I have a question about how Bitlocker works, specifically on Windows 10. There is enough on the internet to explain the basics but I'm struggling to find really clear answers on the below... Would really appreciate any advice you guys can give!
I recently decided to protect the single (SSD) hard drive in my Windows 10 laptop with Bitlocker. I have a TPM (Trusted Platform Module), so chose that option, the setup & encyption process was simple enough, and I've not had any problems with it since.
I understand the basics of how the TPM module works, checking key OS files/configuration parameters etc. are unchanged before releasing the keys to decrypt the rest of the drive/complete the boot into Windows. I understand how this then protects the data on the hard drive if it's ever removed from my laptop.
My understanding is that the TPM decrypts just enough to allow Windows to boot and prompt you for a password, and entering this then decrypts the remainder of the drive... so does this mean the data on the Bitlocker protected drive is then only protected by my Windows password if the whole laptop is stolen? Does using a fingerprint or some other method make any difference?
Secondly, on my laptop, I realised my wife's own user account actually had no password set when I enabled Bitlocker, so in this case, there would have been no protection of my data at all if the entire laptop had been stolen!? I've since made her set a password, but due to my lack of understanding of the previous, I now I have lingering doubts about whether this might have compromised my Bitlocker setup & effectiveness.
