Microsoft says it will provide encryption keys for Windows PC data protected by BitLocker where it has access to them and it’s received a valid warrant.<\/p>\n
getty<\/p>\n
Early last year, the FBI served Microsoft with a search warrant, asking it to provide recovery keys to unlock encrypted data stored on three laptops. Federal investigators in Guam believed the devices held evidence that would help prove individuals handling the island\u2019s Covid unemployment assistance program were part of a plot to steal funds.<\/p>\n
The data was protected with BitLocker, software that\u2019s automatically enabled on many modern Windows PCs to safeguard all the data on the computer\u2019s hard drive. BitLocker scrambles the data so that only those with a key can decode it.<\/p>\n
It\u2019s possible for users to store those keys on a device they own, but Microsoft also recommends BitLocker users store their keys on its servers for convenience. While that means someone can access their data if they forget their password, or if repeated failed attempts to login lock the device, it also makes them vulnerable to law enforcement subpoenas and warrants.<\/p>\n
In the Guam case, it handed over the encryption keys to investigators.<\/p>\n
Microsoft confirmed to Forbes that it does provide BitLocker recovery keys if it receives a valid legal order. \u201cWhile key recovery offers convenience, it also carries a risk of unwanted access, so Microsoft believes customers are in the best position to decide… how to manage their keys,\u201d said Microsoft spokesperson Charles Chamberlayne.<\/p>\n
He said the company receives around 20 requests for BitLocker keys per year and in many cases, the user has not stored their key in the cloud making it impossible for Microsoft to assist.<\/p>\n
\u201cIf Apple can do it, if Google can do it, then Microsoft can do it.\u201d\n<\/p>\n
Matt Green, associate professor at Johns Hopkins University<\/p>\n
The Guam case is the first known instance where the Redmond, Washington company has provided any encryption key to law enforcement. Back in 2013, a Microsoft engineer claimed<\/a> he\u2019d been approached by government officials to install backdoors in BitLocker, but had turned the requests down.<\/p>\n Senator Ron Wyden said in a statement to Forbes that it is \u201csimply irresponsible for tech companies to ship products in a way that allows them to secretly turn over users’ encryption keys.\u201d<\/p>\n \u201cAllowing ICE or other Trump goons to secretly obtain a user\u2019s encryption keys is giving them access to the entirety of that person\u2019s digital life, and risks the personal safety and security of users and their families,\u201d he added. <\/p>\n This isn\u2019t just an issue in the U.S. Jennifer Granick, surveillance and cybersecurity counsel at the ACLU, noted that foreign governments with questionable human rights records also demand data from tech giants like Microsoft. \u201cRemote storage of decryption keys can be quite dangerous,\u201d she said.<\/p>\n Got a tip on Big Tech\u2019s role in surveillance? Contact the reporter, Thomas Brewster, at tbrewster@forbes.com or +1 929-512-7964 on Signal.<\/p>\n Law enforcement regularly asks tech giants to provide encryption keys, implement backdoor access or weaken their security in other ways. But other companies have refused. Apple in particular has repeatedly been asked for access to encrypted data in its cloud or on its devices. In a highly publicized showdown<\/a> with the government in 2016, Apple fought an FBI order to help open phones belonging to terrorists who shot and killed 14 in San Bernardino, California. Ultimately, the FBI found a contractor to hack into the iPhones.<\/p>\n Privacy and encryption experts told Forbes the onus should be on Microsoft to provide stronger protection for consumers\u2019 personal devices and data. Apple, with its comparable FileVault and Passwords systems, and Meta\u2019s WhatsApp messaging app also allow users to backup data on their apps and store a key in the cloud. However, both also allow the user to put the key in an encrypted file in the cloud, making law enforcement requests for it useless. Neither are reported to have turned over encryption keys of any kind in the past.<\/p>\n \u201cThis is private data on a private computer and they made the architectural choice to hold access to that data. They absolutely should be treating it like something that belongs to the user,\u201d said Matt Green, cryptography expert and associate professor at the Johns Hopkins University Information Security Institute.<\/p>\n \u201cIf Apple can do it, if Google can do it, then Microsoft can do it. Microsoft is the only company that’s not doing this,\u201d he added. \u201cIt’s a little weird\u2026 The lesson here is that if you have access to keys, eventually law enforcement is going to come.\u201d<\/p>\n Granick raised concerns about the breadth of information that the FBI could obtain if agents get access to data protected by BitLocker. \u201cThe keys give the government access to information well beyond the time frame of most crimes, everything on the hard drive,\u201d she said. \u201cThen we have to trust that the agents only look for information relevant to the authorized investigation, and do not take advantage of the windfall to rummage around.\u201d<\/p>\n In the Guam case, the court docket shows the warrant was successfully executed. The lawyer for defendant Charissa Tenorio, who pleaded not guilty, said the information provided to her by the case\u2019s prosecutors included information from her client\u2019s computer and that it included references to BitLocker keys that Microsoft had provided the FBI. The case is ongoing. <\/p>\n Both Green and Granick said Microsoft could have users install a key on a piece of hardware like a thumb drive, which would act as a backup or recovery key. Microsoft does allow for that option, but it\u2019s not the default setting for BitLocker on Windows PCs.<\/p>\n Without the encryption keys from Microsoft, the FBI would\u2019ve struggled to get any useful data from the computers. BitLocker\u2019s encryption algorithms have proven impenetrable to prior law enforcement attempts to break in, according to a Forbes review of historical cases. In early 2025, a forensic expert with ICE\u2019s Homeland Security Investigations unit wrote<\/a> in a court document that his agency did \u201cnot possess the forensic tools to break into devices encrypted with Microsoft BitLocker, or any other style of encryption.\u201d In one previous case, federal investigators obtained keys by discovering that a suspect had stored them on unencrypted drives<\/a>. <\/p>\n Now that the FBI and other agencies know Microsoft will comply with warrants similar to the Guam case, they\u2019ll likely make more demands for encryption keys, Green said. \u201cMy experience is, once the U.S. government gets used to having a capability, it’s very hard to get rid of it.\u201d<\/p>\n MORE ON FORBESForbesAI Bathroom Monitors? Welcome To America\u2019s New Surveillance High SchoolsBy Thomas Brewster<\/a>ForbesICE Finds Violent Threats Against Agents In Student\u2019s Deleted Tweets, DOJ SaysBy Thomas Brewster<\/a>ForbesThis 25-Year-Old Founder Wants To Kick Chinese Drones Out Of American SkiesBy Zoya Hasan<\/a>ForbesWarehouse With $35 Million Of Apple Devices Linked To Chinese Fraud RingBy Thomas Brewster<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft says it will provide encryption keys for Windows PC data protected by BitLocker where it has access…\n","protected":false},"author":2,"featured_media":425453,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[517,202531,28,37892,2765,48385,178759,1282,1281,514,12655],"class_list":["post-425452","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-apple","tag-bitlocker","tag-business","tag-encryption","tag-fbi","tag-guam","tag-keys","tag-meta","tag-microsoft","tag-privacy","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/425452","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=425452"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/425452\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/425453"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=425452"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=425452"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=425452"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}