BIOS password > HDD password > BITLOCKER password.... any point?

[Koldov]

On our previous Win 7 laptops, I had enforced every password I could.

 

BIOS - USER + MASTER

HDD - USER + MASTER

TRUECRYPT - ENCRYPTION

WINDOWS - LOGON

 

Yes, maybe it was a little overkill... No, I wasn't very popular...

 

Now with Win10 laptops rolling out with Bitlocker, I'm wondering if I should relax a little and cut it down to just putting a master password on the bios and forget the bios HDD password. We are still using BITLOCKER with a PIN (in password format), because they are used to putting a password in anyway.

[ShellfishClive]

If you don't want people to access the BIOS then I guess a BIOS password is okay, it's not really a huge deal these days. It just stops people fiddling in the BIOS.

 

Bitlocker one is good enough to protect the data though.

[DalekSec]

BIOS + Bitlocker should be more than enough in my book!

 

Edit: Obviously the User passwords also

Edited May 2, 2018 by DalekSec

[hardtailstar]

We have Bios and bitlocker

 

EDIT: The users dont need to put a password in the bios, we just have it so they cant do anything. Bitlocker is done with a usb key.

Edited May 2, 2018 by hardtailstar

[Arthur]

BIOS/UEFI password to stop users changing settings + BitLocker (with TPM or PIN) is more than sufficient.

 

There isn't any way to read the data on the OS drive since it's encrypted so I would say HDD passwords are a waste of time.

Edited May 2, 2018 by Arthur