XPost: alt.comp.os.windows-10, alt.comp.microsoft.windows   
   From: mariasophia@comprehension.com   
      
   This response to Winston just now in a related thread attempts to clarify   
   the purpose of this PSA which is to discuss the advantages of VeraCrypt FDE   
   over the more highly marketed versions that Microsoft would love for us to   
   be locked into.   
      
      
   Winston wrote:   
   >> In summary, I think that Windows Home users do not have the same kind of   
   >> control over key storage that Windows Pro users have.   
   >   
   > At least, you're getting closer to the entire picture(Bitlocker   
   > Encryption is fully supported on Enterprise and Edu editions, too)   
      
   Thanks for the clarification, where I just opened a separate thread on why,   
   in my case of an older machine, and for consistency & greater protection   
   even on current Windows 11 Home versus Pro machines, Veracrypt has some   
   decisive FDE advantages over anything Microsoft marketing has provided us.   
      
    Subject: PSA: Veracrypt has pre boot authentication (& why it's better for   
   older PCs)   
    Newsgroups: alt.comp.os.windows-10,alt.comp.os.windows-11,alt.c   
   mp.microsoft.windows   
    Date: Sat, 24 Jan 2026 21:51:50 -0500   
    Message-ID: <10l40g6$12r7$1@nnrp.usenet.blueworldhosting.com>   
      
   BitLocker Enterprise and Education editions work like BitLocker Pro because   
   they support pre boot PINs and full management of recovery keys. They still   
   depend on TPM features, so protection varies with the hardware. VeraCrypt   
   does not change across editions. It works the same on Home, Pro, Enterprise   
   and Education because it does not rely on Windows features and always uses   
   a password at boot.   
      
   Hence, there are security advantages of Veracrypt FDE for older PCs & for   
   consistency in mixed Windows environments even on the newer machines.   
      
   Older machines:   
    VeraCrypt is often a better fit for older desktops because it does   
    not need a TPM and always uses a password at boot, while BitLocker   
    Home and Pro rely on TPM features that many older machines do not have.   
      
   Mixed Home & Pro environments:   
    VeraCrypt full disk encryption is more consistent across mixed Windows   
    highly-marketed systems because it works the same on all hardware and   
    does not depend on TPM features. The more highly marketed BitLocker   
    arbitrarily behaves differently on Home and Pro, so protection varies   
    by edition, while VeraCrypt gives the same pre-boot password-based   
    security everywhere despite Microsoft's desperate marketing hype.   
   --   
   My reasoning favors simple models that account for all data points.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)