Personal data encryption in Windows 11

[vtqhtr413]

There’s a new, more secure way to encrypt files in Windows 11, but it’s only an option for building secure applications, not a replacement for BitLocker. Windows 10 already has two flavor's of encryption — BitLocker and Windows Device Encryption — and as of the 22H2 release, Windows 11 Enterprise and Education adds Personal Data Encryption. BitLocker and Device Encryption are effectively the same full disk encryption technology, but there are management tools for BitLocker (which is only available in Windows Pro, Enterprise and Education) that let admins control whether one or more drives on a system are encrypted, as well as backing up and recovering the keys. Device Encryption is included in Windows Home and encrypts all the drives on the PC, with no option to exclude secondary drives. The name is different because calling it BitLocker would make people think they were getting the same management tools and options.

Personal data encryption in Windows 11

There’s a new, more secure way to encrypt files in Windows 11, but it’s only an option for building secure applications, not a replacement for BitLocker.

www.techrepublic.com

 

[HarborFront]

BitLocker and Device Encryption are useless once the drive is accessed (decrypted) ie in use. Similarly, for VeraCrypt. They are only good for protecting your data say when your laptop is lost.

For daily personal use you need to ensure files/folders are being monitored and protected for not being unauthorised accessed when drive is being decrypted ie. in use. I think MS AppLocker and Controlled Folder Access would be better off here.

Some AV have this protected folder feature which you can specify to add file-types to protect and the blocked/allowed app feature allows whitelisted apps to run only