Questions tagged [bitlocker]

A logical volume encryption feature included with specific versions of Microsoft Windows Vista and later.

Filter by
Sorted by
Tagged with
0
votes
0answers
30 views

I enabled a Bitlocker pre-boot PIN and now I have to login twice, once for Bitlocker and once for Windows [migrated]

I'm running Windows 11 Pro on a new stand-alone PC. I want to secure my data while it is at rest, mainly as a defense against burglary and theft. I've configured Bitlocker to require a pre-boot ...
0
votes
1answer
38 views

Is a cold-boot-attack on a bitlocker key in TPM still possible, if I use the TPM with a different drive in the meantime?

I have a laptop with the system disk encrypted by Bitlocker. Bitlocker is configured to require a pre-boot pin, and unlocks by TPM. The recovery key is required to unlock and is not available atm. The ...
12
votes
4answers
7k views

Is looking for plain text strings on an encrypted disk a good test?

I have a dual boot PC, where the Win10 (uncompressed) partition is encrypted with BitLocker. I was curious about making this test (and also encryption took quite a short time in my opinion), so while ...
0
votes
0answers
66 views

Does LUKS or any other encryption methods encrypt sectors containing data that was previous deleted before encryption? [closed]

To make things simmpler: For example, File A was on /dev/sdb1, it was then deleted. Accordingly, the sectors that once held File A will be marked as free for writing. However, since /dev/sdb is a ...
0
votes
2answers
156 views

Is it safe to give away a computer with a hard drive previously encrypted with BitLocker?

Assuming the hard drive is encrypted with BitLocker and it is on a laptop with a TPM module. Then the hard drive is formatted and Windows is completely reinstalled. Is it still possible to recover the ...
0
votes
3answers
161 views

Can a drive in locked state (via BitLocker) be over-encrypted/over-locked by ransomware?

Can a drive (system or external) that is already Bitlocker encrypted and locked, be able to be attacked and encrypted by ransomware? We need prevention from over-encryption, not destruction or ...
0
votes
2answers
102 views

How to securely encrypt my computer and protect it from thieves and others

I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
1
vote
2answers
78 views

Is using a windows user account password necessary on a PC with bitlocker and a complex pin?

Is there a security risk to disabling the windows user account password, since my PC is already unlocked with a complex pin at boot time? I have my PC configured with sleep disabled. I'm running ...
9
votes
3answers
5k views

Is a BitLocker recovery key an unavoidable brute-force attack vulnerability?

While doing some encryption work on drives I found that BitLocker keeps making these "recovery keys". No other encryption software I used did that so it annoyed me and made me biased perhaps....
0
votes
0answers
260 views

Why does Windows not enable TPM 2.0 parameter encryption to protect against bus sniffing of Bitlocker key?

Comes from Bitlocker, does additional authentication at startup with TPM device provide any extra security? You can sniff the key right from the bus currently: As the decryption happens automatically,...
0
votes
0answers
157 views

Isolate Dual-Boot Windows OS's - Encryption Programs

My machine has Name Model Disk No. Capacity SDD LITEON L8H 0 240 GB HDD HGST 1 1 TB ( 932 Gb ) SDD contains: Windows 10 (for work) HDD contains: Partition 1 / ├─ Files ( text , imgs , video , ...
0
votes
1answer
100 views

How does Bitlocker Drive encryption work and which info are sent?

I'm looking forward to discovering more about the way in which USB devices encrypted with BitLocker are protected. If I insert a USB key encrypted with BitLocker on a different device, I can access ...
1
vote
1answer
181 views

Does a BitLocker recovery key have any use on removable media, a.k.a 'BitLocker to Go', other than if you forget your password?

I understand that there are multiple reasons that a recovery key might be needed on a system partition, but why would I want the extra security risk of having a way of circumventing my password for ...
5
votes
2answers
3k views

Can I use VeraCrypt with an SSD?

I recently got Windows 10, and I am not overly thrilled at Microsoft having a copy of my password on their servers. I will also be forced to make a hotmail account, instead of just using a local ...
0
votes
0answers
169 views

Bitlocker TPM + PIN vs pre-boot DMA attack

In this link there are talks about pre-boot DMA attack: https://eclypsium.com/2020/01/30/direct-memory-access-attacks/ If the user would have a Bitlocker TPM + PIN enabled, would an attacker with a ...
1
vote
1answer
123 views

Can M.2 docking stations be used to make forensic images of (Bitlocker encrypted) M.2 disks?

