Bitlocker is compatible with Windows 11 Pro.
Bitlocker is compatible with Windows 11 Pro.
I purchased a Dell XPS 15 9520 with Windows 11 Pro. My previous Dell XPS ran Windows 10 Pro and used BitLocker. At startup I had to enter my BitLocker PIN, then my Windows 10 local account password to access the machine. When setting up Windows 11 Pro, I needed to create a Microsoft email account instead of a local one. I generated an email password and a Windows Hello PIN, then used the PIN for login. After that, I set up a local account under the email account as requested. I also created a password for that account. After restarting my laptop, it prompted me to enter my local password again and I logged in successfully. When I entered BitLocker, it was already enabled and active. Could you clarify why BitLocker appears enabled automatically? Does Dell enable BitLocker by default on new devices? I recall BitLocker used TPM with options—was that the setup I chose? How can I configure BitLocker similarly to what I did on Windows 10 Pro? Is this method as secure as it seems? You only need to enter your local account password, but how does that ensure security? For those needing a BitLocker PIN, what’s the correct procedure? Is this about BitLocker or the device encryption feature in Windows 11? I’d like to confirm whether the PIN should include letters and numbers, and whether I need to adjust settings on Windows 10 Pro to achieve that.
Additionally, the page indicates certain configurations are handled by your system administrator. Is this relevant? Should I revert to the Microsoft account I used when you initially set up the account? I’m using my local account now. I’m confused about how BitLocker is activated even though there’s no prompt for entering the pin at startup.
Currently I use the local account, which was linked to my earlier Microsoft account. I needed a Windows 11 Pro setup email account, so BitLocker was activated. The TPM is enabled by default, but I’m unsure where to enter the BitLocker PIN at startup. I’d like to restore the TPM settings similar to Windows 10 Pro for better security. My drive is encrypted using only the local account password, which feels less secure than a full TPM setup. I’m looking for a way to store the BitLocker PIN in startup mode.
Veos_Cadmium
10-08-2021, 06:43 PM #5You can add a preboot PIN yourself if desired: https://www.howtogeek.com/262720/how-to-...n-windows/. They mention: "if you take extra steps to turn on BitLocker on a machine lacking a TPM, you’ll be asked to set a startup password that replaces the TPM. The instructions below apply only when enabling BitLocker on devices with TPMs, which are common in today’s computers." This means it’s usually using the TPM key, but if you don’t have one, you can choose a local account password instead.
This XPS 15 9520 is a recent laptop with a TPM built in. It’s unclear whether your system should remain as it is or require a TPM for security. Regarding BitLocker, the type you’re using isn’t specified—do you know what it is called? The confusion arises because if you don’t have a local Windows password, your laptop might automatically boot to your computer, yet BitLocker appears enabled in settings. Many users rely on either a local account password or a Microsoft Hello PIN for access. It seems BitLocker is set up by default, which could mean it’s locked unless you enter the correct credentials. Others using BitLocker on Windows 11 Pro often use either a local password or the Hello PIN. Why does BitLocker appear enabled without manual activation? Let me know if someone else has experience with this setup.
I don’t rely on Bitlocker since I haven’t used any TPM-enabled devices or enabled it myself. That’s expected because Windows 11 requires a TPM to function. Bitlocker only protects the storage, not the account itself—it just scrambles the drive data, making it difficult for someone who steals the device to access the information easily. If the account remains active, they wouldn’t need to physically extract the drive to steal data; they could simply log in and move files as needed. Essentially, Bitlocker isn’t doing much beyond adding another layer of protection that doesn’t change the core security. It’s like having a secure room but leaving the door unlocked.
Bitlocker requires a PIN during startup only when certain GPO settings are adjusted. By default, a TPM will unlock it automatically unless BIOS settings have changed or another OS is being booted. Without a TPM, the system blocks BitLocker entirely, displaying a compatibility message. You must configure the appropriate GPOs before proceeding.
With Windows 10 Pro, I added a BitLocker pin during setup. After that, I needed to enter my Windows 10 password to access the computer. Now you mention BitLocker doesn’t ask for a pin at startup. If we compare it to Windows 11 Pro, where no password is set for the local account, it raises a question—how does BitLocker safeguard the system? When you power on, it shouldn’t request either a BitLocker pin or the local password. So essentially, your local credentials would be the sole defense with BitLocker. This means someone could potentially access your hard drive only if they also know your local account password. But if you enable a BitLocker pin, then there should be an additional layer—requiring both the pin and the local password? Why wouldn’t people opt for that extra security?
BitLocker when it’s active on Suspend Protection. To back up your recovery key, turn off BitLocker. The setting for changing how the drive is unlocked at startup isn’t clearly labeled—check the BitLocker settings under the recovery options.