A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [bitlocker]

A logical volume encryption feature included with specific versions of Microsoft Windows Vista and later.

Filter by
Sorted by
Tagged with
0
votes
1answer
68 views

Bitlocker without PIN

In simple words: Does Bitlocker (without Pin) transforms the normal "Windows User login" into something secure? So if you activate Bitlocker (without a pin before booting) you are forced to use the ...
0
votes
0answers
4 views

BIOS/UEFI update and BitLocker suspension [migrated]

I can read on many pages that when you update your BIOS/UEFI, you need to suspend BitLocker (for information, mine is configured to ask for a password at startup, no TPM in my machine). But none of ...
0
votes
0answers
31 views

SSD : Bitlocker and overprovisioning

If you use a SSD, with an overprovisioning partition created with the manfacturer's tool, and use BitLocker to crypt the remaining drive partition you really use everyday, is there a way to get part ...
-1
votes
0answers
50 views

Bitlocker security with physical access?

I searched online for how to make a 3d printed weapon, the police came and seized all my printing equipment and I'm suspected for weapon manufacturing. I was searching out of curiosity. I haven't made ...
31
votes
2answers
6k views

Is Bitlocker secure enough for portable storage devices?

I have recently lost a USB flash drive that contained some important information. Fortunately, it was protected by Bitlocker. I felt the impulse to ask exactly how secure it is. Most answers on this ...
1
vote
1answer
91 views

I got my drive “bitlocker encrypted” by enterprise admins. Will this prevent me to share docs with my collaborators?

I admit I don't fully understand the level of encryption bitlocker does. I use Windows 10 and only have a C: drive which just got encrypted per the company policies. Will this hinder my ability to ...
0
votes
1answer
58 views

Does BitLocker encrypt everything?

just a quick question - does BitLocker encrypt everything including host protected area, device configuration overlay and bad sectors?
2
votes
1answer
56 views

RAID + IEEE1667 + TPM + UEFI

Windows Server using a IEEE-1667 drive allows hardware based encryption on the fly. What are our options when using two disks with a RAID controller, in order to achieve redundancy and parity (T10-...
-1
votes
2answers
199 views

How can BitLocker be considered safer, if it doesn't asks for a key during boot?

I've been using VeraCrypt / TrueCrypt for years. Now, with a new computer (having Windows 10 Pro) I can consider BitLocker. But, either I am complete ignorant and don't see something awfully obvious ...
0
votes
1answer
47 views

Is User Account Login Related to BitLocker Encryption Key

When I enabled BitLocker on my system-drive, I wasn't asked to select an unlock-method. I didn't have to enter any new passwords/keys. I only selected a few options for the encryption, and the process ...
1
vote
1answer
138 views

Using Bitlocker and hidden volume feature of VeraCrypt together

I'm currently using Bitlocker encrypted external hard drive. The drive is entire-encrypted and single partition. After dividing the drive into partition A and B, I'm planning to make a hidden volume ...
2
votes
0answers
59 views

BitLocker Sleep/Hiberate Settings for DMA protection

The Bitlocker the guidance from Microsoft is to disable sleep states and use hibernate in combination with TPM + PIN for elevated security against cold boot and DMA attacks. Unfortunately this is ...
0
votes
1answer
273 views

What is the purpose of the Volume Master Key in BitLocker?

From this FAQ, I understand that BitLocker uses the following keys to encrypt the hard-drive: Full Volume Encryption Key (FVEK) (used to encrypt raw data; encrypted by the volume master key and ...
0
votes
3answers
148 views

How sufficient are these steps to prevent deleted SSD files from being recovered?

I'm selling a 4-year-old Dell PC with Windows 10 and two SSDs and I want to be sure that nobody can recover anything from my personal deleted files. So far I've done the following. Completely ...
0
votes
0answers
41 views

Non-obvious Mitigations for This DMA-Attack Demonstrated by F-Secure

Are there any non-obvious mitigations for the big DMA-attack revealed last year and demonstrated in this video by F-Secure? We know that Microsoft has published some material pertaining to DMA-...
4
votes
1answer
345 views

BIOS Password vs. BitLocker Pre-boot PIN

I'm attempting to ensure maximum security for my PC. I'm running Windows 10 Pro on a business-class HP notebook. Unless I'm mistaken, I understand that both a BIOS password and the BitLocker pre-boot ...
0
votes
1answer
488 views

How does Windows use the TPM for BitLocker encryption without an attacker being able to do the same?

