Cloud-stored BitLocker keys can be handed to law enforcement
TL;DR
Microsoft has confirmed that BitLocker recovery keys backed up in the cloud can be provided to law enforcement under a valid legal order, a situation highlighted by a Guam FBI case. To reduce this risk, users should avoid cloud backups and instead store the recovery key locally—on a USB drive or as a printed copy—and remove any cloud-stored copies; the piece also explains how to check BitLocker settings and how to back up the key safely.
- Storing your BitLocker key in the cloud? Microsoft can give it to the FBI - what to do instead ZDNET
- Microsoft Gave FBI Keys To Unlock Encrypted Data, Exposing Major Privacy Flaw Forbes
- How to encrypt your PC’s disk without giving the keys to Microsoft Ars Technica
- Microsoft handed the government encryption keys for customer data The Verge
- Microsoft Provided Private BitLocker Recovery Keys to the FBI TechPowerUp
Want the full story? Read the original reporting
Read on ZDNET