Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
1–10 of 37 posts
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#2Definitely save those recovery keys, because BitLocker loves freaking out after BIOS updates or minor hardware changes. I think I had to enter mine after a GPU firmware update.
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#3Definitely save those recovery keys, because BitLocker loves freaking out after BIOS updates or minor hardware changes. I think I had to enter mine after a GPU firmware update.
I think they're saved to your Microsoft account by default now.
And, since Microsoft likes to pretend an account is required to even install Windows now, most people will likely have a linked account.
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#4Definitely save those recovery keys, because BitLocker loves freaking out after BIOS updates or minor hardware changes. I think I had to enter mine after a GPU firmware update.
I think they're saved to your Microsoft account by default now. And, since Microsoft likes to pretend an account is required to even install Windows now, most people will likely have a linked account.
I think it will lead to lots of lost data. Kind of like how your kid's old ipad loses its mind and your apple id password doesn't work and the data is lost.
This kind of thing should be super-explicit when setting things up, and they should provide a way out.
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#5I mean, good? Physical access to a device shouldn’t automatically mean all your data is with the wind.
Theoretically this was already on for “new” devices since sometime in the Windows 10 timeframe.
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#6So whose computer is it at this point? MS encrypts your data, but keeps the recovery key.
Let's say you encrypt the drive, and then travel outside the country and come back. The border patrol officer says "I want to see everything on your hard drive" and you refuse, being an American citizen and all.
They call Microsoft and recover all the data...
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#7So whose computer is it at this point? MS encrypts your data, but keeps the recovery key. Let's say you encrypt the drive, and then travel outside the country and come back. The border patrol officer says "I want to see everything on your hard drive" and you refuse, being an American citizen and all. They call Microsoft and recover all the data...
The alternative was no encryption at all; which is even more convenient for recovering your data.
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#8So whose computer is it at this point? MS encrypts your data, but keeps the recovery key. Let's say you encrypt the drive, and then travel outside the country and come back. The border patrol officer says "I want to see everything on your hard drive" and you refuse, being an American citizen and all. They call Microsoft and recover all the data...
The alternative was no encryption at all; which is even more convenient for recovering your data.
Not to mention the other alternative of saving your keys locally instead of uploading them to your account, which is optional.
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#9[dead]
Re: Microsoft confirms Windows 11 24H2 turns on Device Encryption by default
#10Seems like this would be double encrypting OPAL self encrypting drives in the places that use those, potentially adding a further failure point.