I have a laptop with BitLocker enabled with TPM with PIN protection.
If an attacker steals my laptop, would they be able to access my sensitive files from the Internal hard drive if I do not set a BIOS Password to prevent the attacker from changing the BIOS settings?
BitLocker does not prevent the PC from booting to Windows with a password, but if Windows detects that the system was put into recovery mode or tampered with, it will ask for the BitLocker security key.
I wouldn't say that you need a BIOS password. You could use a tool such as this one thought for tracking: Prey: Unified Device Management | Reactive Anti-theft | Data Protection
It doesn’t boot directly into Windows as I had set BitLocker to use a PIN before Windows boots.
Most people shouldn’t need to set a BIOS or UEFI password. If you’d like to protect your sensitive files, encrypting your hard drive is a better solution. BIOS and UEFI passwords are particularly ideal for public or workplace computers. They allow you to restrict people from booting alternative operating systems on removable devices and prevent people from installing another operating system over the computer’s current operating system.
Anyone that would really want that data, would just yank out the hard drive and use tools to get through any security encryption. https://social.technet.microsoft.com...7itprosecurity
Quote