Microsoft BitLocker Reviews

We are primarily using the solution for all endpoints first. We are going to protect all endpoints in the organization. The endpoint is any computer with Windows 10 or Windows 11. We use the feature device encryption and file encryption, basically.

It's the same BitLocker that we use in Sophos. Maybe the feature we like the best is file encryption.

The connectivity is in the cloud, therefore this is a good solution as we have, the real-time status of all machines.

The interface is user-friendly.

The initial setup is very simple. 

Technical support has not been very good. 

We'd like automatic self-service in future releases. 

I've been using the solution for around three months. 

I can't speak to stability. We're still testing the product right now. 

The scalability is good. A company can expand it as needed. 

We have about 100 people using the product currently. Only technical users are on it. 

Technical support could be better. It is slow. Maybe there are people who only have a certain certification, however, they don't analyze the problems. They only go to the documentation which doesn't help as I've done all the tests they do before I call. I don't like that support.

I'm also familiar with McAfee and Sophos. We changed due to the fact that we already had a license for Microsoft Intune and the BitLocker comes included in it. You don't need to pay anything for the license.

We found the initial setup to be very simple and straightforward. It's not overly complex or difficult. 

We've used it for about three months and are still doing tests. 

We have 25 to 50 people that are handling the deployment and maintenance. They are our engineers. 

We work with a partner that has assisted us with the implementation.

The cost of the solution is bundled in with Microsoft Intune. I'm not sure of the exact licensing. It's managed by another person.

We are a customer and end-user.

We are using Intune to enable BitLocker. We are testing BitLocker on Windows 10 and Windows 11.

BitLocker is very established. It's very easy to encrypt the machine, versus Sophos in Windows 7. The keys are centrally located. 

I'd rate the solution nine out of ten. 

Encrypting the help desk system with BitLocker serves as a crucial security measure. If a laptop or device falls into unauthorized hands, the encryption ensures that data cannot be decrypted without proper authentication which enhances system security and provides a reliable recovery mechanism to safeguard sensitive information.

It provides a comprehensive level of protection against unauthorized access. 
It holds significant value as it reduces the need for extensive IT management to handle security across networks and environments. Its significance goes beyond BitLocker alone; it encompasses the entire product suite or platform.

The primary aspect for improvement lies in expanding our developer base, which would accelerate the development process and bring these enhancements to fruition. For the upcoming release, I'm interested in seeing additional features, particularly the ability to synchronize usernames and passwords into a pre-boot authentication system.

I have been using it for a few years.

It's stable and well-established. Over the past few years that we have been using it, it has proven to be reliable and robust. I would rate it ten out of ten.

It provides high scalability.

In terms of Microsoft tech support, the speed, knowledge, and customer-friendliness can vary. Microsoft support may have its complexities, but when using our management tool for BitLocker, the process is streamlined.

The initial setup is straightforward. It involves leveraging our SaaS platform, allowing the backend to be subscribed.

The deployment process is streamlined: you need to create a configuration and effortlessly roll it out to your machine. It's an easy and user-friendly procedure.

It operates on a subscription model on an annual basis.

Overall, I would rate it nine out of ten.

We primarily use the solution for cybersecurity purposes. 

Overall, it is a good solution. 

We need to understand many security requirements. We chose Bitlocker due to the fact that we had Windows 10 and needed something that could centralize everything for users. We have a team that is able to handle the maintenance easily.

It is easy to use and administer. 

The initial setup was straightforward. 

The solution is stable.

It's available via Windows 10.

It can scale well. 

The only improvement needed is a module that can centralize the keys better. It needs a management console. 

I've used the solution for two or three years. 

This is stable and reliable. We just need to figure out how to manage everything in a centralized way. However, there are no bugs or glitches. 

We have 100 users or so on the product. We plan to extend that number in the future as our endpoint strategy is to cover all laptops so that even those off-site will be protected. 

This is a scalable, reliable product. 

We have good, available support. We didn't need support during deployment even though we did have access to it. 

I did not previously use another solution in this company.

At another company, I did use. Symantec Endpoint Encryption. Symantec is a proper endpoint solution, and therefore it has a console manager. With Bitlocker, we lack that centralized console. 

There was a team that handled the deployment. The process was straightforward. It is easy to deploy and install. It also doesn't take too long to implement. We don't deploy it centrally. Our team contacts the end users of sensitive endpoints. For future mobility, the strategy is to ensure all users in the future will have this on their laptops. 

We have about five admins to handle the maintenance of the product. 

We implemented the product ourselves with our internal team. We had ten people dealing with the deployment. 

The ROI is good. It's already included in Microsoft Windows 10, which makes it easy to adopt. It saves us due to the lowered risk involved for users of laptops.

The pricing is very reasonable. Bitlocker is already included in Windows version 10. We do pay extra for technical support and potential maintenance.

We're looking for some sort of solution that can help us manage Bitlocker keys. 

I am a customer and end-user. 

We're moving towards having a solution that can manage user mobility, and we have to define a strategy that may include Bitdefender. Our future strategy is all about mobility.

