Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [bitlocker]

A logical volume encryption feature included with specific versions of Microsoft Windows Vista and later.

Filter by
Sorted by
Tagged with
0 votes
1 answer
356 views

Is CVE-2024-20666 Bitlocker vulnerability mitigated by disabling Windows RE or removing the recovery parition?

Taking Microsoft's page on CVE-2024-20666 at face value, that Bitlocker vulnerability is darn serious in an "evil maid" attack: A successful attacker could bypass the BitLocker Device ...
fgrieu's user avatar
  • 1,243
0 votes
1 answer
223 views

Is the Bitlocker encryption key used on HD same for USB?

With Bitlocker, is there only one "master key" that is used to encrypt/decrypt for both HD and USB data? I saw this article today which talks about sniffing the encryption key to get access ...
nanonerd's user avatar
  • 197
0 votes
0 answers
25 views

microsoft bitlocker copy data in background [duplicate]

I use microsoft bitlocker encryption all my disks. Some day, maybe I click on a phishing email and my computer be hacked. Hacker sends my data to his server. Is the data encrypted or plaintext in his ...
bigdata's user avatar
2 votes
0 answers
308 views

Bitlocker on Windows 11 local account

I've recently upgraded my computer security by encrypting all the drives on in with BitLocker (I'm using Windows 11 Pro). Unfortunately, I ran into a rather fastidious bug that prevents me from ...
Alicent's user avatar
  • 21
0 votes
0 answers
164 views

What does an exported BitLocker key package contain?

I've learned that a key protector encrypts the VMK (volume master key), then the VMK encrypts the FVEK (full volume encryption key), and finally the FVEK encrypts the actual data blocks. I've also ...
Chris Chen's user avatar
0 votes
1 answer
146 views

Recover deleted (Shift+Delete) One Drive Folder on a bitlocker enabled drive. Should I unencrypt drive before I atempt recovery?

Windows 11, bitlocked C:\ Drive (I have the bitlocker key and can unencrypt drive). Onedrive installed, synced to my Docs folder but not signed in to OneDrive account (never signed in). Uninstalled ...
user85643's user avatar
0 votes
0 answers
521 views

Bitlocker TPM + PIN vs password without TPM [duplicate]

I keep reading how it's best to use Bitlocker's full disk encryption with a TPM + PIN instead of just a passphrase twithout a TPM but I've been wondering why. Assuming that a very strong password is ...
Brickwall's user avatar
0 votes
1 answer
223 views

Does faulTPM defeat the LUKS-based FDE with a passphrase?

The recent faulTPM paper (https://arxiv.org/pdf/2304.14717v1.pdf) deals mostly with Bitlocker and only mentions LUKS to note the differences. The authors state: With a passphrase, however, the same ...
Leprechaun's user avatar
5 votes
3 answers
3k views

Why/When does patching CVE-2022-41099 (BitLocker Bypass) require extra steps?

Microsoft has published information about a recent security problem classified as "BitLocker Security Feature Bypass" identified as CVE-2022-41099 which points out that Windows Recovery ...
user287998's user avatar
1 vote
1 answer
133 views

When using Bitlocker and I am logged into a PC is the data accessible for outside devices? (mounted)

I am wondering what happens when I log into an encrypted Windows PC - could an attacker steal data from the PC while logged in or is it encrypted and to access the drive he would need the Bitlocker ...
noto77's user avatar
  • 41
-1 votes
2 answers
123 views

Why a mounted encrypted volume with bitlocker is accessible as if it weren't encrypted at all?

When we encrypt a volume with bitlocker, it takes time to encrypt the data according to the amount of the data but Once the encrypted volume is mounted the contents are transparently accessible to ...
ebad's user avatar
  • 3
0 votes
1 answer
816 views

fTPM more secure than TPM when using Bitlocker?

Is fTPM more secure than a real TPM module when using Bitlocker? As far as I know, you should enable pre-boot authentication if you use a TPM module that is plugged separately onto the motherboard to ...
Opa114's user avatar
  • 101
0 votes
1 answer
259 views

How secure is a bitlocker startup key on a mountable encrypted container?

Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely. I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
maximusboscus's user avatar
1 vote
2 answers
758 views

How does bitlocker work when unlocking a removable drive on another PC using a password?

Here's the scenario: I have an external harddrive encrypted with bitlocker. I disconnect that drive from the PC that encrypted it, and connect it to a different PC. Surprisingly, when I do this, all ...
Drew's user avatar
  • 135
2 votes
1 answer
1k views

Veracrypt and Bitlocker VS Bad Sector

Want to know what happen to: Bitlocker partition Veracrypt partition Veracrypt container If there's bad sector appear in the encryption area. Can I still mount/open the encryption to save non-...
user avatar
1 vote
1 answer
267 views

How exactly does Windows Bitlocker work?

I wonder how Windows Bitlocker and other similar software works. I know they differ in terms of security level as some software does not fully encrypt locked files, but I'm speaking of unauthorized ...
Someone's user avatar
  • 113
1 vote
1 answer
1k views

Is a cold-boot-attack on a bitlocker key in TPM still possible, if I use the TPM with a different drive in the meantime?

