How to keep your PC encryption key safe - from Microsoft and the FBI
Briefly

How to keep your PC encryption key safe - from Microsoft and the FBI
"Microsoft's BitLocker is a security feature built into Windows that encrypts the entire hard drive. The idea is to protect your personal files from prying eyes in case your PC is ever lost or stolen. Decrypting the data requires a BitLocker recovery key, which is supposed to be safe from access by other people. Aah, but not so fast. Microsoft has confirmed to Forbes that it will provide your BitLocker recovery key if it receives a valid legal order."
"FBI agents in Guam were investigating a case in which certain individuals who had been in charge of the island's COVID unemployment assistance program were actually looking to steal the funds. To prove their case, the feds needed access to the BitLocker-encrypted files on the suspects' computers. Microsoft felt the request was justified and turned over the necessary keys to the agents."
BitLocker encrypts the entire Windows hard drive and requires a recovery key to decrypt data. Backing the recovery key up to a Microsoft cloud account allows retrieval after hardware changes, boot problems, or suspicious access. Keys stored in the cloud can be supplied to law enforcement when Microsoft receives a valid legal order. A federal investigation in Guam used such requests to obtain BitLocker keys for suspected theft of COVID unemployment funds. Storing the recovery key only on local devices or in printed form prevents cloud-based key disclosure but may complicate legitimate recovery.
Read at ZDNET
Unable to calculate read time
[
|
]