I'm not sure which version of the solution we're using. 

I'd advise new users to compare it to other solutions and make sure they understand what Bitlocker can do. They may need an extra solution for managing Bitlocker.

I would rate the solution nine out of ten. It's great. It just needs a management console. 

We primarily use the solution for encryption. 

You have to do a bit of reading to understand the logic; however, after that, it becomes pretty straightforward to use it.

Feature-wise we have the ability to encrypt fast. This means when you enforce the policy and when you onboard a device via the Azure AD, it comes online pretty quickly. The speed at which BitLocker engages is pretty strong. That's a significant thing. You can even control your external devices, like your USB devices. You can allow or deny, or even encrypt those devices. There are lots of useful things like that available in this product.

In terms of improvement, they should look at file encryption. When the files are being moved out or something, sometimes we need encryption in transit. Meaning when your system, your laptop you're using, the files are idle, then they are encrypted. And if you are sending the files out, let's say you're mailing the files out, that's data in transit. The encryption over there is controlled differently. It depends on what tool you're using for sending the files. However, the encryption is controlled there. The thing is, if you could have one single point of the solution, no matter if you're using Office 365 as an organization, to have just one encryption system across multiple systems, rather than having one BitLocker on the drive, then another encryption rule-set for sending an email, that would be easier.

Maybe the solution could use some more capability within the reporting system, et cetera. The reporting in Microsoft is very minimal. If you had a third-party tool, they will give you very high-level, very detailed reporting across various categories and conditions. Microsoft doesn't do that. That's a huge drawback in the system. You open the control, you get a lot of information; however, that information, you can't export.

I’ve been using the solution for almost a year now.

The solution is absolutely stable. There are no bugs or glitches and it doesn’t crash or freeze. It’s reliable.

We currently have about 150 people using the solution across every level of the organization.

Scalability doesn't really come into play since it's applicable only to the endpoint. BitLocker is applied to the laptop. You can set the policy to apply to all the drives on the laptop, and you can set the policy when the system is starting up and ask for a pin or just run it without the pin when it starts up. All that stuff is configuration-driven. There's no issue with scalability there. It just applies to all the machines, and once encrypted, all the machines will report to the central consoles.

Technical support varies since Microsoft tech support is outsourced to other organizations partnering with Microsoft. Therefore, even though I'm raising a ticket with Microsoft, it can go anywhere across the globe. Eventually, it is a third-party organization that's representing Microsoft that will handle the ticket.

The problem is the individual's expertise will vary. Some of them are very well versed in a particular product. Some are not so well versed. Eventually what happens is if they're not so well versed, then they'll go back to the Microsoft documentation and give you details based on that, and they'll work it out with you. The important thing is they always make it a point to achieve case closure. I'm not saying that it's very brilliant, however, it does a very good job. 80-90% of the time, it actually works.

Positive

We did not previously use a different solution, however, the critical thing to note is Windows 10 and 11 come with built-in encryption enabled. You have to disable that encryption. Only then will your centralized policy for BitLocker take over. Otherwise, it will throw up an error.

The initial setup is pretty simple. You might have to do a bit of education in terms of understanding the logic, however, after that, it’s all very simple.

For the actual deployment, basically, I did it in pieces. I did the initial deployment on my laptop. I had raised queries with Microsoft Support for this. Once I got the basic settings in place, I stabilized this as my policy, and then I drove it out to all my users.

I handled the initial setup myself. I didn’t need the help of any integrators or consultants.

You only have to pay for it. BitLocker is already present within the operating system. It's part of the OS. When you buy your laptop or a desktop, BitLocker is already present. The important thing here is the configuration part of it. BitLocker comes on your laptop, and it's 128-bit encryption, which comes by default. It's the unmanaged variety. The managed variety can be 128 or 256 bits. As a matter of industrial practice, we will all deploy 256 versions and there's no software cost coming in.

The important thing here is the deployment tool that you have. There are lots of tools in the market. Microsoft has an app called Intune, which gives you native control of the system. If you don't use Microsoft, if you don't have Intune, then you could look at some other products which give you control over the native encryption rather than deploying their own. Many products are there in the endpoint security domain which provides you encryption. If I decide to go that route, I will disable the BitLocker on both and I will apply this encryption software. However, I’m forced to rely on that encryption tool to do that management.

I’m using the latest edition. I started off on a trial basis for a couple of weeks, and now I've taken it to production. All my laptops are now on BitLocker.

I’d rate the solution nine out of ten.

If you want a free solution and work on Microsoft, use Windows BitLocker. That should do the job for you. Unless otherwise explicitly required for business needs, Encryption is basically a compliance requirement from an audit compliance requirement perspective. Encryption of your hard drives is a compliance requirement. However, there are businesses and industries wherein the data has to be encrypted, and it’s mandatory. This is not an issue of compliance for them. It's a work requirement. In those kinds of scenarios, then you would have to probably look at third-party solutions, which give you something beyond just the basic encryption. If you want to do basic encryption and you have your Intune, just use that. No money needs to be spent. You just need to put a little effort into creating a policy to push and apply to all the systems. End of story. However, if you have something more significant, you may have to look at other solutions.

