You can run bitlocker without TPM using a usb flash drive instead. I think you can also store the key in your mind as a password.
Also, I presume that disk encryption makes it so you can't just pop the drive in an adapter and pull stuff off it, which I sometimes need to do with old, retired drives.
You can run bitlocker without TPM using a usb flash drive instead. I think you can also store the key in your mind as a password.
Yes, but when they're on USB the keys are much more accessible. You can just plug it in and dump them.
If you're only using a password, the keys are stored in an unencrypted part of the drive, which can again easily be dumped.
Once you've dumped the keys, you can brute-force the passphrase offline.
I found it was pretty easy to get rid of the nag. I installed a different OS. For my development stuff that needs windows and I can't run with wine (very few tools) - I have a VM running a windows version with 0 Internet access. Fuck that company sideways.
veracrypt is a thing, encrypting drives does not need TPM.
Just boot using the good old Master Boot Record for a clean solution (The Veracrypt documentation gives a good overview). Veracrypt works with EFI too, but the EFI partition itself cannot be encrypted. You can even create a hidden OS, if you are forced to give out your password, theres still plausible deniability.
Thanks for the Veracrypt reminder. Adding that to my stuff to setup and document list.
Sometimes Bitlocker really pisses me off.