Windows 11 Pro's encryption can slow down SSDs by nearly 50%

Found this

BitLocker is a full device encryption tool with management controls that is available in Windows 11/10 Pro, Enterprise, or Education edition . It is built into Windows OS to give complete protection to your data in drives with encryption . You can enable it on selected drives or all drives on your PC . BitLocker uses Advanced Encryption Standard (AES) encryption with configurable key lengths of 128 or 256 bits . It also provides a set of management tools to protect your data. it s Hardware-based encryption: BitLocker uses the Trusted Platform Module (TPM) chip to store the encryption key.

Device Encryption is simplified encryption available on most Windows 10/11 computers .Requires an active TPM and user to be signed in to a Microsoft account. The recovery key gets uploaded to your OneDrive account .
 
Last edited:
Microsoft could really do with making the process a little more straight forward, Linux seems much easier in comparison.
 
Toms Hardware for long time have not been even shadow of former website, but this is new low... This is some seriously third-grade journalism...
 
On my home computer, I don't care about encryption. On my work computer, BitLocker is not setup. Probably our IT department would not allow it except in special cases.

Why wouldn't your IT Department want BitLocker setup?? The keys can be stored in Active Directory.
I certainly hope you don't work in Health Care, Education, or any other government agency, or have any PII on your computer.
 
If you use a Microsoft account, bitlocker is enabled by default in Windows 11 Pro. If you use a local account it is not enabled by default. I ran into the situation recently with a customer who had set up his laptop with a Microsoft account and didn't realize that bitlocker was enabled. The laptop developed a hardware problem and wouldn't boot. I took the drive out of the laptop to backup the data so he could restore it on a new laptop. However, I was locked out by bitlocker and could access the folders on the drive. The customer did not have a bitlocker key to unencrypt the drive. I always use local accounts on systems I build and use. Latest Windows 11 builds require you to use a Micorosoft account when setting up a system. But then you can go in and create a local admin account and delete the original Microsoft account.
 
.”I do not see the option..but I just build a new pc, so my pc do not support the feature…..??
Probably not. You need to have an SSD that supports the Opal / TCG standards for hardware encryption (and not Pyrite - there's a reason it's named after fool's gold).
 
Back