Microsoft confirms it will give the FBI your Windows PC data
Page 1 of 1 [ 15 posts ]
Quote:
Windows 11's online Microsoft Account requirement means your PC is automatically backing up its data encryption key to the cloud, and Microsoft says it will hand those over to the FBI if requested via legal order.
Windows 11
Windows PCs by default will backup their encryption keys to the cloud, and Microsoft isn't afraid to share those with the FBI if requested. (Image credit: Zac Bowden | Windows Central)
Share this article
Join the conversation
Follow us
Add us as a preferred source on Google
Microsoft has confirmed in a statement to Forbes that the company will provide the FBI access to BitLocker encryption keys if a valid legal order is requested. These keys enable the ability to decrypt and access the data on a computer running Windows, giving law enforcement the means to break into a device and access its data.
The news comes as Forbes reports that Microsoft gave the FBI the BitLocker encryption keys to access a device in Guam that law enforcement believed to have "evidence that would help prove individuals handling the island’s Covid unemployment assistance program were part of a plot to steal funds" in early 2025.
This was possible because the device in question had its BitLocker encryption key saved in the cloud. By default, Windows 11 forces the use of a Microsoft Account, and the OS will automatically tie your BitLocker encryption key to your online account so that users can easily recover their data in scenarios where they might get locked out. This can be disabled, letting you choose where to save them locally, but the default behavior is to store the key in Microsoft's cloud when setting up a PC with a Microsoft Account.
Latest Videos From Windows Central
You may like
Surface Pro X SSD and SIM
Microsoft announces hardware accelerated BitLocker encryption for new Windows 11 PCs in 2026
Angry man shrugging and waving hands by the laptop in cafe
Windows has another BitLocker bug, but it's fairly easy to solve
OneDrive web albums
Microsoft didn’t delete your files — they just synced to OneDrive
"While key recovery offers convenience, it also carries a risk of unwanted access, so Microsoft believes customers are in the best position to decide... how to manage their keys,” Microsoft spokesperson Charles Chamberlayne said in a statement to Forbes.
Check if your PCs BitLocker encryption key is stored in Microsoft's cloud
Microsoft told Forbes that it receives around 20 requests for BitLocker encryption keys from the FBI a year, but the majority of requests are unable to be met because the encryption key was never uploaded to the company's cloud.
This is notable as other tech companies, such as Apple, have famously refused to provide law enforcement with access to encrypted data stored on their products. Apple has openly fought against the FBI in the past when it was asked to provide a backdoor into an iPhone. Other tech giants, such as Meta, will store encryption keys in the cloud, but use zero-knowledge architectures and encrypt the keys server-side so that only the user can access them.
Microsoft Account website
Your Windows PC has likely backed up your encryption key without you realizing. (Image credit: Microsoft)
It's frankly shocking that the encryption keys that do get uploaded to Microsoft aren't encrypted on the cloud side, too. That would prevent Microsoft from seeing the keys, but it seems that, as things currently stand, those keys are available in an unencrypted state, and it is a privacy nightmare for customers.
Windows 11
Windows PCs by default will backup their encryption keys to the cloud, and Microsoft isn't afraid to share those with the FBI if requested. (Image credit: Zac Bowden | Windows Central)
Share this article
Join the conversation
Follow us
Add us as a preferred source on Google
Microsoft has confirmed in a statement to Forbes that the company will provide the FBI access to BitLocker encryption keys if a valid legal order is requested. These keys enable the ability to decrypt and access the data on a computer running Windows, giving law enforcement the means to break into a device and access its data.
The news comes as Forbes reports that Microsoft gave the FBI the BitLocker encryption keys to access a device in Guam that law enforcement believed to have "evidence that would help prove individuals handling the island’s Covid unemployment assistance program were part of a plot to steal funds" in early 2025.
This was possible because the device in question had its BitLocker encryption key saved in the cloud. By default, Windows 11 forces the use of a Microsoft Account, and the OS will automatically tie your BitLocker encryption key to your online account so that users can easily recover their data in scenarios where they might get locked out. This can be disabled, letting you choose where to save them locally, but the default behavior is to store the key in Microsoft's cloud when setting up a PC with a Microsoft Account.
Latest Videos From Windows Central
You may like
Surface Pro X SSD and SIM
Microsoft announces hardware accelerated BitLocker encryption for new Windows 11 PCs in 2026
Angry man shrugging and waving hands by the laptop in cafe
Windows has another BitLocker bug, but it's fairly easy to solve
OneDrive web albums
Microsoft didn’t delete your files — they just synced to OneDrive
"While key recovery offers convenience, it also carries a risk of unwanted access, so Microsoft believes customers are in the best position to decide... how to manage their keys,” Microsoft spokesperson Charles Chamberlayne said in a statement to Forbes.
Check if your PCs BitLocker encryption key is stored in Microsoft's cloud
Microsoft told Forbes that it receives around 20 requests for BitLocker encryption keys from the FBI a year, but the majority of requests are unable to be met because the encryption key was never uploaded to the company's cloud.
