Microsoft will give the FBI a Windows PC data encryption key if ordered (windowscentral.com)

Article summary

Microsoft has confirmed that it will provide the FBI with Windows PC data encryption keys if ordered to do so through a valid legal request. This is possible because Windows 11's online Microsoft Account requirement automatically backs up the BitLocker encryption key to the cloud. The company receives around 20 requests for BitLocker encryption keys from the FBI per year, but most are unable to be met because the key was never uploaded to the cloud. This has raised concerns about user privacy and the potential for mass surveillance.

Main themes

• Data Encryption
• User Privacy
• Law Enforcement Access
• Cloud Storage
• Microsoft Windows 11
• Surveillance

What commenters say

• The default backup of encryption keys to the cloud is a convenience that also carries a risk of unwanted access, and users should be aware of this tradeoff.
• Some argue that full disk encryption is not suitable for average users due to the risk of losing access to data if the password or key is forgotten.
• Others believe that the benefits of full disk encryption outweigh the risks, and that users should be able to make their own decisions about how to manage their encryption keys.
• The fact that Microsoft stores encryption keys in plaintext in the cloud is seen as a major security risk, and some argue that this is a violation of user trust.
• There is a debate about whether the average person has a baseline understanding of how computers and encryption work, and whether this lack of understanding is a problem.
• Some commenters argue that the ability of law enforcement to access encrypted data is a necessary tool for fighting crime, while others see it as a threat to individual privacy and freedom.
• The use of cloud storage and online accounts has changed the way people interact with their data, and some argue that this has led to a loss of control and privacy.
• Alternative operating systems, such as Linux, are seen by some as a more secure and private option due to their different approach to encryption and data storage.