I have a laptop with the system disk encrypted by Bitlocker. Bitlocker is configured to require a pre-boot pin, and unlocks by TPM. The recovery key is required to unlock and is not available atm. The ...
Thies's user avatar
  • 11
12 votes
4 answers
8k views

Is looking for plain text strings on an encrypted disk a good test?

I have a dual boot PC, where the Win10 (uncompressed) partition is encrypted with BitLocker. I was curious about making this test (and also encryption took quite a short time in my opinion), so while ...
golimar's user avatar
  • 239
2 votes
2 answers
2k views

Is it safe to give away a computer with a hard drive previously encrypted with BitLocker?

Assuming the hard drive is encrypted with BitLocker and it is on a laptop with a TPM module. Then the hard drive is formatted and Windows is completely reinstalled. Is it still possible to recover the ...
Mia's user avatar
  • 71
0 votes
3 answers
513 views

Can a drive in locked state (via BitLocker) be over-encrypted/over-locked by ransomware?

Can a drive (system or external) that is already Bitlocker encrypted and locked, be able to be attacked and encrypted by ransomware? We need prevention from over-encryption, not destruction or ...
IT researcher's user avatar
0 votes
2 answers
388 views

How to securely encrypt my computer and protect it from thieves and others

I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
iudhfgihdfigh's user avatar
1 vote
2 answers
285 views

Is using a windows user account password necessary on a PC with bitlocker and a complex pin?

Is there a security risk to disabling the windows user account password, since my PC is already unlocked with a complex pin at boot time? I have my PC configured with sleep disabled. I'm running ...
Drew's user avatar
  • 135
9 votes
3 answers
9k views

Is a BitLocker recovery key an unavoidable brute-force attack vulnerability?

While doing some encryption work on drives I found that BitLocker keeps making these "recovery keys". No other encryption software I used did that so it annoyed me and made me biased perhaps....
Arthur Tarasov's user avatar
5 votes
1 answer
2k views

Why does Windows not enable TPM 2.0 parameter encryption to protect against bus sniffing of Bitlocker key?

Comes from Bitlocker, does additional authentication at startup with TPM device provide any extra security? You can sniff the key right from the bus currently: As the decryption happens automatically,...
Bruno Martinez's user avatar
0 votes
0 answers
454 views

Isolate Dual-Boot Windows OS's - Encryption Programs

My machine has Name Model Disk No. Capacity SDD LITEON L8H 0 240 GB HDD HGST 1 1 TB ( 932 Gb ) SDD contains: Windows 10 (for work) HDD contains: Partition 1 / ├─ Files ( text , imgs , video , ...
Oneguy's user avatar
  • 1
0 votes
1 answer
321 views

How does Bitlocker Drive encryption work and which info are sent?

I'm looking forward to discovering more about the way in which USB devices encrypted with BitLocker are protected. If I insert a USB key encrypted with BitLocker on a different device, I can access ...
franz1's user avatar
  • 481
1 vote
1 answer
434 views

Does a BitLocker recovery key have any use on removable media, a.k.a 'BitLocker to Go', other than if you forget your password?

I understand that there are multiple reasons that a recovery key might be needed on a system partition, but why would I want the extra security risk of having a way of circumventing my password for ...
a2k42's user avatar
  • 123
6 votes
2 answers
11k views

Can I use VeraCrypt with an SSD?

I recently got Windows 10, and I am not overly thrilled at Microsoft having a copy of my password on their servers. I will also be forced to make a hotmail account, instead of just using a local ...
questioner's user avatar
1 vote
1 answer
378 views

Can M.2 docking stations be used to make forensic images of (Bitlocker encrypted) M.2 disks?

I am looking into M.2 docking stations such as the Maiwo K3016S as shown below. Is it possible to use such docking stations optionally in combination with a USB- or software write-blocker, in order ...
Bob Ortiz's user avatar
  • 6,665
3 votes
3 answers
6k views

Can I safely disable and re-enable Secure Boot when Bitlocker is used in order to make a Forensic Image?

I am about to make a forensic image (using dc3dd from OSFClone) of two laptops and in this specific case I'd like to startup using an bootable USB stick with OSFClone and image the disk to an external ...
Bob Ortiz's user avatar
  • 6,665
2 votes
2 answers
2k views

Installed TPM, how to use BitLocker without USB key?

I have a Windows 10 computer with 3 hard drives: Samsung SSD 850 EVO 1TB (SSD, system drive where Windows 10 is installed, not encrypted yet) First 3 TB HDD already protected by BitLocker Second 3 TB ...
Ryan's user avatar
  • 325
3 votes
1 answer
473 views

Can I secure the bootloader without a TPM?

I have a lot of PCs without a TPM installed. Buying TPMs for all of them is not an option, but I still want to do encryption on them. From what I've studied so far, the entire system/boot partition ...
Livy's user avatar
  • 133
0 votes
0 answers
444 views

How to have full drive encyption that is unlocked while a USB device is plugged in?