How does Windows use the TPM for BitLocker encryption without an attacker being able to do the same? From this FAQ, I understand that BitLocker uses the following keys to encrypt the hard-drive: ...
2
votes
1answer
176 views

Windows BitLocker- Is the drive Password the same as the Key used by AES to encrypt the drive?

I am using BitLocker on my Win10. I encryted my usb drive using my Windows BitLocker with a strong password. I know that Bitlocker uses AES-~256 bit key for encryption. My question what is the key ...
0
votes
1answer
155 views

Microsoft Bitlocker Decryption interrupted. Cannot decrypt again

I've locked on of my USB drive with BitLocker. When I was decrypting(removing BitLocker), my PC went off due to power cut in the halfway of decryption. Now, when I'm trying again to decrypt using ...
1
vote
1answer
114 views

Bitlocker, does additional authentication at startup with TPM device provide any extra security?

Will enabling additional authentication on startup provide any extra security with Bitlocker? At the moment, my laptop boots straight into a Windows login where I use a pin. If I chose to not use pin, ...
2
votes
1answer
399 views

BitLocker Encrypted Hard drive without UEFI/BIOS Password set?

My laptop is encrypted with BitLocker with TPM-Only protection and Secure Boot is enabled. Since I do not have any UEFI password set to prevent changes to the UEFI firmware settings, will an attacker ...
46
votes
8answers
10k views

Force user to remove USB token

I'm looking at setting up secure laptops using BitLocker with pre-boot PIN and startup key. I'm wondering if there is a way to force the user, who is remote, to remove the USB with the startup key ...
1
vote
3answers
203 views

Is it ill-advised to use the same password for lock screen and full disk encryption (Windows 10 BitLocker)?

I am wondering which attacks can be prevented by using a different password for the lock screen and full disk encryption. The goal is to prevent people from accessing my data. The details of my setup ...
1
vote
1answer
344 views

Risk of removing the PIN from Bitlocker

Microsoft's implementation of BitLocker for hard drive encryption/protection and integrity supports multiple ways to boot into the system. I will list 3: TPM chip (those that support it) without Pre-...
1
vote
1answer
217 views

Why Bitlocker requires partition on some computers but not all

We have HP desktop computers all identical. I setup Bitlocker encryption on one, no partition was required and the computer was fully encrypted. Second computer gave me a different result, Bitlocker ...
0
votes
1answer
129 views

BitLocker To Go password strength

When using BitLocker To Go, given that removable drives are inherently offline and may have to resist such attacks, what are the best practices / recommendations for password strength?
1
vote
1answer
379 views

BitLocker Recovery Key and Microsoft Account Password

I have a Windows 10 Pro machine; the administrator (and only) account is a Microsoft account. I am trying to set up BitLocker to ensure maximum security and safety, even from Microsoft. I understand ...
0
votes
1answer
104 views

Backing up an encypted drive on an encrypted drive

I have searched, and have been unable to find an adequate answer to my question. My apologies as I'm sure this is a relatively elementary question for the users here. I have encrypted my Windows 10 ...
0
votes
1answer
405 views

Where is Bitlocker encryption key stored in USB? [closed]

I have a USB that contains the Bitlocker key. When I open USB I dont see any files inside. How can I move the Bitlocker key to another USB?
6
votes
2answers
2k views

How to prevent Windows Update from suspending BitLocker encryption?

I was quite shocked today to see that a Windows 10 Pro machine that I recently set up with BitLocker (startup PIN + TPM with full disk encryption) suddenly didn't have BitLocker enabled anymore: And ...
0
votes
2answers
2k views

Samsung EVO 970 SSD on laptop without TPM - secure erase, is the drive encrypted?

I have a Dell XPS 9550. This was shipped without a TPM. I have since installed a Samsung 970 EVO SSD which as I understand is a self-encrypting drive (SED) and, what I am not sure about is, it can be ...
3
votes
0answers
153 views

How does TPM and BitLocker work together?

When a computer has a TPM module, BitLocker doesn't seem to require a password, which makes me really uncomfortable. Where's the key coming from? What's preventing someone from grabbing the key by ...
4
votes
1answer
195 views

Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?

Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through "interdiction" (interception) or via the internet. They are able to exfiltrate data and conduct surveillance ...
1
vote
2answers
1k views

What are the considerations when migrating from Bitlocker to Veracrypt?

