I never liked the design of Bitlocker - I always set a PIN. Wish it was a proper passphrase instead. The whole magic thing of decrypting things automatically s

I never liked the design of Bitlocker - I always set a PIN. Wish it was a proper passphrase instead. The whole magic thing of decrypting things automatically seems like a total design flaw. - I often disable the hardware encryption support. Some of these are total jokes. AES-NI is decent but it’ll reduce performance on faster SSD drives. An unbooted FileVault Apple device just does not know the decryption key. Until you’ve entered the passphrase there’s no flaw in the OS or hardware that can give it to you. Such a cleaner design. So much safer no magic TPM BS. Same goes for my Linux/LUKS servers. No passphrase not boot.