3 ms·
This is a big reason to prefer password based drive encryption, or at least something that doesn't tie the key to your hardware.
by doubled112 4y ago
This is a big reason to prefer password based drive encryption, or at least something that doesn't tie the key to your hardware.
- mschuster91 4y agoSadly, impossible to do on modern Apple machines (where the T2 co-processor handles all the crypto), and difficult to do with Windows as Bitlocker uses a TPM module by default [1] if it's available and modern enough. You'd need to manually mess around to disable TPM usage. (Side note, does anyone know if there is a workaround to allow multiple passwords for Bitlocker?) [1] https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-countermeasures https://learn.microsoft.com/en-us/windows/security/informati...
- bootsmann 4y agoI think you can do PIN + password by fiddling around with the group policy settings iirc (similar trick for PIN + TPM maybe you can find results for that first and then build on it)
- kitsunesoba 4y agoTo me the bigger takeaway is that if it’s important enough to encrypt, it’s important enough to keep backed up regularly. Even with password-based encryption, if your drive/laptop is stolen you’re no better off than you would’ve been with key-based encryption (potentially worse, as password-based may be more practical to bruteforce). On the other hand if the data is backed up properly, at worst you’ve lost between an hour and a day of work regardless of if the laptop gets lost, is stolen, bricks itself, or is subject to a highly localized short-lived black hole. You restore and go on with life.