We use the solution for encryption.

Microsoft BitLocker is a Microsoft native product that provides good encryption.

The solution should have a better user interface and dashboard.

I have been using Microsoft BitLocker for four to five years.

I rate the solution’s stability an eight out of ten.

Around 80,000 users use the solution in our organization.

I rate the solution’s scalability ten out of ten.

The solution's technical support team asks for a lot of logs.

Neutral

The solution's competitor is Trellix. Trellix is a bit better than Microsoft BitLocker because it has a very good reporting feature.

The solution's initial setup is complex.

I deployed the solution by myself in a couple of days.

On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing an eight out of ten.

The solution's recovery option works fine to support our data security strategy. We integrate the Azure OpenAI tool with Microsoft BitLocker. I would recommend the solution to other users.

Overall, I rate the solution a seven out of ten.

We use the solution to secure endpoints.

Microsoft BitLocker's most valuable feature is endpoint encryption, and it's quite easy to manage. Microsoft BitLocker's data protection is the most useful for mobile endpoints like laptops.

The management of the product could be made a little easier.

I have been using Microsoft BitLocker for 5-6 years.

I rate the solution ten out of ten for stability.

Around 50 users are using the solution in our organization.

I rate the solution’s scalability ten out of ten.

We didn't pay for additional licenses since the solution is built into Windows.

Before choosing Microsoft BitLocker, we evaluated Trend Micro.

I use the latest version of Microsoft BitLocker. We didn't have any specific incidents where we needed to use the solution's recovery process. However, if there's a problem unlocking devices, it's pretty simple to manage.

The solution is not complicated to manage. Microsoft BitLocker is transparent to end users, and they are unaware of its existence. It doesn't impact their performance in a measurable way, and we don't have any problems with it.

Microsoft BitLocker is a very useful tool for managing endpoints, especially mobile ones, and ensuring that data is not leaked. The solution's drives are integrated into the mobile workstation. We require one person as a backup to maintain the solution, which is not time-consuming. It just takes a few hours every month. I would recommend the solution to other users.

Overall, I rate Microsoft BitLocker ten out of ten.

We use BitLocker to secure external disks according to security policy. Every external disk, regardless of size, is encrypted with BitLocker for everyday use. The password is securely stored in a designated location. Additionally, client PCs are also equipped with BitLocker for basic security measures.

BitLocker serves as a layer of security for any external drives users use, ensuring that any data stored on them, whether for local backups or important files, remains protected. 

We opt for a data loss prevention solution. I evaluate different vendors, including Microsoft BitLocker, as part of this process. Each step of the implementation is carefully planned, as every aspect of data protection is crucial.

BitLocker could have a more user-friendly interface at a lower price. There are no regular updates for it. If they introduce new features, the new version might offer improvements or enhancements in the future.

I have been using Microsoft BitLocker for two years.

The product is stable, with no significant impact. Its primary function is to enhance security, and its reliability depends on the company's implementation. It protects at a basic level.

The solution's scalability is limited as it is designed for individual devices on-premises. Each local device requires its password, with no centralized management or options for scalability across multiple devices.

If you lose the passwords, then you need Microsoft support. You have multiple recovery options like printed, saved password, and rolled hash key.

The initial setup is very easy. If you want to use BitLocker on the system, different steps are involved. If you only want to encrypt external drives, it's easier, especially if the external disk is blank.

BitLocker provides benefits such as security and protection for data at a basic level. BitLocker can be a satisfactory solution with sufficient security. BitLocker meets our needs adequately.

No separate license is required for BitLocker. It is included in Windows operating system editions.

Bitlocker is easy to use. You can find a lot of information on how to use it on many informational sites, but the process is straightforward: follow the "next, next, finish" steps. It takes time, depending on whether you're encrypting an external disk or a disk with existing data. If the disk is empty, the process is speedy.

Overall, I rate the solution a ten out of ten.

We use Microsoft BitLocker to encrypt the data.

Before logging into the system, we enable Microsoft BitLocker so that the data will be automatically encrypted.

The best feature of Microsoft BitLocker is how it encrypts the data. The solution has a feature that automatically asks the users to upgrade their password once we set up the process. Microsoft BitLocker will not allow users to have the same password for the next five to six times.

The solution’s user interface could be improved.

I have been using Microsoft BitLocker for six to seven years.

Microsoft BitLocker is a stable solution.

Microsoft BitLocker is a scalable solution. More than 5,00,000 users are using the solution.

The solution’s initial setup is straightforward for an end user.

Microsoft BitLocker is a cloud-based solution. I would recommend Microsoft BitLocker to other users. The solution's performance lags a little. Your process will get a bit slow whenever you start encrypting the data.

I rate the solution a five out of ten for ease of use and effectiveness.

Overall, I rate Microsoft BitLocker an eight out of ten.