Microsoft may give your encryption key to law enforcement upon valid request - here's how to keep it safe

ZDNET reports that Microsoft confirmed it can provide BitLocker recovery keys to law enforcement upon valid legal orders if users have backed up those keys to the Microsoft cloud, citing an FBI case in Guam as a notable example. The piece frames the issue as a lawful process matter rather than a backdoor, highlighting privacy risks inherent in cloud key escrow and noting Microsoft receives roughly 20 such requests annually. It recommends keeping BitLocker enabled for device protection but avoiding cloud storage of recovery keys, instead saving them locally or printing, and offers steps to review and adjust BitLocker settings in Windows.