I am looking into M.2 docking stations such as the Maiwo K3016S as shown below. Is it possible to use such docking stations optionally in combination with a USB- or software write-blocker, in order ...
2
votes
2answers
1k views

Can I safely disable and re-enable Secure Boot when Bitlocker is used in order to make a Forensic Image?

I am about to make a forensic image (using dc3dd from OSFClone) of two laptops and in this specific case I'd like to startup using an bootable USB stick with OSFClone and image the disk to an external ...
2
votes
2answers
634 views

Installed TPM, how to use BitLocker without USB key?

I have a Windows 10 computer with 3 hard drives: Samsung SSD 850 EVO 1TB (SSD, system drive where Windows 10 is installed, not encrypted yet) First 3 TB HDD already protected by BitLocker Second 3 TB ...
3
votes
1answer
160 views

Can I secure the bootloader without a TPM?

I have a lot of PCs without a TPM installed. Buying TPMs for all of them is not an option, but I still want to do encryption on them. From what I've studied so far, the entire system/boot partition ...
0
votes
0answers
48 views

Are there known escapes to get disc access when a Bitlocker-encrypted password is locked at the Windows login screen?

So on a bitlocker-encrypted single drive on a laptop, if the laptop is booted and waiting at the login screen, is there a way to escape from here to get disc access, possibly excluding that of ...
0
votes
0answers
261 views

How to have full drive encyption that is unlocked while a USB device is plugged in?

I'd like a solution that autounlocks Bitlocker, VeraCrypt or similar FDE on Windows 10 while I have a device plugged in. When it's not plugged in (or I lose/destroy the device) it should just ask for ...
1
vote
0answers
124 views

How is .NET Core isolated storage "secured" on various OS's?

I'm looking for a consolidated list of how and where isolated storage is managed on each operating system... (Windows, MacOS, Linux, (mobile?), ...) Does such a list exist? What considerations might ...
0
votes
1answer
528 views

Cloning external harddrive encrypted by bitlocker using dd

Hi I want to know if I use dd to clone an external hard drive encrypted by bitlocker to another external drive, can the clone always be opened using the same password or there are exceptions?
1
vote
1answer
247 views

Is bitlocker without a PIN as good as having no hard disk encryption at all?

If bitlocker was configured for a user not to input a PIN; and the device got lost/stolen; is there a risk of the data on the hard disk being exposed? With no PIN enabled; is that essentially as good ...
0
votes
1answer
94 views

Decrypting a BitLockered USB drive [duplicate]

I have encrypted a USB drive with BitLocker and I have lost the password and the hash backup. I have tried to search for something to decrypt the drive but came short. I have imaged the USB drive and ...
-1
votes
1answer
334 views

Do border agents have a master key for BitLocker?

Do border agents have the master key to Bitlocker? A few years ago a Canadian border officer told me my computer with BitLocker could be deciphered by a Canadian security agency. Since this is ...
2
votes
1answer
247 views

Why doesn't the PIN become part of the encryption key in bitlocker with TPM?

I have read here that if you choose TPM + PIN protection the PIN does not become part of the key, it is simply used by the TPM as an additional security measure. It doesn't make sense to me, it would ...
2
votes
1answer
2k views

How secure is BitLocker without TPM?

My laptop doesn't have TPM. If I enable BL PIN and someone steals my laptop and remove the drive, will they be able to read it's content on another computer? How am I vulnerable without TPM?
1
vote
0answers
123 views

TPM & Windows BitLocker: how does it work and is it secure?

When starting a BitLocker-encrypted machine with a TPM and Windows 10 installed, you aren't prompted to enter a decryption key. The system relies on Windows lockscreen for authentication instead. My ...
2
votes
1answer
477 views

Has there ever been a known case of Bitlocker breach through lock screen?

Scenario: A Windows user with Bitlocker-encrypted OS drive uses Win+L shortcut to lock their computer, but leaves it powered on. At this point, their house is raided (by police, or thieves, or FBI, ...
0
votes
1answer
166 views

How I can encrypt Windows if I use a SSD and HDD?

I need to encrypt my Windows Disks with full disk encryption. Windows is already installed and all drives have data. My Drives/Disks: 1 SSD - C: drive 1 HDD - D: drive and I have a drive where Linux ...
2
votes
0answers
135 views

Is 256-bit BitLocker encryption really 256-bit?

It might sound like a silly question, but clearly I'm not getting something. I've enabled 256-bit encryption in group policy settings and encrypted a drive. manage-bde -status says Encryption Method: ...
7
votes
5answers
2k views

Way to protect from cold boot attack

After reading some research papers about cold boot attack, I got a big shock and start searching for ways to protect against that kind of vulnerability. I got one solution that is using BitLocker pin ...
1
vote
2answers
3k views

Bitlocker without PIN

In simple words: Does Bitlocker (without Pin) transforms the normal "Windows User login" into something secure? So if you activate Bitlocker (without a pin before booting) you are forced to use the ...
32
votes
2answers
9k views

Is Bitlocker secure enough for portable storage devices?

