6
Why does bitlocker password only need a recovery key? (lemmy.dbzer0.com)
submitted 1 month ago* by to c/windows11@lemmy.world
2 comments fedilink hide all child comments
 

It's password only, non tpm and it still creates a recovery key. Why tho?

linux doesn't do that when using LUKS encryption. trust me I'd love to switch, but can't.

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 month ago* (last edited 1 month ago)

So that you can decrypt in case you forget the password, of course. You can also do that in LUKS it seems. IIRC, hash of your password encrypts Volume Master Key, and another copy of VMK is encrypted with your recovery key. If you use a TPM, VMK is stored inside it instead of storing an VMK encrypted with your password.

  • permalink
  • fedilink
  • source
    •