Disable Automatic Bitlocker Encryption


  1. Posts : 625
    Win10
       #1

    Disable Automatic Bitlocker Encryption


    I purchased a new laptop and I noticed that right after my clean install of Windows 10 1903 using a Local Account, BitLocker was automatically encrypting my drive.

    This isnít good, because I prefer to use the AES-256 cipher as opposed to the default AES-128.

    I came across a similar situation and the solution was to first disable Secure Boot before doing a clean install.

    Would this for sure disable automatic Bitlocker encryption? Should I also disable the TPM as well in the UEFI?

    https://www.tenforums.com/antivirus-firewalls-system-security/117478-avoiding-bitlocker-device-encryption-w10-home-2.html
      My Computer

  2. bro67's Avatar
    Posts : 8,395
    Mac OS Catalina
       #2

    This is why 128 is used for Bitlocker. ďBear in mind that 256-bit AES will be slower than 128-bit AES, although this performance difference is becoming less noticeable with faster computer hardware.Ē

    How to Make BitLocker Use 256-bit AES Encryption Instead of 128-bit AES


    256 is not going to make it more secure. ďhe common wisdom is that AES 128 and AES 256 actually offer about the same security. It would take so long to brute-force 128-bit AES encryption that 256-bit AES encryption doesnít really offer a meaningful amount of additional security. For example, if it would take a quadrillion years to brute-force 128-bit AES, does it really matter that it might take even longer to brute-force 256-bit AES? For all realistic purposes, theyíre equally secure.Ē
      My Computers


  3. Posts : 625
    Win10
    Thread Starter
       #3

    If AES-128 is equally secure as AES-256, then Iíll just leave it set as Automatic Encryption.

    Even MS decided to drop the BitLocker AES-256 requirement from their Security Baseline.

    https://blogs.technet.microsoft.com/...-server-v1903/

    Would disabling Secure Boot before installing Windows should disable the Automatic Bitlocker Encryption in case I decide to disable it?

    - - - Updated - - -

    Would disabling Secure Boot before installing Windows should disable the Automatic Bitlocker Encryption in case I decide to disable it?

    - - - Updated - - -

    Would disabling Secure Boot before installing Windows should disable the Automatic Bitlocker Encryption in case I decide to disable it?
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:42.
Find Us




Windows 10 Forums