Bitlocker enabled itself on Windows 10 Home edition without a notice and without permission

Anonymous
2022-06-29T22:51:13+00:00

After three years of owning a Dell Inspiron 13 (Windows Home) the computer somehow enabled Bitlocker on its own and encrypted my C: drive. Since I did not activate Bitlocker, I don't have the keys to decrypt the drive. My Microsoft account does not list any keys in it so there is no way to recover the keys as far as I know. Therefore none of the published solutions I have seen can work because they all assume that I have access to the keys. I see many similar complaints online (at least since 2018) and hundreds of "likes" so this appears to be a relatively common problem.

When booting, I see a message titled "BitLocker recovery" and it asks for the recovery key. It then says to "try your work or school account at: aka.ms/aadrecoverykey."

This suggests that the key may be associated with some active directory domain away from my computer. However, the admin account on this computer has, to my knowledge, never logged into an active directory domain, although non-admin users have. And, if the Amin account has connected to a Active Directory somewhere, I sure as heck did not give them a permission to encrypt my drive and lock me out of my computer, and give the key to some third party "work or school" account. If this is what happened, Microsoft, you have a serious security issue where third parties can effectively encrypt hard drives without permission using Microsoft's own tools. That is ransomware - without the ransom. But, this is still just a theory vaguely supported by this link https://hardsoft-support.kayako.com/article/99-windows-10-bitlocker-turns-on-without-a-notice

Here is a quote from the post: "Dell and Lenovo systems that ship with the Windows 10 operating system and are equipped with Trusted Platform Module (TPM) capability will have Microsoft BitLocker encryption enabled from the factory. It has been found that once the device is registered to a Active Directory domain - Office 365 Azure AD, Windows 10 automatically encrypts the system drive. You find this once you reboot your computer and are then prompted for the BitLocker key."

Since I don't know what possible organization could have encrypted the drive, and since I don't have admin access to them, the instructions in the article don't apply.

The laptop is Dell Inspiron 13 7370 - which I don't even think has a TPM chip built in it. BIOS is version 1.20.0. ePSA build is 4306.13 UEFI ROM.

So, Microsoft, how does this get fixed?

P.S. My other computers have Win10 Pro and and they have Bitlocker turned on, but this computer intentionally did not have Bitlocker turned on - and it was not supposed to be possible to turn on bitlocker on a Win10 Home edition. I am mentioning this to highlight that I did not "accidentally" trigger the Bitlocker being turned on - especially because it requires many steps and confirmations. The drive was simply encrypted one day with permission from me.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

104 answers

Sort by: Most helpful
  1. Neil D 34,285 Reputation points Volunteer Moderator
    2024-02-21T22:40:39+00:00

    It does (as you say) enable during setup and it is Device encryption, which is using BitLocker. It may not be the classic BitLocker as in Pro edition but Home edition can have the system drive encrypted during he OOBE.

    The device manufacturers know about this (in my opinion) should let the new user know that it occurs and the way to check for the recovery key, while they can or the method to turn it off.

    While the system is accessible it can be turned off in Settings > Privacy & security > Device encryption.

    If a user has a Microsoft account and used that during setup then the recovery key should be visible in their account.

    Neither Microsoft nor the device manufacturer seem to give a new user that information.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2024-02-17T19:25:17+00:00

    its also funny that there is so much false information on this on the web, i found this HP document explaining some , but not why, i read somewhere before Microsoft recomended it to OEM's so they did it,

    also 10 and 11 is the same OS under the hood so , it applies to 10 and 11 , just older article.

    HP PCs - BitLocker encryption is enabled by default (Windows 10) | HP® Support

    has its says what happened to you ,but if was off i dont know, mabey you needed clear tpm data in bios , that would make sence why it asked even if off in the OS,

    NOTE: The BitLocker recovery key is needed to perform updates that affect the TPM data, including BIOS updates.

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2024-02-17T15:20:56+00:00

    after install I know disable secureboot and TPM in the bios problem solved, encryption needs them on.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2023-12-18T20:42:28+00:00

    skip the info on bitlocker and if you read down to the bottom of this ms kb link , you will see , on home its about device encryption and

    its only on some supported devcies and if you log into a microsoft account

    Device encryption in Windows - Microsoft Support

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2023-12-18T20:30:24+00:00

    i was only showing you proof that ya , device encryption is on home and bitlocker is pro, but only some makes and models have device encryption , some lenovo too, new ones, if you read the asus support page, see click here for home device encryption how to , and here for pro bitlicker, read better before you reply back , thanks.

    Was this answer helpful?

    0 comments No comments