Disable Automatic Bitlocker Encryption


  1. win10freak
    Posts : 853
    Win10
       New #1

    Disable Automatic Bitlocker Encryption


    I purchased a new laptop and I noticed that right after my clean install of Windows 10 1903 using a Local Account, BitLocker was automatically encrypting my drive.

    This isn’t good, because I prefer to use the AES-256 cipher as opposed to the default AES-128.

    I came across a similar situation and the solution was to first disable Secure Boot before doing a clean install.

    Would this for sure disable automatic Bitlocker encryption? Should I also disable the TPM as well in the UEFI?

    https://www.tenforums.com/antivirus-firewalls-system-security/117478-avoiding-bitlocker-device-encryption-w10-home-2.html
      My Computer
    Quote Quote

  3. bro67
    Posts : 9,797
    Mac OS Catalina
       New #2

    This is why 128 is used for Bitlocker. “Bear in mind that 256-bit AES will be slower than 128-bit AES, although this performance difference is becoming less noticeable with faster computer hardware.”

    How to Make BitLocker Use 256-bit AES Encryption Instead of 128-bit AES

    256 is not going to make it more secure. “he common wisdom is that AES 128 and AES 256 actually offer about the same security. It would take so long to brute-force 128-bit AES encryption that 256-bit AES encryption doesn’t really offer a meaningful amount of additional security. For example, if it would take a quadrillion years to brute-force 128-bit AES, does it really matter that it might take even longer to brute-force 256-bit AES? For all realistic purposes, they’re equally secure.”
      My Computer
    Quote Quote

  4. win10freak
    Posts : 853
    Win10
    Thread Starter
       New #3

    If AES-128 is equally secure as AES-256, then I’ll just leave it set as Automatic Encryption.

    Even MS decided to drop the BitLocker AES-256 requirement from their Security Baseline.

    https://blogs.technet.microsoft.com/...-server-v1903/

    Would disabling Secure Boot before installing Windows should disable the Automatic Bitlocker Encryption in case I decide to disable it?

    - - - Updated - - -

    Would disabling Secure Boot before installing Windows should disable the Automatic Bitlocker Encryption in case I decide to disable it?

    - - - Updated - - -

    Would disabling Secure Boot before installing Windows should disable the Automatic Bitlocker Encryption in case I decide to disable it?
      My Computer
    Quote Quote

 

  Related Discussions
BitLocker encryption on USB flash drives?
in AntiVirus, Firewalls and System Security

I just got myself a 64gb USB flash stick drive and would like to encrypt it with BitLocker encrypting the ENTIRE drive which is the way I prefer it to be. Is it safe to just encrypt the USB stick BEFORE adding data to it? Or, will it also be...
Read more: Windows 10’s BitLocker Encryption No Longer Trusts Your SSD
Avoiding Bitlocker Device Encryption on W10 Home
in AntiVirus, Firewalls and System Security

I haven't installed Windows 10 Home on my new system yet. I do not want to use Device Encryption (not to be confused with Bitlocker Drive Encryption, which isn't available on W10 Home). Not even with a "clear" key. My understanding is that...
BitLocker - Used Space Encryption on used Laptop?
in AntiVirus, Firewalls and System Security

I tried several times to encrypt the entire disk after reinstalling Windows 10 but it always took for ever (usually 10 hours) to fully encrypt my internal 320GB drive. I managed to run bitlocker successfully by encrypting only used space. My...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 14:42.
Find Us




Windows 10 Forums