It may be true that Microsoft has the decryption keys to your encrypted hard disk if you bought a PC with Windows 10 or Windows 8.1 preinstalled, and if it supports device encryption (we still come across machines that for one reason or another don't support it, or need reconfiguration to support it), and if you use a Microsoft account to log into Windows. But it isn't a security disaster that they do, and if you aren't happy that they do, it takes no more than a couple of minutes to delete the copy of the key they hold, and then update your system to render their key useless. This can be done on any Windows version, even Home.
Why Microsoft may have your encryption key
Posted on Wednesday, Dec 30 2015 @ 13:21 CET by Thomas De Maesschalck