Windows Bit Locker - Compromised - No Privacy (Jan 2026 Re-Post)
- Apr 17
- 1 min read
Source: Kiteworks
In January 2025, Microsoft confirmed that it provided the Federal Bureau of Investigation (FBI) with BitLocker recovery keys to unlock three laptops in a federal investigation. This is the first public acknowledgment of such a handover by the company, which often occurs when keys are stored in the cloud as part of a Microsoft account setup.
Details of the Case
Case Context: The keys were provided to assist in a fraud investigation involving COVID-19 unemployment assistance funds in Guam.
The Process: While BitLocker encrypts data locally, Windows often backs up the recovery key to Microsoft's cloud servers. In this instance, the FBI served a search warrant, and Microsoft complied by providing the keys stored on its servers.
Frequency: Microsoft disclosed that it receives approximately 20 requests for BitLocker keys from law enforcement agencies per year.
Impact: This case highlighted that if encryption keys are backed up to the cloud, they can be surrendered under legal compulsion, reducing the effectiveness of device-level encryption against law enforcement access.
Data Privacy Concerns
Default Settings: Privacy advocates, such as Senator Ron Wyden, have criticized the practice, noting that cloud backups of keys are often enabled by default during Windows 11 setup.
Alternative Storage: Users can opt to save keys locally (e.g., on a USB drive or printed) rather than in the cloud, which would prevent Microsoft from being able to provide them to the government.
Industry Comparison: This action stands in contrast to Apple's approach, where the company often does not have the technical ability to unlock devices (such as with FileVault) because they do not hold the keys.
