Since Microsoft presumably doesn't have the data, they get little value from holding the key. However, I would never copy a key without telling anyone.
Since Microsoft presumably doesn't have the data, they get little value from holding the key. However, I would never copy a key without telling anyone.
What you say here -- encryption keys are not like online account passwords (you can't reset them) -- is NOT the default for people coming from dmcrypt[1], for example, where I can have multiple pass phrases / files to the same vault, easily adding and removing them.
It feels odd to work with at rest encryptions systems, and I'm guessing Win10 has the same constraint out of the box?, that don't offer this feature.
[1] https://wiki.archlinux.org/index.php/Dm-crypt/Device_encrypt...
This is also how they implement recovery passwords (as 'numerical passwords') by default.