Capture.PNG

## BitLocker Encryption (1 of 3) - **BitLocker Drive Encryption** encrypts the entire Windows volume and any other volume on the drive - Restricts access by requiring one or two encryption keys - Works in partnership with file and folder encryption - Three ways to use BitLocker Encryption:...

## BitLocker Encryption (1 of 3) - **BitLocker Drive Encryption** encrypts the entire Windows volume and any other volume on the drive - Restricts access by requiring one or two encryption keys - Works in partnership with file and folder encryption - Three ways to use BitLocker Encryption: - **Computer Authentication** - Computer has a chip on the motherboard called **TPM (Trusted Platform Module)** - That holds BitLocker encryption key (also called the startup key) - If hard drive is stolen, BitLocker would not allow access without the startup key - **User Authentication** - startup key stored on USB drive - **Computer and User Authentication** - PIN or password required at every startup - An example of **multifactor authentication (MFA)**