is windows Bitlocker useless?
is windows Bitlocker useless?
Usually TPM is turned on first when using BitLocker. Then the encryption key stays in this hardware part. It seems he probably kept his keys in TPM before turning it off. After disabling it, Windows couldn’t decrypt the drive and requested a recovery key. When he re-enabled TPM, the key became accessible again, allowing Windows to boot without needing the recovery key.
It mentions in the conversation you can skip using TPM if permitted, though it offers less protection. The TPM is a dedicated hardware part meant to securely store encryption keys, making them hard for third parties to recover. Otherwise, Windows would need to keep the key elsewhere—like on the same drive. This could expose the key if someone accesses the device and uses certain tools.
The encryption must remain secure, yet if the key is compromised, access becomes possible. It's like a lock that stays strong unless someone already has the right key.
On my travel PC containing sensitive information, I applied group policies to secure key storage and utilized a USB drive. This ensures the system remains inaccessible until the USB is connected. By default, BitLocker doesn’t block access to the drive within the PC or its operating system—it’s designed to stop physical theft or unauthorized OS installation from another machine.