A Microsoft BitLocker Questions

[Vectraat]

I have Windows 10 Pro which comes with BitLocker. 

a.) I assume I can use BitLocker on a USB flash drive? If so, am I only able to access the data from my desktop with Windows 10 Pro or how does this work? 

b.) If I have an USB Flash Drive / HDD encrypted with BitLocker, would this prevent a hacker from stealing data on the drive? 

[Levent]

2 minutes ago, Vectraat said:

I have Windows 10 Pro which comes with BitLocker. 

a.) I assume I can use BitLocker on a USB flash drive? If so, am I only able to access the data from my desktop with Windows 10 Pro or how does this work? 

b.) If I have an USB Flash Drive / HDD encrypted with BitLocker, would this prevent a hacker from stealing data on the drive? 

A) Yes you can use bitlocker on USB flash drives, I am not sure if bitlocker is backwards compatible with previous versions of windows.

B) No but it just takes an eternity to do so.

Also I would HIGHLY suggest you to use VeraCrypt instead of bitlocker, its much more advanced, free and its cross platform.

[Vectraat]

2 minutes ago, Levent said:

A) Yes you can use bitlocker on USB flash drives, I am not sure if bitlocker is backwards compatible with previous versions of windows.

B) No but it just takes an eternity to do so.

Also I would HIGHLY suggest you to use VeraCrypt instead of bitlocker, its much more advanced, free and its cross platform.

A.) Ok, so you're saying if I use BitLocker on Win 10 Pro to encrypt a flash drive whether I will be able to access the data from the flash drive via a non-Win 10 Pro PC? 

B.) Do I need to use VeraCrypt on every computer to see the contents of the encrypted Flash Drive?

-Basically I'm looking for a simple solution, not looking to tinker. I have a few drives with sensitive data on them and I just wanna have some level of encryption so if someone does access these drives while connected to a computer, they aren't gonna be able to easily steal / extract the data. 

[dalekphalm]

3 minutes ago, Vectraat said:

A.) Ok, so you're saying if I use BitLocker on Win 10 Pro to encrypt a flash drive whether I will be able to access the data from the flash drive via a non-Win 10 Pro PC? 

BitLocker is supposed to be backwards compatible, so you should be fine on Windows 7 and 8 PC's.

3 minutes ago, Vectraat said:

B.) Do I need to use VeraCrypt on every computer to see the contents of the encrypted Flash Drive?

VeraCrypt is an alternative to BitLocker. You can use them both, but it would be redundant.

3 minutes ago, Vectraat said:

-Basically I'm looking for a simple solution, not looking to tinker. I have a few drives with sensitive data on them and I just wanna have some level of encryption so if someone does access these drives while connected to a computer, they aren't gonna be able to easily steal / extract the data. 

You can either use BitLocker or VeraCrypt. Both will work just fine.

 

In terms of the files on the drives, if the drive is unlocked and you're using it, hackers could still steal the files, if they infiltrate your PC (or if infected by malware).

 

You would unlock the drive in one of several ways - usually a Password, though if your PC has a TPM module, you can automatically unlock when you log into Windows.

 

VeraCrypt would essentially require a password to use anytime.

 

VeraCrypt is also open source, and has been audited for backdoors and flaws, so it's "hypothetically speaking" the better solution. Practically speaking, both should work fine.

[Vectraat]

3 minutes ago, dalekphalm said:

BitLocker is supposed to be backwards compatible, so you should be fine on Windows 7 and 8 PC's.

VeraCrypt is an alternative to BitLocker. You can use them both, but it would be redundant.

You can either use BitLocker or VeraCrypt. Both will work just fine.

 

In terms of the files on the drives, if the drive is unlocked and you're using it, hackers could still steal the files, if they infiltrate your PC (or if infected by malware).

 

You would unlock the drive in one of several ways - usually a Password, though if your PC has a TPM module, you can automatically unlock when you log into Windows.

 

VeraCrypt would essentially require a password to use anytime.

 

VeraCrypt is also open source, and has been audited for backdoors and flaws, so it's "hypothetically speaking" the better solution. Practically speaking, both should work fine.

I would only use one or the other. I just didn't know if I needed VeraCrypt on all computers or if I just need to enter a PW.

Hmm, well, if BitLocker/VeraCrypt can't protect files while I have the drives unlocked and I'm accessing files then I guess this is pointless for me lol. 

Is there no other solution that can protect my data while I'm accessing the drives? 

[dalekphalm]

4 minutes ago, Vectraat said:

I would only use one or the other. I just didn't know if I needed VeraCrypt on all computers or if I just need to enter a PW.

Yes, to unlock an Encrypted Volume that was encrypted by VeraCrypt would require VeraCrypt to be installed on whatever device you're using to unlock the encryption.

Quote

Hmm, well, if BitLocker/VeraCrypt can't protect files while I have the drives unlocked and I'm accessing files then I guess this is pointless for me lol.

I'll put it this way, if the files were still encrypted while you were using them, then how would you use them? The encryption would stop you just as much as them.

Quote

 Is there no other solution that can protect my data while I'm accessing the drives? 

Nope. Turn off the internet, I suppose?

 

You can secure your computer as much as possible by making sure you have an active firewall (both on the PC, as well as on your router), as well as doing things like protecting your PC from malware infection, using common sense to avoid sketchy websites, don't plug other people's USB Drives into your PC, etc.

 

File/Drive encryption is incredibly useful. But it's mostly useful for if your PC is stolen, or you lose your USB Drive, etc.

[Vectraat]

3 minutes ago, dalekphalm said:

Yes, to unlock an Encrypted Volume that was encrypted by VeraCrypt would require VeraCrypt to be installed on whatever device you're using to unlock the encryption.

I'll put it this way, if the files were still encrypted while you were using them, then how would you use them? The encryption would stop you just as much as them.

Nope. Turn off the internet, I suppose?

 

You can secure your computer as much as possible by making sure you have an active firewall (both on the PC, as well as on your router), as well as doing things like protecting your PC from malware infection, using common sense to avoid sketchy websites, don't plug other people's USB Drives into your PC, etc.

 

File/Drive encryption is incredibly useful. But it's mostly useful for if your PC is stolen, or you lose your USB Drive, etc.

Is installed malware the only way someone can access the data or is there other means via hacking etc?

[dalekphalm]

Just now, Vectraat said:

Is installed malware the only way someone can access the data or is there other means via hacking etc?

There are many ways. Malware is the most typical, but backdoor exploits (Stuff like using a hidden exploit in Adobe Flash to enable you to perform commands at the system level remotely) would allow a hacker to access your system and potentially do anything they wanted.

[Vectraat]

2 minutes ago, dalekphalm said:

There are many ways. Malware is the most typical, but backdoor exploits (Stuff like using a hidden exploit in Adobe Flash to enable you to perform commands at the system level remotely) would allow a hacker to access your system and potentially do anything they wanted.

Hmm, I guess I need to learn some networking stuff then. I just figured maybe there was an easy and lazy way to protect my data better.