Only those with the correct encryption key will be able to decrypt and access the encrypted files and information. BitLocker can work on all operating systems, drives, or devices, including portable storage devices.Īfter BitLocker completes the data encryption, it generates a recovery key. BitLocker achieves this by encrypting the entire drive that hosts your operating system and all your data. It gives you additional options for less than some of the Microsoft alternatives.īitLocker is just not FREE if you are in a regulated industry since it needs management to truly be secure the device and prove compliance.īitLocker is a full disk encryption solution that protects your data from theft, hacking, and loss.

It is built into the BIOS of the major laptop brands and just needs the key to activate it.Īlso, ESET is a quality product for encryption.

Other Bitlocker management can be found with SOPHOS and I believe TrendMicro as well.Īnother tool to consider, especially for laptops, is ABSOLUTE software. If you have Microsoft 365 Business premium you have additional controls over Bitlocker or, M365 E3/E5, Windows Enterprise E3/E5 all have MDOP.

You also need to enforce secure password management, user training on passwords and regular password changes.

You will need to use something like BitLocker Administration and Monitoring (MBAM) which is part of MDOP (Microsoft Desktop Optimization Pack) or another tool that will manage Bitlocker and give you proof the device is encrypted in the event of a lost or stolen device. Are you in a regulated industry? If so using the native BitLocker is not enough to prove compliance.

Eset encryption