Private file protection
Why is a password still required when a trusted device is present?
Short answer
A trusted device is only a condition for entering the open flow; it is not the vault password. You still enter the BitLocker password so possession of the device alone does not reveal files.
The device and password prove different conditions
A trusted device indicates that a selected device is present, while the password unlocks the encrypted vault. Keeping them separate reduces exposure if the device is lost or briefly taken.
Do not store the password in an ordinary document, script, or note on the PC. Recovery material is for recovery scenarios and should be kept somewhere separate from both the computer and vault file.
- A trusted device does not store or replace the password
- The user enters the password when opening
- Keep recovery material separate from the vault