BitLocker encryption on Internal SSD drives?


  1. Posts : 812
    Win10
       #1

    BitLocker encryption on Internal SSD drives?


    I always enable BitLocker so that the ENTIRE SSD DRIVE is encrypted.

    My question is, does it really matter if I turn on BitLocker encryption before or after adding my data onto the Internal SSD drive of my laptop?

    I also use TPM with pre-boot PIN.
    Last edited by win10freak; 04 Apr 2021 at 05:43.
      My Computer


  2. Posts : 5,899
    Win 11 Pro (x64) 22H2
       #2

    Not sure of your question, but yes you can add data as normally with BitLocker enabled. You can also add data while the drive is being encrypted or unencrypted.

    BTW... Turn On or Off BitLocker for Operating System Drive in Windows 10
    New files are automatically encrypted when you add them to a drive that uses BitLocker. However, if you copy these files to another drive or a different PC, they're automatically decrypted.
    Certainly my personal experience with using BitLocker. Currently using it now
      My Computers


  3. Posts : 12
    windows 10
       #3

    It does matter! You add data ALWAYS after the encryption took place! It is safer and can avoid advanced techniques that can find traces of previously unencrypted data.
      My Computer


  4. Posts : 812
    Win10
    Thread Starter
       #4

    Many thanks!

    That was my question and you answered it the correct way.

    I always thought that when selecting to encrypt the entire drive, then it shouldn’t really matter if data is added before or after encryption.
    Last edited by win10freak; 04 Apr 2021 at 05:42.
      My Computer


  5. Posts : 5,899
    Win 11 Pro (x64) 22H2
       #5

    Looking for an answer and getting the right answer are two different things.

    And I can't speak for "other" encryption tools, but YOU CAN encrypt a drive with BitLocker that already has data on it without issue. Going with personal experience; and I'm not the only one. Anyway....

    How BitLocker works with fixed and removable data drives

    You can use BitLocker to encrypt the entire contents of a data drive. You can use Group Policy to require that BitLocker be enabled on a drive before the computer can write data to the drive. BitLocker can be configured with a variety of unlock methods for data drives, and a data drive supports multiple unlock methods.
    https://docs.microsoft.com/en-us/win...quirements-faq (under "How does BitLocker work")

    Nothing suggests the drive needs to be data free to use BitLocker nor are there suggestions to do so. Regardless do what makes you feel comfortable.

    Good luck
    Last edited by sygnus21; 04 Apr 2021 at 12:15.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:27.
Find Us




Windows 10 Forums