Lab record · Honest limits · EDR-2025-2330
The Update Took the Sensor, the PIN Was Forgotten.
For five years the ProBook signed him in by touch. Then an update killed the sensor — the fingerprint option simply disappeared
— leaving a PIN set when the laptop was new: I doubt I've typed it twice since
. Three guesses brought the lockout, a VAT quarter due, and eight years of the yard's accounts behind a screen I can't get past
.
Sound familiar? Talk to us.
0800 6890668
In plain English.
Here is the distinction this case turned on. A Windows password screen guards the account, not the platters — take the disk out and read it directly, and that gate never appears. Encryption is the opposite kind of wall. BitLocker scrambles the volume itself, sector by sector, and without the key or its recovery password the contents stay noise for everybody, this lab included. So before fear or money enters it, one short test settles which wall is actually in your way — and that test comes free.
The tools this job took.
See how your case runs →| System | The part it played | Why we rate it |
|---|---|---|
| Atola Insight Forensic | Took the write-blocked image of the NVMe before the question of keys was opened | Images several drives in parallel, quickly, with write blocking and reports built in |
| PC-3000 SSD | Confirmed the NVMe itself was healthy before any decryption was attempted | Sees an SSD at controller level — a layer below anything Windows shows |
| UFS Explorer Professional Recovery | Read the open volume straight away, and the locked one once its key surfaced | Handles the harder filesystems well — APFS, ReFS, XFS, ZFS and Btrfs |
On the bench.
Copy everything first, argue about locks later
First job on arrival: the NVMe came out of the laptop and onto the imager, behind hardware write protection. Lockout work earns that caution twice over — if ownership or encryption ever became contested, we could show the original had never been written to. And on the jobs where nobody asks, the careful copy costs nothing at all.
Read both volume headers before quoting a penny
The headers split the job in two. C:, the Windows volume, was plain NTFS: the sign-in that had beaten him all week meant nothing to a direct read. D:, holding the accounts, opened with a BitLocker signature — his own doing, it turned out, after a lost USB stick years before — and the written quote spelled out both halves before he spent a pound.
Chase the paper trail before conceding defeat
BitLocker names the key it wants by an ID, which we read him over the phone. He knew of no key — but remembered Windows once making him print something. The sheet sat clipped in the VAT box file behind the laptop's receipt, and D: unlocked first try. Without it, that half of the job ended there — and he'd have been told so, plainly.
How it ended.
Both halves came home: C: read as though no lockout existed, D: opened by a sheet that had waited five years to matter. The accounts met their VAT deadline on fresh media, and the key now lives in three places — none of them the laptop.
More like this in the casebook.
More from Honest limits.
Sound like your drive?
Every case here points the same way: power the device down, take the free diagnosis, then make your decision.