Windows 7: Bitlocker To Go Encryption Level

I am having a hard time trying to figure out what encryption method and cypher strength is used on my Bitlocker to go encrypted portable hard drive.

I understand the settings for Bitlocker are configured in the Group Policy Editor but besides that is there any way to see what level of encryption your portable drive has.

When I encrypted this drive, I left the Group Policy settings default when encrpyting the drive which means the drive was supposedly encrypted using 128-bit with diffuser.

This would come in handy when trying to prove to someone that the device is infact encrypted with either 128-bit or 256-bit.

Hello Doc, and welcome to Seven Forums.

If the computer does not have Group Policy included to look at, then you can edit (right click on REG file and click on Edit) the REG file downloads in OPTION TWO of the tutorial below, then check the registry and compare it to the REG file downloads to see how it set. By default, it is set to 128-bit with diffuser in Windows 7.

BitLocker Drive Encryption - Change Encryption Method and Cipher Strength

Hope this helps,
Shawn

Thanks Shawn,

I see what your saying about the group policy, I'm not quite sure how the REG file works, whether its used just as a reference to the encryption level set by the Group Policy or just another way to set the desired encryption strength before encrypting.

I guess my overall concern/question is that say someone else encrypted a portable drive on Laptop (A) and gave the drive to Laptop (B) to mount and authenticate, is there a way for Laptop (B) to see the encryption level that was set by Laptop (A)



Doc

Did you ever get an answer to your question? If so, I would like to know how to determine the level of encryption a bitlocker device has as well...

Hello P0vv3R, and welcome to Seven Forums.

You'll need to look at the settings on the same computer that you want to see if it's using 128-bit and 256-bit encryption keys, and not from another computer. By default, Vista and Windows 7 uses 128-bit unless manually changed.

You should be able to check the encryption level from any supported OS using the following command from an elevated command prompt.

manage-bde E: -status

Assuming you change the drive letter to match your bitlocker drive and you have successfully unlocked the drive.