🔐 Microsoft confirmed it provides BitLocker encryption recovery keys to the FBI when presented with valid legal orders. In early 2025, the company handed over keys that allowed the FBI to decrypt data on three laptops seized during a fraud investigation in Guam related to COVID-19 unemployment assistance theft.

🌐 By default, Windows 11 automatically uploads BitLocker recovery keys to Microsoft's cloud servers when users set up accounts with a Microsoft Account. These keys are stored in unencrypted form on Microsoft's servers, meaning the company can access them and provide them to law enforcement without the user's knowledge or consent.

📊 Microsoft receives approximately 20 requests per year from the FBI for BitLocker keys, though most cannot be fulfilled because users have not backed up their keys to the cloud. The company states it only provides keys in response to valid legal orders from multiple governments.

⚠️ Security experts have raised serious concerns about this practice. Matthew Green from Johns Hopkins University emphasized that recovery keys lack end-to-end encryption, allowing Microsoft and law enforcement to access encrypted data without knowing the user's password.

🛡️ Users can disable the default cloud backup behavior and choose to store BitLocker recovery keys locally instead, but this option requires manual configuration during Windows 11 setup.

#BitLockerPrivacy #EncryptionSecurity #DigitalPrivacy