It's password only, non tpm and it still creates a recovery key. Why tho?
linux doesn't do that when using LUKS encryption. trust me I'd love to switch, but can't.
Why does bitlocker password only need a recovery key?
a month ago by dhkuq3645 to c/windows11
LifeInMultipleChoice 3 points a month ago
Not 100% sure but in my previous use cases in work atmospheres bitlocker recovery keys we would auto collect/store in Active Roles/active directory. So if windows did an update and messed up something or a user forgot their password to get passed it we could search ARS/AD and get the machine back up and running.
windows11
@lemmy.world
1250
247
105
Welcome to the community for Windows 11, Microsoft's latest computer operating system.
Rules:
- Do not promote pirated content or grey market keys.
- Be civil. No rude, offensive, or hateful posts/comments.
go to feed...
windows11
@lemmy.world
1250
247
105
Welcome to the community for Windows 11, Microsoft's latest computer operating system.
Rules:
- Do not promote pirated content or grey market keys.
- Be civil. No rude, offensive, or hateful posts/comments.
go to feed...
So that you can decrypt in case you forget the password, of course. You can also do that in LUKS it seems. IIRC, hash of your password encrypts Volume Master Key, and another copy of VMK is encrypted with your recovery key. If you use a TPM, VMK is stored inside it instead of storing an VMK encrypted with your password.
save