TransWikia.com

Recovering NTFS encrypted files from a USB drive on a different machine

Information Security Asked on December 15, 2021

I have some files on an NTFS USB drive.
The files were encrypted on a Windows 10 pc and copied to the USB.

I had to completely reinstall Windows on the PC. I do not have a backup of the USB files

I know the name of the PC, and the username and password.

Is it possible to regain access to the files on the USB?

I can take ownership and list the contents of the drive and folders but i can’t open the files.

One Answer

Provided you are using the native in-line encryption provided by Windows, the only way to recover them is to obtain a copy of the original encryption keys. These are notably not based on your password/PIN (though they are encrypted by a master password secured by your login credentials). Windows provides an option to export these security keys in PKCS#12 format for backup purposes (and will usually nag you about backing them up until you either do so or explicitly turn off the nag notifications).

Without these encryption keys, there is no realistic way you can recover the file contents, as the encryption methods used are sufficiently secure to protect against most attacks.

Unfortunately, as you reinstalled Windows 10, you no longer have access to these keys unless you had previously backed them up somewhere else.

Answered by Austin Hemmelgarn on December 15, 2021

Add your own answers!

Ask a Question

Get help from others!

© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP