BitLocker drive encryption provides offline data and operating system protection by ensuring that the drive is not tampered with the operating system is offline. BitLocker drive encryption uses a TPM, either discrete or firmware, that supports the Static Root of Trust Measurement as defined by the Trusted Computing Group.
BitLocker is capable of encrypting entire hard drives, including both system and data drives. BitLocker pre-provisioning can drastically reduce the time required to provision new PCs with BitLocker enabled. With Windows 10, administrators can turn on BitLocker and the TPM from within the Windows Preinstallation Environment before they install Windows or as part of an automated deployment task sequence without any user interaction. Combined with Used Disk Space Only encryption and a mostly empty drive (because Windows is not yet installed), it takes only a few seconds to enable BitLocker. With earlier versions of Windows, administrators had to enable BitLocker after Windows had been installed. Although this process could be automated, BitLocker would need to encrypt the entire drive, a process that could take anywhere from several hours to more than a day depending on drive size and performance, which significantly delayed deployment.
Beginning in Windows 8.1, Windows automatically enables BitLocker Device Encryption on devices that support Modern Standby. With Windows 10, Microsoft offers BitLocker Device Encryption support on a much broader range of devices, including those that are Modern Standby. Microsoft expects that most devices in the future will pass the testing requirements, which makes BitLocker Device Encryption pervasive across modern Windows devices. BitLocker Device Encryption further protects the system by transparently implementing device-wide data encryption.
Windows BitLocker broken by security researcher with $10 RaspBerry Pi in 43 seconds
atharvaugale8 added Windows BitLocker as alternative to Castlefile
jdakfkj333 added Windows BitLocker as alternative to Safe Space
xecrets added Windows BitLocker as alternative to Xecrets Ez
Comments and Reviews
Its just bad for data protection
I do not trust in any Microsoft security product.
I was all in favour of Bitlocker, right up until my Surface, which has it on by default, crashed & rebooted into asking for a key, while out of reception range - this destroyed an entire work project due purely to awful, inexcusably bad design. I will never use Bitlocker again; it's better to be insecure than incapable of work. What insane moron thought a crash justified a drive lock? Clearly Microsoft as a company agreed with them.