Used Space Only encryption in BitLocker To Go allows users to encrypt removable data drives in seconds.īitLocker could require users to enter a recovery key when system configuration changes occur.īitLocker requires the user to enter a recovery key only when disk corruption occurs or when he or she loses the PIN or password. There is no support for using BitLocker with self-encrypting drives (SEDs).īitLocker supports offloading encryption to encrypted hard drives.Īdministrators have to use separate tools to manage encrypted hard drives.īitLocker supports encrypted hard drives with onboard encryption hardware built in, which allows administrators to use the familiar BitLocker administrative tools to manage them.Įncrypting a new flash drive can take more than 20 minutes. When BitLocker is enabled, the provisioning process can take several hours.īitLocker pre-provisioning, encrypting hard drives, and Used Space Only encryption allow administrators to enable BitLocker quickly on new computers. Network Unlock allows PCs to start automatically when connected to the internal network. Modern Windows devices are increasingly protected with BitLocker Device Encryption out of the box and support SSO to seamlessly protect the BitLocker encryption keys from cold boot attacks. When BitLocker is used with a PIN to protect startup, PCs such as kiosks cannot be restarted remotely.

Data Protection in Windows 11, Windows 10, and Windows 7 Windows 7 Table 2 lists specific data-protection concerns and how they are addressed in Windows 11, Windows 10, and Windows 7. Windows consistently improves data protection by improving existing options and by providing new strategies. More recently, BitLocker has provided encryption for full drives and portable drives. Windows has a long history of providing at-rest data-protection solutions that guard against nefarious attackers, beginning with the Encrypting File System in the Windows 2000 operating system. Wherever confidential data is stored, it must be protected against unauthorized access.

When users travel, their organization’s confidential data goes with them. This topic explains how BitLocker Device Encryption can help protect data on devices running Windows.įor a general overview and list of topics about BitLocker, see BitLocker.

Windows encryption software bitlocker