for example that I have a laptop with just one hard drive running Windows 10. The Laptop's C:\ (boot) drive is encrypted using Bitlocker, and it set up to ask for a PIN on start to decrypt ...
0
votes
1answer
630 views

How are Bitlocker FDE keys stored in the TPM?

If you are using Windows 10 Pro Bitlocker FDE with a TPM and enhanced PIN (= passphrase): How do the keys in the TPM get stored? Are they stored as plaintext or hashvalue or 'again' encrypted?
0
votes
1answer
542 views

BitLocker vs BestCrypt

I have managed to activate BitLocker without TPM support on my Windows 10 installation. Is there any security advantage of using this over BestCrypt (paid)? To be noted that I'm only interested in ...
0
votes
1answer
2k views

Bitlocker without admin privileges

Are admin privileges a must to be able to encrypt your files with Bitlocker? So far I just found one comment on the internet that says it's possible without a problem but no other source to verify ...
0
votes
1answer
2k views

How can I unlock drive without the password or recovery key of Bitlocker? [duplicate]

Is it possible to unlock my drive without the password or recovery key of Bitlocker? If so, how? I tried Elcomsoft forensic software but I'm not able to decrypt it without using the password or ...
1
vote
1answer
1k views

BitLocker: CBC vs XTS and FIPS 140-2

I have a twofold question, first when choosing between AES-CBC and AES-XTS which is more secure. From my reading XTS is more secure in some respects but not in others when compared to CBC. Second are ...
2
votes
1answer
736 views

How secure is bitlocker with a pin when whole machine is stolen?

I assume if I use Bitlocker on Windows 10 on a laptop with a TPM chip without a password, then if the laptop gets stolen, then the attacker can simply turn the machine on and then he gets to the ...
2
votes
1answer
342 views

Does a bitlocker pin become part of the key?

I recently added a pin to my bitlocker encryption and this seemed to be pretty much instant. In what way is this pin an actual part of the key that is needed to decrypt the hard drive? Or is it used ...
-1
votes
0answers
143 views

Is system reserved partition a security threat?

Since the system reserved partition is a hidden partition & generally inaccessible to end-user unless one boots from another OS, but if malware can access it, then it's going to be pwned by ...
1
vote
0answers
129 views

ROCA attack on TPM - public key extraction

I was reading about the ROCA attack, and how a lot of software is vulnerable. Apparently Bitlocker from Microsoft is also vulnerable, because it protects its keys with SRK of (ROCA vulnerable) TPM. ...
2
votes
1answer
2k views

Is full disk encryption per disk or per partition?

This is mostly a general question about full disk encryption, but I have bitlocker in mind. What does it mean when people say full disk encryption? Because I imagined that it literally encrypts the ...
0
votes
2answers
600 views

Recover a bitlocker encrypted hard drive

I have a laptop that died and the hard drive is encrypted with bitlocker. My company does not want to restore the drive. If I remove the drive and put it into a housing and try to read it from ...
2
votes
1answer
306 views

Is a TPM module insecure if not soldered to the board?

I am looking into Bitlocker for my headless Microserver N54l with windows server 2016 on it. I saw that the n54l has no TPM module, but I can buy one and plug it to the board. I am interested in it ...
3
votes
1answer
1k views

Is it possible to extract secrets from a TPM without knowing the PIN?

I understand the general operation of a TPM, and in particular the interest of using a pre-boot PIN: if someone gets access to the machine (turned off), turning on the computer will not be enough to ...
1
vote
1answer
383 views

Windows 10 FIPS140 Bitlocker without using System Cryptography policy

We have an app that makes use of Non FIPS compliant AES256 System.Cryptography calls. My question is, can Bitlocker be FIPS140 compliant on a PC, but not need the FIPS algorithm set for .NET calls? ...
2
votes
2answers
547 views

Removing files from drive while encrypting with Bitlocker

I have a 4 TB external hard disk with 200 GB files on it. I started the encryption process with Bitlocker, but it is taking too long. Can I pause the encryption process, move the 200 GB from the ...
0
votes
1answer
5k views

How to configure TPM lockout in Bitlocker when using a PIN

I have Windows 10 (1607) and use Bitlocker with Pin protection. It is a TPM 2.0 chip. I got completely locked out of my a machine. It kept saying "Too many PIN attempts" at the Pre-Boot stage. I ...
2
votes
1answer
1k views

Can ransomware encrypt files in a drive locked by BitLocker?

I have a general understanding of how ransomware works. I want to know if ransomware will target a locked Bitlocker drive, however. I very rarely unlock that drive, and it will only be unlocked for ...
3
votes
1answer
2k views

Bitlocker - does it use hardware acceleration such as AES-NI?

I was wondering if perhaps it doesn't since enabling it slows down drive performance even on a Kabylake CPU.
-3
votes
1answer
345 views

BitLocker versus CryptoLocker

Can BitLocker be an effective protective measure against cryptolockers and ransomware class of attacks? Were there evidences of (un)successful intrusion/encryption attempts on volumes with enabled ...
2
votes
2answers
432 views

Bitlocker lock removable drives at logoff

I recently realized that after authenticating USB devices on a machine, then completely logging out, the next user that logged in was able to access them. Is this something in the bitlocker settings ...
3
votes
2answers
3k views

Where is the Bitlocker key stored without the Trusted-Platform Module (TPM)?

I've seen many Windows clients with Bitlocker installed without the Trusted-Platform Module (TPM) enabled. This requires manual changes in the Group Policy since by default it's not possible to enable ...
3
votes
1answer
1k views

Will new data written to disk while BitLocker is encrypting the disk be encrypted?

When you enable BitLocker, there is a period of time where BitLocker is slowly encrypting the contents of the drive in the background. During this time, is it guaranteed that new data written to the ...
1
vote
2answers
1k views

HDD password vs Bitlocker

I have a Samsung SSD 850 with an HDD password set. It seems from articles such as this and this that the data is fully encrypted, and requires the password to view. Is there any requirement or ...
1
vote
0answers
83 views

Why you can I use FileVault without CD, USB, floppy etc. for system start/rescue, but not BitLocker or VeraCrypt?

I have encrypted my harddrive on mac with FileVault. I can start my system with password only. To recover the system I had to store a rescue password for example as a picture. With BitLocker (without ...