HOW TO ENCRYPT YOUR PC'S DISK WITHOUT GIVING THE KEYS TO MICROSOFT

Summary from the TLDR InfoSec newsletter

BitLocker encrypts Windows PCs to protect data, but many systems automatically store recovery keys with Microsoft when users sign in with a Microsoft account, creating a potential privacy risk if authorities obtain those keys. By upgrading to Windows 11 Pro, users can fully control BitLocker, decrypt any existing Microsoft-managed setup, and re-encrypt the drive while saving the recovery key locally, such as on paper or an external drive, rather than in the cloud.