The volumes are commonly using TPM (the first protector), while the backup Recovery Key (a 48-character numeric password) is created and stored in the AD, the user’s Microsoft Account, or on the hard disk or removable USB drive. By default, Windows requires the minimum of two protectors when the user creates an encrypted volume. Multiple combinations of such protectors are available.

The follow-up article Unlocking BitLocker: Can You Break That Password? reveals much of the detailed under-the-hood operation of BitLocker we recommend reading that article even if you know about BitLocker.īitLocker volumes may be protected with one or several protectors of various types that can be used together (for tougher security) or in parallel (for easier recovery). That article describes the basics of BitLocker as viewed by the computer user. If you are not familiar with BitLocker encryption, you may find the Introduction to BitLocker: Protecting Your System Disk handy. This isn’t the first article we publish about BitLocker. We are offering a straightforward solution for reinstating access to BitLocker-protected Windows systems with the help of a bootable USB drive. While adding the necessary layer of security, BitLocker also has the potential of locking administrative access to the encrypted volumes if the original Windows logon password is lost.

A large number of organizations protect startup disks with BitLocker encryption. BitLocker is Windows default solution for encrypting disk volumes.

Usb key password protection