Cloud risk with BitLocker: Microsoft routinely hands over BitLocker keys to the FBI

[Redaktion]

While Apple and Google stress that they cannot unlock customer devices, the situation is different with Windows encryption: Microsoft routinely hands over BitLocker keys from the cloud to law enforcement agencies.

https://www.notebookcheck.net/Cloud-risk-with-BitLocker-Microsoft-routinely-hands-over-BitLocker-keys-to-the-FBI.1211595.0.html

[Admiral Snackbar]

Yikes. I'd hate to think of all the things the FBI could be doing with that information.

"[Dr. Martin Luther King Jr. is] the most notorious liar in the country"

-FBI Director J. Edgar Hoover

"King, there is only one thing left for you to do. You know what it is."

-FBI Letter to Dr. King

[jdrch]

Yikes. I'd hate to think of all the things the FBI could be doing with that information.

"[Dr. Martin Luther King Jr. is] the most notorious liar in the country"

-FBI Director J. Edgar Hoover

"King, there is only one thing left for you to do. You know what it is."

-FBI Letter to Dr. King

The only thing you can do with a Bitlocker key is unlock a Bitlocker encrypted disk you already have physical access to. Which means that if the FBI are requesting your Bitlocker key, they've already seized your computer.

[jdrch]

This isn't new. Windows automatically backs up BitLocker keys to OneDrive unless you tell it not to, and OneDrive doesn't use client-side encryption. You can get around this by storing the key locally and backing it up to OneDrive using a client-side encryption client like Duplicati.