Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstalliTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
No. BitLocker does not stop ransomware from encrypting files on a drive that is unlocked. It encrypts Windows volumes to make data harder to access if a device is lost, stolen, or improperly decommissioned. Ransomware protection and recovery require separate defenses, especially backups that attackers cannot erase or encrypt.
What BitLocker protects
BitLocker is Windows volume encryption. Microsoft describes its purpose as addressing data theft or exposure from lost, stolen, or inappropriately decommissioned devices. When a laptop is powered off, someone who removes its drive or gains physical access must still get past the configured encryption and key protectors to read the data. Microsoft’s BitLocker overview explains that protection boundary.
A Trusted Platform Module (TPM) can help verify that the device has not been tampered with while offline. Depending on configuration, startup can also require a PIN or a USB startup key. These measures govern access before Windows starts; they do not stop ransomware once a user has unlocked the volume.
Why BitLocker does not block ransomware
After Windows unlocks the protected volume, applications running with the user’s access can work with its files. Ransomware with sufficient access can therefore change or encrypt those files just as other software can. BitLocker protects data at rest from unauthorized offline access; it is not a malware detector, file-change blocker, or restoration system.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
The distinction is practical: encryption can make a powered-off device’s data harder to read, while a protected backup gives you a way to restore data after an attack. Microsoft treats ransomware recovery as a separate concern and recommends planning for recovery and protecting backups from attackers. Microsoft’s ransomware backup and recovery guidance discusses those measures.
Choose BitLocker startup protection with recovery in mind
TPM only
A TPM-only setup is more convenient because startup does not require a user to enter a PIN or insert a startup key. It may suit devices that need to restart unattended, but it does not add that extra preboot factor.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
TPM plus PIN or startup key
Requiring a PIN or USB startup key adds a preboot step. That can strengthen access control before Windows loads, but it also creates operational trade-offs: a forgotten PIN or lost key can prevent normal startup until recovery, and unattended restarts become harder. Neither option changes ransomware’s ability to access files after the volume is unlocked. See Microsoft’s BitLocker countermeasures for configuration considerations.
Keep recovery information safe and separate
A BitLocker recovery password is a 48-digit number. Depending on the device and how it is managed, recovery information may be stored in a Microsoft account, Microsoft Entra ID, Active Directory Domain Services, a file, a printout, or removable media. Microsoft advises securing it separately from the protected device: someone who obtains the recovery information may be able to unlock the volume. Microsoft’s recovery overview describes recovery methods and the information they require.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Some recovery scenarios can use a key package with recovery information to recover portions of a severely damaged volume. That package is a recovery aid, not a backup of your files. Microsoft warns that BitLocker is designed to make an encrypted drive unrecoverable without the required authentication; losing the necessary recovery information can mean losing access to the data. Its BitLocker FAQ covers recovery and key-storage concerns.
Used-space-only encryption has a specific old-data caveat
When turning on BitLocker for a previously used volume, used-space-only encryption can leave remnants of older data in sectors that are no longer in use. Those remnants may remain recoverable with disk-recovery tools until overwritten. For a brand-new volume, Microsoft says newly written data is encrypted, so this particular leftover-data concern does not apply in the same way. Consider the history of the drive when selecting an encryption mode; Microsoft’s BitLocker planning guide discusses the trade-off.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Build ransomware recovery separately
Keep backups of critical data and systems, and make sure attackers cannot deliberately erase or encrypt them along with the original files. Microsoft identifies immutable storage as one way to support restoration. A backup drive left connected to the PC, or a cloud backup that the same compromised account can modify, may not provide that protection. Plan how data will be restored, not just where another copy will be stored.
Recommended Free Tools
- Keep recovery information for BitLocker in a secure location separate from the device.
- Back up important files and systems on a schedule that fits how often they change.
- Protect backup copies from modification or deletion by compromised devices or accounts.
- Know how you would restore data and regain access if Windows or a volume cannot start normally.
Performance impact
Microsoft says BitLocker’s performance overhead is typically small and often in the single-digit percentages relative to storage-operation throughput. This is a general vendor statement, not a benchmark for every PC, drive, or workload. Microsoft’s FAQ provides the qualification.
Quick Recap
Best Value
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
