The forthcoming Windows 11 update, known as 24H2 or the 2024 update, is reported to introduce BitLocker drive encryption by default during the installation process. DeskModder reports that this enhancement aims to bolster security across various editions of Windows 11 24H2, including the Home version. A notable change observed in the new installation setup, which deviates from the traditional “blue windows” startup, is the automatic background encryption of drives using BitLocker. This move by Microsoft reflects a broader commitment to ensuring data security and privacy for its users.
Enhanced Security with Potential Performance Considerations
While the integration of BitLocker encryption marks a leap forward in securing user data, it also raises concerns regarding performance. The default software-based BitLocker encryption, utilizing XTS-AES 128, has been found to potentially impact the performance of high-speed data drives, including PCIe Gen4 NVMe SSDs. This implication suggests that users might experience a decrease in data access speeds, a factor worth considering for those relying on fast storage solutions. Additionally, there is a risk that users unaware of the automatic encryption may face challenges in data recovery if the encryption key is misplaced or not properly saved.
User Autonomy and Future Directions
Despite the automatic encryption feature, users retain the option to disable Device Encryption through the Privacy & Security settings, offering a balance between enhanced security measures and individual preference. This flexibility ensures that users who prioritize performance or have specific encryption needs can tailor their experience accordingly.
At the end of last month, Microsoft promised a fix for a BitLocker encryption bug on Windows 11 and Windows 10. he problem, which affected platforms including Windows 11 versions 21H2/22H2, Windows 10 versions 21H2/22H2, and Windows 10 Enterprise LTSC 2019, specifically impacted environments where drive encryption was enforced for operating system and fixed drives. There are reports today that Microsoft has yet to issue this fix
