HP debuts TPM Guard at Imagine 2026 to block BitLocker attacks on business PCs
https://fed.brid.gy/r/https://nerds.xyz/2026/03/hp-tpm-guard-bitlocker-security/
Regular warning regarding backups and data recovery with Windows 11 25H2 and Bitlocker encryption.
By default, new installations of Windows 11 25H2 have BitLocker automatically enabled, on laptops and desktops.
In theory, the BitLocker recovery keys are transferred to the online Microsoft Account settings when you login that way on Windows 11.
If you use a Windows local account only then it's not backed up. Nor are you prompted to do so. This is very obviously a potentially dangerous state.
If you're going with a local account only Windows 11 OS installation then:
AND
OR
Unless you have a very specific use case or "interesting" threat model then disabling BitLocker is my suggestion.
Once BitLocker it's disabled then ensure you are taking regular backups of import data off the PC, ideally multiple copies in separate places for redundancy.
Hardware and storage media do fail. Motherboards and their TPM / UEFI Firmware data do get damaged. That's where the BitLocker encryption keys are stored.
If the BitLocker recovery information on the motherboard is damaged or unrecoverable, your BitLocker encrypted data will be unrecoverable without the recovery keys.
@SpaceLifeForm : a spare motherbord won't help just like that.
The actual encryption key is stored in a TPM chip (the rescue code is used to allow the system to access to the actual encryption key).
So even if you have a spare mobo, you'll have to transplant the TPM chip from the old to the new mobo.
The best advice: have a backup, as recent as possible. My backups are on VeraCrypt encrypted external (USB) HDD's.

I just deleted the wrong partition during a #Windows re-install and it was #bitlocker protected.
I might need tech support...
How is your day going?
Boah ey, nächstes Thema mit Linux Mint. Es fordert mich bei der Installation auf vor der Installation in Windows den BitLocker zu deaktivieren. Wozu? Musste ich bei Fedora doch auch nicht. Da müsste ich nur nach der Installation einmal den BitLocker Key bei eingeben und gut war.
Da ich das Passwort der Windows Installation nicht habe ist hier dann heute Schluss.
Und wahrscheinlich ist das dann auch das Ende des Versuchs mit Linux, da selbst die Anforderung sich einmal anzumelden damit ich weiter machen kann wahrscheinlich bei der Besitzerin sofort zu einem Mental Meltdown führen wird.
#Microsoft utleverte #bitlocker nøkler til #FBI fordi den var lagret i skyen. Hvordan nøkkelen er lagret må bli tydeligere https://www.digi.no/artikler/debatt-nar-noklene-ikke-er-dine-er-heller-ikke-dataene-det/569447