TechRadar Verdict
Microsoft BitLocker is a fine volume encryption tool only marred by unnecessarily complex hardware and software requirements.
Simple interface
Free
Not included in Windows 10 Home
Full feature set requires a particular combination of hardware and software
Why you can trust TechRadarWe spend hours testing every product or service we review, so you can be sure you’re buying the best.Find out more about how we test.
Even with strong password policies in place, it’s important to understand that if a malicious actor gets physical access to your hard drives, it’s easy for them to gain access to all stored data. All they have to do is plug the hard drive into another computer or boot anotheroperating systemfrom a USB drive.
This is particularly troublesome for companies with sensitive data kept on laptops. If a laptop is lost or stolen, important company documents could be exposed.
Microsoft BitLockeris a full-volume encryption feature that’s been included in business versions ofMicrosoftWindows for the past 14 years. With BitLocker, you can encrypt your entire drive so that even if the hard drive is stolen, only authorized individuals can access its contents.
In our Microsoft BitLocker review, we look at the security tool’s strengths and weaknesses to decide whether it’s thebest encryption softwarefor Windows today.
Plans and pricing
BitLocker has been a feature included on some versions of Windows since 2007. If you’re running an Ultimate, Enterprise, Pro, or Education version of Windows Vista, 7, 8, 8.1, or 10, or any version of Windows Server after 2008, you should have access to BitLocker.
Manylaptopsare only sold withWindows 10 Homeedition, though. To use BitLocker on these, you’ll need to upgrade to Pro at a cost of $100.
Not all of BitLocker’s features work on all systems, and the exact hardware requirements differ depending on your operating system. Most notably, to use the whole-system device encryption feature your computer needs aTPM(Trusted Platform Module) chip.
Features
Full-volume encryption
After you set a drive to use BitLocker and leave some time for the system to encrypt the volume, files are automatically encrypted and decrypted on the fly. If a thief were to plug the drive into another computer, all the files would be unreadable unless they also had access to the recovery key.
Multiple encryption code options
As long as you have a TPM 1.2 or 2.0 chip, BitLocker can work transparently. This way, you simply log into Windows as usual. Alternatively, you can set up user authentication mode, where users need to provide some form of authentication like a PIN or password before the computer will boot. You can also use a USB device or smartcard for authentication, or a combination of methods.
To avoid loss of data, you can back up a recovery key to your online Microsoft account, aUSB flash drive, a file, or a printout.
Interface and in use
One of the strengths of BitLocker over third-party solutions is how it’s integrated into the operating system. Once you’ve switched BitLocker on, it works quietly in the background.
Administration is performed in the Windows control panel or you can right-click on a drive and choose Manage BitLocker. Here, you can change the password, back up your recovery key, and encrypt the content of removable drives.
Support
For home users, support for Microsoft products including BitLocker is available via live chat and community forums only. Business users have the option of calling the Microsoft technical support line in most countries.
In our testing of the live chat support from Microsoft, we found the wait time to be an average of 15 minutes, but sometimes up to an hour. A note on the website suggests longer wait times at this time are caused by COVID-19.
The competition
A common concern about BitLocker is that it’s proprietary software, so it’s not possible to test whether Microsoft has included a secret backdoor for law enforcement and governments. Microsoft denies there’s an intentional built-in backdoor in BitLocker, though there is proof that the UK Home Office at least attempted to get Microsoft to introduce one in 2006.
If this is a concern, open-source volume encryption software exists.VeraCryptis arguably the best open-source alternative to BitLocker. It’s free to use, you can view all the source code, and it’s available for macOS and Linux, too, not just Windows.
Final verdict
BitLocker is a relatively simple way to encrypt an entire volume on Windows, keeping your files safe even if your computer falls into the wrong hands. It’s particularly useful for people with laptops containing sensitive or important documents.
It’s a shame it’s not available on all versions of Windows. BitLocker also has different system requirements based on the version of the operating system you’re running, and some features don’t work unless you have the right hardware set up in a particular way, so using BitLocker in an enterprise full of disparate hardware can get messy.
But overall, it’s a strong product for encrypting an entire drive, and Microsoft is continuing to keep it relevant by adding new features and better security.
Daniel is a freelance copywriter with over six years experience writing for publications such as TechRadar, Tom’s Guide, and Hosting Review. He specializes in B2B and B2C tech and finance, with a particular focus on VoIP, website building, web hosting, and other related fields.
NYT Strands today — hints, answers and spangram for Sunday, November 10 (game #252)
NYT Connections today — hints and answers for Sunday, November 10 (game #518)
Quordle today – hints and answers for Sunday, November 10 (game #1021)
