Windows 10: BitLocker Basic Questions (Version 1909)

I was wondering if BitLocker has been activated on the C drive and on the D drive (which is my data drive) is there any security reason for having an additional Windows operating system password? i.e.

(1) For BitLocker boot entry (C drive)
(2) For Windows operating system (non-BitLocker password)
(3) For D Drive (data)

Also has BitLocker ever created unrecoverable errors due to disk faults or moving a storage drive to another computer or an external caddy?

I guess the whole point in BitLocker is to have additional security so that if your storage drive is stolen or accessed, no data can be read, written or copied from it.

:)

 

Bitlocker

Hello Nandana,

To enable BitLocker on your computer, you follow the steps below:

• Sign in to your Windows account with an administrator access.
• Press the Windows key.
• Type and enter BitLocker.
• Click Turn on BitLocker.
• If the system is asking to sing in to administrator access, please do so.

For additional information about BitLocker, we suggest that you check the frequently ask question on this
link. The link provided applies to Windows 8.1 to higher version.

If you have other concerns, don't hesitate to reach us.

 

BitLocker Basic Questions (Version 1909)

You can require a password to be entered before the system will even boot into Windows or a physical security device such as a USB flash drive, or best of all, a TPM module, but even then, much of Windows security relies upon account authentication. Most notably, you still would want your network connections secured so an account password is still important.

As for bitlocker actually being at fault for disk faults - I've never encountered this. Just make sure to store your bitlocker recovery key in a safe place if you plan to move your drive to another system.

Your assessment is correct - typically an account password would prevent someone from accessing your computer data via the network or by preventing them from simply logging into your system. But, if someone were to steal the HD and attach it to another machine, data can be read from the drive. So bitlocker addresses the physical access problem.

Here is a good article that has more information:

https://docs.microsoft.com/en-us/win...iew-windows-10

... and a tutorial to get you started:

Lock BitLocker Encrypted Drive in Windows

NOTE: There are several good tutorials related to various aspects of bitlocker. Just search on "bitlocker" in tutorials and you will find them.

 

BitLocker Basic Questions (Version 1909)

Many thanks for your reply.

It makes sense in this day and age to encrypt storage drives if possible. I was actually wondering if an encrypted drive prevents hackers accessing operating system files and data, when the computer is connected to the internet?

I know I had to 'Allow BitLocker without a compatible TPM' in gpedit.msc on this computer (which is nine years old) otherwise BitLocker would not start encrypting. I guess if there is no TPM in the computer's hardware there is less security encryption wise?

From my understanding (if I am correct...) if BitLocker is installed with a TPM (in other words where there is a TPM chip on the motherboard) it would not be possible to remove and access the storage drive data externally through another computer even with BitLocker recovery keys?

It makes sense to keep the Windows password as you mentioned. I guess it would also make sense to have a different password for both Windows and BitLocker. If you wanted to be really pedantic then have three different passwords for BitLocker C drive, BitLocker D drive and Windows.

It's good to hear that BitLocker is a stable platform. I will definitely read up more about it in detail when I get the time...