3 ms·
In Windows 10 today, enabling BitLocker backups the keys to your AAD/Microsoft Account (depending on Home or Pro). If you hook the drive to another Windows mach
by easton 5y ago
In Windows 10 today, enabling BitLocker backups the keys to your AAD/Microsoft Account (depending on Home or Pro). If you hook the drive to another Windows machine you should be able to decrypt it with not a lot of trouble (you might have to log into the Azure Portal to pull the keys out if you are in a corporate environment, but that's it).
- tiagod 5y agoDoesn't this defeat the purpose (at least partially?) I assume law enforcement can request those keys from Microsoft if they're backed up to the account.
- ptk 5y agoI think the threat models of the overwhelming majority of individuals would prioritize scenarios that involve lost or stolen laptops/desktops over law enforcement. So Microsoft defaulting to protecting the security needs of the common man over criminals seems entirely reasonable to me. Criminals (or the security/privacy conscious) can organize their enterprises to make sure that their BitLocker keys aren’t stored where law enforcement agencies can get them. And I say that as someone who really does have concerns about the possibility that this can be abused, but I still believe it’s a reasonable default.