Is BitLocker Overrated?
You might not understand until your laptop gets STOLEN!
I’m writing this from the back seat of a VIP bus, coming back to Kumasi from Accra.
Before that, it had started as a normal trip. I’d gone to Accra over the weeked fo an important task, and now I was heading back to campus with an exam waiting for me the next morning; the kind of exam you “revise” for by reading your notes and hoping something sticks by hook or crook.
I got to the station a bit late.. it was around 11am and I was a bit wild due to the Trotro I had picked to Accra that morning.
Broo.. this driver and his mate dropped me off a place far from the VIP station, expected me to walk and find my way when that was the exact question I asked before boarding (“Ma guy.. you sure sey we go ketch the VIP station?” and he responded.. “you no get problem” and I said.. “okay vim, no yawa”)
Hell nahh! I sat still in the Trotro.. they saw I was not ready to get down and had no choice but to move further towards the VIP terminal.
At the terminal, I bought my ticket and found my seat 31 at the far back thinking I’d be one of the first ones settled and dozing off before we even hit the road.
That did not happen.
The bus was filling up nicely, seats going one after another, until we got to that awkward stage where the driver’s mate starts checking if everyone is on the bus so we move. Somehow, out of a full bus, a few people had gone to “buy something small” and had apparently dissappeared from the face of the earth.
The driver was waiting, passengers were complaining, someone was on call and clearly had no intention of lowering his voice. Oh charlie! Accra we dey.. how you go do am?
The driver started threatening he’d leave without them if they were not back on time. Broo, he just yapping lol. I just laughed, but underneath it, my mind kept sneaking back to my exam the next day, doing that thing where it replays a topic you’re not confident about. Hmmm
Nevermind, those people came back then we finally left around 12pm.
When we got to Linda Dor, I had to pee. So, I put my laptop on sleep and straight into my bag.
We continued the journey afterwards. Somewhere in that stretch of road, half-listening to the conversations around me and half-worrying about my exam, I started imagining something else entirely.
‘’What if someone took off with my bag containing my laptop while at the rest stop?”
Because no matter where I had placed it.. be it on my seat, inside the luggage space at the top or even under my seat, it could have been easily taken and I would have returned with regret.
Yeah yeah I know lol, my mind does this sometimes. I could even think of worse case scenarios sometimes.. different types of them no matter where I am.
But once that thought of my laptop getting stolen came to mind, it wouldn’t leave. So, I just sat to pour more salt on the wound hehe:
“A final-year student, laptop stolen just like that, and inside the laptop is everything one could think of: my final year project poster softcopy, my 62-page thesis, cybersecurity projects and writeups since I entered the field, personnal photos, important documents and many more.. I’ll leave that for you to think about but just know: I KEEP BACKUPS OF EVERYTHING USING THE 3–2–1 BACKUP STRATEGY.. see me in the comments if you don’t know what that is about :)”
All of it, now in the hands of a total stranger who doesn’t even need to be a hacker but just needs a screwdriver to take out the drive. Very dramatic
Somewhere past Nkawkaw, a bread seller climbed onto the bus (one of those sellers who has perfected the art of balancing a full basket while the bus is very much in motion) and the smell hit before she even said a word.
“Yɛɛɛɛsss.. ɛyɛ FRESH, ɛyɛ HOTTT, 30 cedis, mewɔ cake bread, butter bread, sugar bread, deɛ wopɛ biaaa”
Fresh, hot bread, that soft sugar bread that steams a little when you tear it open. Huhh charlieee!
Now, I need you to understand something about me: I am the president, CEO, and founding ambassador of bread appreciation.
Anybody who knows me knows I can eat bread morning, afternoon, and evening.
Get Prince Lassey’s stories in your inbox
Join Medium for free to get updates from this writer.
But that day, my wallet and I were not on speaking terms. I was on a strict “survive till campus” budget, because if I joked with my transport, I’d be trekking from Tech Junction to my hostel.
So I did the hardest thing I did all week.. I watched that bread pass me by, untouched, while silently mourning what could have been.
By the time we were approaching Kumasi, obviously those who were mad at those who delayed the bus had calm down, my bread-related grief had mostly passed, and my exam anxiety was back to being the main character of my thoughts.
But that imagined laptop scenario stayed with me the whole ride, because it forced me to actually ask myself: if my laptop disappeared right now, would whoever picked it up just… have everything? Well nah, but what about you?
And that’s the real reason I want to talk about BitLocker.
Without full-disk encryption, physical access to the storage becomes the real problem. Someone can remove the drive, plug it into another machine, and go through your files without ever needing your Windows login.
If you don’t know it already, BitLocker is Windows’ built-in full-disk encryption. Switch it on, and your drive turns into unreadable nonsense to anyone without your key, even if they take the disk out and plug it into a completely different computer.
BitLoocker is already sitting there in your Windows laptop right now, free, waiting, and yet.. most people I know have never once touched it in their life.
We’ll set a longgggg lock screen password or PIN, a fingerprint, a face unlock.. literally as close to an extended version of defence-in-depth yet the actual disk holding years of our documents, chats, and project work left vulnerable.
So, Overrated or Not?
I’ll be honest with you the way I’d want someone to be honest with me: BitLocker is not the invincible shield people sometimes assume it is. From a DFIR standpoint, it is not foolproof. If a skilled forensic team gets your laptop while it’s still powered on and unlocked, or manages a cold boot attack before the memory clears, or (and I’ve genuinely seen this) someone saves their recovery key in a plain text file sitting right there on the same laptop, encryption alone will not save you. Advanced techniques exist, and people with the right resources can work around weak setups.
But here’s what stopped me from writing it off as “overrated.” Your biggest threat is almost never a forensic lab. It’s the opportunist. The guy who picked up your bag in that five-minute chaos at Circle after you had unboarded and just wants to wipe it and resell it fast.
Against that very real, very common situation, BitLocker is the difference between your entire digital life being instantly readable and it being a locked box nobody has the key to.
In pentesting, I’d say you not having BitLocker on is just like a white-box pentest. The box becomes black only when BitLocker is on.
Most people who end up with a stolen laptop aren’t trying to defeat encryption but they’re trying to flip it for cash by the weekend. “Them go shoot the machine falaaa for Circle”
So no, I don’t think BitLocker is overrated. I think it’s underused, and people expect the wrong kind of protection from it.
Although it was never meant to stop everything, it does stop the everyday disaster: unwanted physicall access.
What I Took From That Ride
I made it to campus in one piece and wrote my exam the next morning still slightly sleep-deprived.
That ride left me with something more useful for you than the bread I never got to eat: a reminder for you to actually turn on the encryption sitting unused on your own machine (yeah before you judge, that was one of the first things I did when I got my laptop late last year), stop keeping recovery keys where anyone could find them, and treat your laptop like it’s carrying something worth protecting.
I kept thinking about BitLocker the next morning
Maybe it isn’t overrated after all.
Maybe we just don’t appreciate a lock until we’re standing outside, watching somebody drive off with the key.
Then I thought: I should make this a draft for now and polish it later as a medium post.
So if you are reading this today and you feel you learnt something useful, smash that follow button for more content!
We out, peace!
