Hi everyone. On my gaming laptop, I have a dual boot encrypted Windows and Linux Mint with pre-boot password and OS Login screen with another password.

On my new laptop, I only have the windows password along with my fingerprint. The TPM is used to auto-unlock.

But what I understand is that someone who can crack my Windows password (and apparently it is fearly easy) would be able to log into my session and hence Bitlocker would be useless ?

One of my friend is telling me it’s easy to crack the windows password even if bitlocker is on, the other one is telling me it’s impossible cause on the login screen, the OS is still encrypted.

Which one is right ? Can you help me understand how the TPM only Bitlocker with a windows password fingerprint is secure, and what would be the threat if my laptop if stolen for instance.

Added question : Is fast boot a security flaws regarding a TPM only Bitlocker Windows installation ?

Thanks in advance !