This is notable as other tech companies, such as Apple, have famously refused to provide law enforcement with access to encrypted data stored on their products. Apple has openly fought against the FBI in the past when it was asked to provide a backdoor into an iPhone. Other tech giants, such as Meta, will store encryption keys in the cloud, but use zero-knowledge architectures and encrypt the keys server-side so that only the user can access them.
Microsoft Account website
Your Windows PC has likely backed up your encryption key without you realizing. (Image credit: Microsoft)
It's frankly shocking that the encryption keys that do get uploaded to Microsoft aren't encrypted on the cloud side, too. That would prevent Microsoft from seeing the keys, but it seems that, as things currently stand, those keys are available in an unencrypted state, and it is a privacy nightmare for customers.
https://www.windowscentral.com/microsof ... -nightmare
_________________
“Success is only meaningful and enjoyable if it feels like your own.” -Michelle Obama
Canadian Freedom Lover
Veteran
Joined: 16 Dec 2022
Age: 29
Gender: Male
Posts: 634
Location: Vancouver Canada
Canadian Freedom Lover wrote:
exec wrote:
With news like that last story, I'm starting to wonder about going full linux myself. I do use Windows 11 but I've never signed into to a MS account EVER!.
I would like to learn how to use Linux, I have heard nothing but good reviews.
_________________
“Success is only meaningful and enjoyable if it feels like your own.” -Michelle Obama
Canadian Freedom Lover
Veteran
Joined: 16 Dec 2022
Age: 29
Gender: Male
Posts: 634
Location: Vancouver Canada
exec wrote:
Canadian Freedom Lover wrote:
exec wrote:
With news like that last story, I'm starting to wonder about going full linux myself. I do use Windows 11 but I've never signed into to a MS account EVER!.
I would like to learn how to use Linux, I have heard nothing but good reviews.
Thanks for the advice. I'm not really into gaming aside from Minecraft, and I know there is a version made for Linux, so thats no big deal.
Canadian Freedom Lover wrote:
Thanks for the advice. I'm not really into gaming aside from Minecraft, and I know there is a version made for Linux, so thats no big deal.
You're quite welcome and keep us posted on what you decide to do.
_________________
“Success is only meaningful and enjoyable if it feels like your own.” -Michelle Obama
Canadian Freedom Lover
Veteran
Joined: 16 Dec 2022
Age: 29
Gender: Male
Posts: 634
Location: Vancouver Canada
exec wrote:
Canadian Freedom Lover wrote:
Thanks for the advice. I'm not really into gaming aside from Minecraft, and I know there is a version made for Linux, so thats no big deal.
You're quite welcome and keep us posted on what you decide to do.I will eventually follow through on buying a laptop and installing Linux on it. It is just a matter off waiting for my energy and executive function to come back.
Oh the joys of living with chronic fatigue.
Canadian Freedom Lover wrote:
exec wrote:
Canadian Freedom Lover wrote:
Thanks for the advice. I'm not really into gaming aside from Minecraft, and I know there is a version made for Linux, so thats no big deal.
You're quite welcome and keep us posted on what you decide to do.I will eventually follow through on buying a laptop and installing Linux on it. It is just a matter off waiting for my energy and executive function to come back.
Oh the joys of living with chronic fatigue.
_________________
“Success is only meaningful and enjoyable if it feels like your own.” -Michelle Obama
Companies have been doing this for years. Nothing new. As the saying goes: There is no cloud, it's just someone else's computer. Nothing you put on the Internet is truly private. At this point your best bet if you don't want the government and corporations looking at your private files is to use Linux.
EmpireHonda wrote:
Companies have been doing this for years. Nothing new. As the saying goes: There is no cloud, it's just someone else's computer. Nothing you put on the Internet is truly private. At this point your best bet if you don't want the government and corporations looking at your private files is to use Linux.
And if you are looking for super private there is always talis. I've not used it but plan to one day. https://tails.net/
_________________
“Success is only meaningful and enjoyable if it feels like your own.” -Michelle Obama
exec wrote:
EmpireHonda wrote:
Companies have been doing this for years. Nothing new. As the saying goes: There is no cloud, it's just someone else's computer. Nothing you put on the Internet is truly private. At this point your best bet if you don't want the government and corporations looking at your private files is to use Linux.
And if you are looking for super private there is always talis. I've not used it but plan to one day. https://tails.net/
Tails is good for when you need real secrecy and to not leave any trace of your activities, but it's not really good for regular computer use. For regular use I would suggest something like Ubuntu, since it's basically the ultimate "just werks" distro, while also letting you opt out of what little telemetry or surveillance Canonical actually does.
EmpireHonda wrote:
exec wrote:
EmpireHonda wrote:
Companies have been doing this for years. Nothing new. As the saying goes: There is no cloud, it's just someone else's computer. Nothing you put on the Internet is truly private. At this point your best bet if you don't want the government and corporations looking at your private files is to use Linux.
And if you are looking for super private there is always talis. I've not used it but plan to one day. https://tails.net/
Tails is good for when you need real secrecy and to not leave any trace of your activities, but it's not really good for regular computer use. For regular use I would suggest something like Ubuntu, since it's basically the ultimate "just werks" distro, while also letting you opt out of what little telemetry or surveillance Canonical actually does.
_________________
“Success is only meaningful and enjoyable if it feels like your own.” -Michelle Obama
