The TPM generates a strong, non-exportable key in hardware that is far less susceptible to brute-force attacks.
As opposed to accidentally creating your own key of "4", for instance.
A PIN can be used to protect the TPM from unlocking. Even if you set a PIN of "1234" — it would still be far more secure if the disk and laptop were ever to become separated, because the TPM will have generated a strong key anyway.
The TPM is basically a smart card soldered to the motherboard.
> How will you decrypt if the laptop goes bust or if you move the drive elsewhere
Windows and Apple both generate a recovery key as part of the enrollment process which you can store offline.
As opposed to accidentally creating your own key of "4", for instance.
A PIN can be used to protect the TPM from unlocking. Even if you set a PIN of "1234" — it would still be far more secure if the disk and laptop were ever to become separated, because the TPM will have generated a strong key anyway.
The TPM is basically a smart card soldered to the motherboard.
> How will you decrypt if the laptop goes bust or if you move the drive elsewhere
Windows and Apple both generate a recovery key as part of the enrollment process which you can store offline.