I have recently lost a USB flash drive that contained some important information. Fortunately, it was protected by Bitlocker. I felt the impulse to ask exactly how secure it is. Most answers on this ...
1
vote
1answer
123 views

I got my drive "bitlocker encrypted" by enterprise admins. Will this prevent me to share docs with my collaborators?

I admit I don't fully understand the level of encryption bitlocker does. I use Windows 10 and only have a C: drive which just got encrypted per the company policies. Will this hinder my ability to ...
0
votes
1answer
142 views

Does BitLocker encrypt everything?

just a quick question - does BitLocker encrypt everything including host protected area, device configuration overlay and bad sectors?
2
votes
1answer
172 views

RAID + IEEE1667 + TPM + UEFI

Windows Server using a IEEE-1667 drive allows hardware based encryption on the fly. What are our options when using two disks with a RAID controller, in order to achieve redundancy and parity (T10-...
0
votes
2answers
1k views

How can BitLocker be considered safer, if it doesn't asks for a key during boot?

I've been using VeraCrypt / TrueCrypt for years. Now, with a new computer (having Windows 10 Pro) I can consider BitLocker. But, either I am complete ignorant and don't see something awfully obvious ...
0
votes
2answers
1k views

Is User Account Login Related to BitLocker Encryption Key

When I enabled BitLocker on my system-drive, I wasn't asked to select an unlock-method. I didn't have to enter any new passwords/keys. I only selected a few options for the encryption, and the process ...
1
vote
1answer
615 views

Using Bitlocker and hidden volume feature of VeraCrypt together

I'm currently using Bitlocker encrypted external hard drive. The drive is entire-encrypted and single partition. After dividing the drive into partition A and B, I'm planning to make a hidden volume ...
2
votes
0answers
218 views

BitLocker Sleep/Hiberate Settings for DMA protection

The Bitlocker the guidance from Microsoft is to disable sleep states and use hibernate in combination with TPM + PIN for elevated security against cold boot and DMA attacks. Unfortunately this is ...
0
votes
1answer
2k views

What is the purpose of the Volume Master Key in BitLocker?

From this FAQ, I understand that BitLocker uses the following keys to encrypt the hard-drive: Full Volume Encryption Key (FVEK) (used to encrypt raw data; encrypted by the volume master key and ...
0
votes
3answers
389 views

How sufficient are these steps to prevent deleted SSD files from being recovered?

I'm selling a 4-year-old Dell PC with Windows 10 and two SSDs and I want to be sure that nobody can recover anything from my personal deleted files. So far I've done the following. Completely ...
0
votes
0answers
76 views

Non-obvious Mitigations for This DMA-Attack Demonstrated by F-Secure

Are there any non-obvious mitigations for the big DMA-attack revealed last year and demonstrated in this video by F-Secure? We know that Microsoft has published some material pertaining to DMA-...
5
votes
1answer
2k views

BIOS Password vs. BitLocker Pre-boot PIN

I'm attempting to ensure maximum security for my PC. I'm running Windows 10 Pro on a business-class HP notebook. Unless I'm mistaken, I understand that both a BIOS password and the BitLocker pre-boot ...
0
votes
1answer
2k views

How does Windows use the TPM for BitLocker encryption without an attacker being able to do the same?

How does Windows use the TPM for BitLocker encryption without an attacker being able to do the same? From this FAQ, I understand that BitLocker uses the following keys to encrypt the hard-drive: ...
2
votes
1answer
452 views

Windows BitLocker- Is the drive Password the same as the Key used by AES to encrypt the drive?

I am using BitLocker on my Win10. I encryted my usb drive using my Windows BitLocker with a strong password. I know that Bitlocker uses AES-~256 bit key for encryption. My question what is the key ...
0
votes
1answer
255 views

Microsoft Bitlocker Decryption interrupted. Cannot decrypt again

I've locked on of my USB drive with BitLocker. When I was decrypting(removing BitLocker), my PC went off due to power cut in the halfway of decryption. Now, when I'm trying again to decrypt using ...
1
vote
1answer
427 views

Bitlocker, does additional authentication at startup with TPM device provide any extra security?

Will enabling additional authentication on startup provide any extra security with Bitlocker? At the moment, my laptop boots straight into a Windows login where I use a pin. If I chose to not use pin, ...