Comment by lifetimerubyist

15 days ago

I would prefer “it is impossible for Microsoft to give the keys because that’s not how their encryption works”.

That’s the case if you change a setting.

The default setting is a good mix of protecting people from the trouble they’re far more likely to run into (someone steals their laptop) while still allowing them back in if they forget their password. The previous default setting was no encryption at all which is worse in every case.

You can change it it you like.

The way it is is important. Otherwise getting locked out is very easy. I think booting into safemode or messing with specific bios settings / certain bios updates enough to lock you out.