[dwattttt]

That's the default configuration for bitlocker, but there are others, including requiring a password or key provided by USB on startup