We are currently evaluating migrating from BitLocker to VeraCrypt. Based on the most recent update to VeraCrypt, there appears to be support for UEFI/GPT. Additionally, it seems that decryption isn't ...
1
vote
1answer
188 views

How to protect devices that are reliant on Bitlocker and a password without TPM?

In working with a number of non-profit organizations, devices such as laptops used by staff are encrypted using Bitlocker. Unfortunately since the devices (often donated) do not feature TPM, Bitlocker ...
0
votes
1answer
72 views

Startup PIN security considerations for BitLocker

I plan to implement Bitlocker encryption on my devices, but I wonder how to achieve the highest possible security against offline attacks. I understood the following: I can enable TPM based ...
1
vote
0answers
326 views

Can BitLocker simply be bypassed by just “waiting long enough” till it auto suspends due an update?

When you get an automatic feature or even only cumulative Windows 10 update with an activated BitLocker (password protected) system partition BitLocker will prompt you afterwards from the system tray ...
0
votes
2answers
108 views

Encrypting my hard drive using bitlocker

I would like to encrypt my C drive using bitLocker which is the only partition on my windows 10 computer. Is it better to separate the disk into partitions, for example: a partition for the OS and ...
2
votes
1answer
2k views

What is the relationship between Windows BitLocker and Hasleo BitLocker Anywhere?

Whilst researching alternatives to BitLocker which work on Windows 10 Home, I came across a product called "BitLocker Anywhere" from Hasleo. Since they use such similar names I was trying to figure ...
10
votes
3answers
3k views

How does Bitlocker + TPM prevent me seeing the HDD contents with another OS?

I've googled the heck out of this, and have read multiple related questions on this site, but I'm still missing a crucial piece of the puzzle. I have a (work) laptop with Win10 Pro which is encrypted ...
2
votes
1answer
1k views

What is the safest way to use Bitlocker with TPM?

I started using bitlocker yesterday and I have a TPM2.0 in my laptop. I enabled the option to enter a pin when starting and I enabled the option to use AES256 before encrypting. I don't really ...
3
votes
2answers
704 views

What are BitLocker requirements against computer theft?

I'm using Windows 10 Pro edition and took the following actions: I've set up Bitlocker on both disks using the TPM (2.0) to boot the computer. I've also set a Windows password and I have no guest ...
1
vote
2answers
109 views

Is it viable to encrypt a 'bitlocked' drive again? [duplicate]

If one had an encrypted drive using Bitlocker, is it worth it to encrypt that drive again using another tool like VeraCrypt? Does this provide an extra layer of protection? Not a duplicate of a ...
0
votes
0answers
181 views

How does Bitlocker encrypt a drive while it is being used?

By this I mean performing file transfers, downloads etc., I haven't read anywhere of this having an effect on how Bitlocker encrypts the drive. Also, how does Bitlocker handle the constant amount of ...
4
votes
1answer
3k views

BitLocker on Windows 10 Home

If I encrypt a flash drive using BitLocker on a Windows 10 Pro (With BitLocker supported and installed) device and put it in compatible mode, can I enter the key and read/write to and to/from it from ...
3
votes
1answer
540 views

Do pre-boot software keyloggers exist?

Let's sat for example that I have a laptop with just one hard drive running Windows 10. The Laptop's C:\ (boot) drive is encrypted using Bitlocker, and it set up to ask for a PIN on start to decrypt ...
0
votes
1answer
909 views

How are Bitlocker FDE keys stored in the TPM?

If you are using Windows 10 Pro Bitlocker FDE with a TPM and enhanced PIN (= passphrase): How do the keys in the TPM get stored? Are they stored as plaintext or hashvalue or 'again' encrypted?
0
votes
1answer
775 views

BitLocker vs BestCrypt

I have managed to activate BitLocker without TPM support on my Windows 10 installation. Is there any security advantage of using this over BestCrypt (paid)? To be noted that I'm only interested in ...
1
vote
1answer
4k views

Bitlocker without admin privileges

Are admin privileges a must to be able to encrypt your files with Bitlocker? So far I just found one comment on the internet that says it's possible without a problem but no other source to verify ...
0
votes
1answer
2k views

How can I unlock drive without the password or recovery key of Bitlocker? [duplicate]

Is it possible to unlock my drive without the password or recovery key of Bitlocker? If so, how? I tried Elcomsoft forensic software but I'm not able to decrypt it without using the password or ...