Tested: Windows 11 Pro's On-By-Default Encryption Slows SSDs Up to 45%
Tested: Windows 11 Pro's On-By-Default Encryption Slows SSDs Up to 45%
BitLocker software encryption slows performance. Here's how to fix it.
Tested: Windows 11 Pro's On-By-Default Encryption Slows SSDs Up to 45%::Windows 11 Pro defaults to BitLocker being turned on, using software encryption. We've tested the Samsung 990 Pro with hardware encryption to show how the various modes impact performance, and how muc
You're viewing a single thread.
Just a reminder for everyone, BitLocker is only available in Windows Pro and higher versions. Most Windows PCs available in stores are running Windows Home which doesn't have this and so isn't affecting most users.
If you are running Windows Pro, you are most likely wanting and needing that security. But odds are, unless you are using a work issued device, you are most likely running Windows Home.
I'm using windows pro, because of hyperv, and gpu virtualisation. And I don't need that security feature.
And windows pro still have some benefits. The group policy, tho most of the changes can still be made in the registry.
Then you can turn it off. It's on by default as the default user of Pro will want it off. But as there are some cases that some people won't want/need it so it can be turned off. The average user of Pro will be a workplace office setting.
Another case that it wouldn't be used in is video editing as encrypting large files just wouldn't be worth the effort and time. But again, this isn't where most average Pro users will be. You can always find a case where X of anything doesn't support someone's needs, but companies like this need to look at it and ask "What does the average user want?" Not "What does everyone in every use case need?"
Yep. And the average user doesn't know what a bios update is.
Oh and the average user doesn't know that windows update has bios updates from manufacturers.
What happens when the bios is flashed? Poof the key disappeared...
Nice move Microsoft. Not sure if they have something to prevent the loss of the encryption key or some security, but for those people I hope they don't loose their data due to updates.
You can log into the Microsoft website and obtain the unlock encryption key from there (dealt with that before.)
And Microsoft isn't the only one who updates BIOS with system updates. I've once had to deal with someone who's Macbook wouldn't see any drive (and so couldn't load into macOS, or even re-install the OS). After a lot of back and forth had to finally find out that during an update they were in a hurry and forced the machine off and it was saying "Firmware update in progress", but they assured me that couldn't have been the issue...
I use windows pro for personal because home doesn't have bitlocker. You could totally upgrade using MAS too.
Windows 11 Home does have BitLocker, it's just a very simplified version of BitLocker without most of the options. Like it's basically just on or off in the settings, no way to manually backup the key or anything else. But changing certain things will trigger the enter BitLocker key screen at boot.
That's Device Encryption, which isn't the same.
https://www.thewindowsclub.com/difference-between-device-encryption-and-bitlocker
From your article:
Difference between Device Encryption and BitLocker
Both are fundamentally the same, but there are some differences between Device Encryption and BitLocker on Windows. The limitation with Device Encryption is that you have no options to configure and no way to require preboot-authentication – you have to rely on the TPM chip alone.
I'm pretty sure it just uses BitLocker under the hood and doesn't let you configure some things:
Your first link states that BitLocker is only available on Pro or above, and the second link is for Window 10 Mobile, which was a phone OS.
I'm pretty sure it's a different thing altogether. Like how BitLocker and Windows Encrypted File System (EFS) are two different things, but both of them are still in use.
Just checked an 11 Home computer that has Device Encryption turned on:
Get-BitLockerVolume reports that it is on for the main drive with RecoveryPassword and Tpm protectors.
It's definitely just a rebranded, less featured BitLocker.
Wait… I’ve never been a windows user, so forgive my ignorance… is full disk encryption really not available to all windows users? And most people buy the home version that lacks it?
It has Device Encryption. Something different, yet kind of the same. Device Encryption isn't as robust as BitLocker, its business grade vs home user grade.
Ah okay! Whew! I’d be super disappointed if full disk encryption wasn’t available to users.
I’m using Enterprise, because it has less overall bloatware.