I'd like a solution that autounlocks Bitlocker, VeraCrypt or similar FDE on Windows 10 while I have a device plugged in. When it's not plugged in (or I lose/destroy the device) it should just ask for ...
Firsh - justifiedgrid.com's user avatar
1 vote
0 answers
436 views

How is .NET Core isolated storage "secured" on various OS's?

I'm looking for a consolidated list of how and where isolated storage is managed on each operating system... (Windows, MacOS, Linux, (mobile?), ...) Does such a list exist? What considerations might ...
TLDR's user avatar
  • 700
0 votes
1 answer
2k views

Cloning external harddrive encrypted by bitlocker using dd

Hi I want to know if I use dd to clone an external hard drive encrypted by bitlocker to another external drive, can the clone always be opened using the same password or there are exceptions?
cooker's user avatar
  • 391
1 vote
1 answer
1k views

Is bitlocker without a PIN as good as having no hard disk encryption at all?

If bitlocker was configured for a user not to input a PIN; and the device got lost/stolen; is there a risk of the data on the hard disk being exposed? With no PIN enabled; is that essentially as good ...
Architect 's user avatar
0 votes
1 answer
225 views

Decrypting a BitLockered USB drive [duplicate]

I have encrypted a USB drive with BitLocker and I have lost the password and the hash backup. I have tried to search for something to decrypt the drive but came short. I have imaged the USB drive and ...
118MASTERMAN's user avatar
0 votes
1 answer
552 views

Do border agents have a master key for BitLocker?

Do border agents have the master key to Bitlocker? A few years ago a Canadian border officer told me my computer with BitLocker could be deciphered by a Canadian security agency. Since this is ...
apatterson's user avatar
2 votes
2 answers
660 views

Why doesn't the PIN become part of the encryption key in bitlocker with TPM?

I have read here that if you choose TPM + PIN protection the PIN does not become part of the key, it is simply used by the TPM as an additional security measure. It doesn't make sense to me, it would ...
J. Doe's user avatar
  • 65
2 votes
1 answer
4k views

How secure is BitLocker without TPM?

My laptop doesn't have TPM. If I enable BL PIN and someone steals my laptop and remove the drive, will they be able to read it's content on another computer? How am I vulnerable without TPM?
Eduardo M's user avatar
  • 141
2 votes
0 answers
348 views

TPM & Windows BitLocker: how does it work and is it secure?

When starting a BitLocker-encrypted machine with a TPM and Windows 10 installed, you aren't prompted to enter a decryption key. The system relies on Windows lockscreen for authentication instead. My ...
Manchineel's user avatar
3 votes
1 answer
986 views

Has there ever been a known case of Bitlocker breach through lock screen?

Scenario: A Windows user with Bitlocker-encrypted OS drive uses Win+L shortcut to lock their computer, but leaves it powered on. At this point, their house is raided (by police, or thieves, or FBI, ...
masiton's user avatar
  • 33
0 votes
1 answer
418 views

How I can encrypt Windows if I use a SSD and HDD?

I need to encrypt my Windows Disks with full disk encryption. Windows is already installed and all drives have data. My Drives/Disks: 1 SSD - C: drive 1 HDD - D: drive and I have a drive where Linux ...
user234080's user avatar
3 votes
0 answers
308 views

Is 256-bit BitLocker encryption really 256-bit?

It might sound like a silly question, but clearly I'm not getting something. I've enabled 256-bit encryption in group policy settings and encrypted a drive. manage-bde -status says Encryption Method: ...
user228001's user avatar
8 votes
5 answers
4k views

Way to protect from cold boot attack

After reading some research papers about cold boot attack, I got a big shock and start searching for ways to protect against that kind of vulnerability. I got one solution that is using BitLocker pin ...
Crypt0er's user avatar
  • 101
6 votes
3 answers
12k views

Bitlocker without PIN

In simple words: Does Bitlocker (without Pin) transforms the normal "Windows User login" into something secure? So if you activate Bitlocker (without a pin before booting) you are forced to use the ...
kiara's user avatar
  • 711
31 votes
2 answers
13k views

Is Bitlocker secure enough for portable storage devices?

I have recently lost a USB flash drive that contained some important information. Fortunately, it was protected by Bitlocker. I felt the impulse to ask exactly how secure it is. Most answers on this ...
trisct's user avatar
  • 415
1 vote
1 answer
194 views

I got my drive "bitlocker encrypted" by enterprise admins. Will this prevent me to share docs with my collaborators?

I admit I don't fully understand the level of encryption bitlocker does. I use Windows 10 and only have a C: drive which just got encrypted per the company policies. Will this hinder my ability to ...
Mark's user avatar
  • 13
0 votes
1 answer
285 views

Does BitLocker encrypt everything?

just a quick question - does BitLocker encrypt everything including host protected area, device configuration overlay and bad sectors?
Jdjdkdnd's user avatar
2 votes
1 answer
396 views

RAID + IEEE1667 + TPM + UEFI

Windows Server using a IEEE-1667 drive allows hardware based encryption on the fly. What are our options when using two disks with a RAID controller, in order to achieve redundancy and parity (T10-...
Nikos Papandreou's user avatar