Since I encrypted my non-system drive with BitLocker in Windows 10, it always requires a password entry to unlock the drive after every system startup. I tried to remove the password, but it gave me an error message stating that "This password is the only way to unlock this drive. Add another unlocking method before removing this one". How can I remove BitLocker password?
Thank you for posting your query here. The BitLocker password protection is in place to safeguard BitLocker-encrypted data. You can stay away from annoying frequent password typing by simply disable BitLocker Drive Encryption. Or you can try the following method to resolve this issue. Let’s get started!
When encrypting a non-system drive, it provides two options, one is to "Use a password", while another is "Use my smart card". Most people choose the former, with its unlocking methods being through a password or a recovery key.
When it comes to data security, it is worth requiring the extra authentication. Accordingly, if you've removed the BitLocker password in windows 10, with only one layer of security remains, it would compromises the confidential information’s safety.
According to the error message suggestion, you can add another BitLocker unlock method - "add smart card" option. By completing this procedure, you can choose to clear BitLocker password.
However, the encrypted drive should be at unlocked state. Unlock it through BitLocker recovery key if you forget the BitLocker password. Note that it is impracticable to remove the password by adding key protectors to non-system drives.
Step 1 Click on the "Turn on auto-unlock" option next to the encrypted drive in BitLocker Drive Encryption panel to enable it.
With this method, unlock BitLocker without password automatically is possible, without the need to remove password.
Step 2 Now you can remove BitLocker password successfully.
Note: However, it requires former BitLocker encryption for System drive. Only when encryption process completed, can you enable BitLocker auto-unlock feature for non-system drives. Otherwise, you may encounter the error message "The operating system is not protected by BitLocker Drive Encryption".
Besides, after you turn on auto-unlock for fixed data drive, the system will store another invisible password in System Drive. Then if you want to disable BitLocker for system drive, you may receive the following error message.
You can choose to decrypt all drives at the same time, or turn off the auto-unlock option first.
If you've already remove the BitLocker password, and want to turn off BitLocker auto-unlock, you may receive an error message which says "Automatic unlocking is the only way to unlock this drive, add another unlocking method before removing automatic unlocking", like this:
To fix it, following the steps below to add BitLocker password to ensure the safety of the BitLocker-encrypted drive.
Step 1 Click on "Add password" option.
Step 2 Enter and confirm the BitLocker password, and then click the "finish" button.
Step 3 Now you can easily turn off auto-unlock for the fixed data drive.
You can imagine that: if the system unlocks the encrypted non-system drive without validating the integrity of the system drive, making the important documents exposed to an unsafe environment, then BitLocker encryption makes no sense.
When setting up encryption for the system drive, there are usually two options: "Insert a USB flash drive" and "Enter a password". If you choose the password protection method, you still need to enter specific password when laptop boot up.
For even greater security, add TPM + Startup key protector for system drive is a better choice. And if one day you aim to remove it, just run the command below in Command Prompt:
manage-bde -protectors -delete e: -type tpmandstartupkey
My pleasure to assist you. BitLocker offers multiple password protection methods for different scenarios. The BitLocker password is a solid barrier to BitLocker security.
Lydia
BitLocker Suspend is a feature that temporarily disables encryption without decrypting the encrypted data. By using this feature, we can perform certain operations that might be recognized as tampering with the system by TPM.
Benjamin
Microsoft BitLocker does offer a variety of authentication mechanisms for us, and the mode you select, combining three of common modes, indeed provides the highest level of security.
Lydia
A good question. Let's start with the conclusion: Yes, you can read, write and decrypt data stored in Bitlocker-protected drive on Windows Home edition as long as you have the appropriate key.
Benjamin
