Microsoft gives BitLocker keys to authorities

Microsoft has confirmed that it cooperates with law enforcement when it receives a court order or warrant. It may even provide BitLocker recovery keys to law enforcement. Forbes Reported that after a federal fraud investigation in Guam, the FBI used keys provided by Microsoft to unlock three encrypted laptops.

The Redmond-based company revealed that it receives about 20 requests for BitLocker keys per year. Of course, it's nothing new that Microsoft complies with government requests and hands over keys stored in its cloud. However, this is the first publicly confirmed case of the company giving keys to federal investigators.

See more articles from iGuRu.gr when you search for news on Google.

For those who don't know, BitLocker encryption is enabled by default on most modern Windows computers and encrypts drives to keep data safe.

However, Windows requires users to store copies of their 48-digit security keys in Microsoft's cloud. This option allows Microsoft to retain access to the keys, making them accessible if requested by authorities.

In the Guam case, the FBI used keys it obtained from Microsoft to bypass the encryption. Court documents said that agencies like Homeland Security Investigations (HSI) did not have the tools to crack BitLocker without the specific recovery keys.

Legal experts now expect more requests from authorities for BitLocker keys. Users who don't want to let Microsoft have their keys can check their accounts at account.microsoft.com/devices/recoverykey.

From there, you can see if your keys are stored in the cloud. If you want more security, you should store your keys somewhere other than the company's cloud. Use a USB, a document, a photo on your phone, and be careful not to lose it.


Google preferences

Leave a Comment

Your email address will not be published. Required fields are marked *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).