Is there any point in using a strong password on a laptop if the HDD is not encrypted?

Solution 1:

I'd say yes, you should always use a password on a laptop. As for a very secure password, it probably isn't necessary. Thieves and such aren't known for being the brightest bulbs in the chandelier. Chances are, if your laptop gets stolen, the thief is just looking to make a quick and dishonest buck and even a basic dictionary password will keep them out.

Besides:

Solution 2:

A strong password prevents viruses and worms from guessing it and inflicting more damage. Many worms try to replicate via SMB/CIFS and guessing the local admin password.

Solution 3:

Sure. Tying your bike to a tree with a rope is more secure than not tying it at all. The fact that there are ways around some security-devices doesn't mean you're just as vulnerable without them. Even if you're not encrypting your data, use a strong password because it will still offer some degree of protection. In all honesty, the degree of protection a strong password offers will be sufficient in many cases to protecting your data - not all laptop thiefs are smart enough to pull the HD out, and reconnect it elsewhere.

Solution 4:

A burglar once took off with two laptops from my employer. These were later found again, with the hard-disks nicely formatted running a Dutch version of Windows XP. (We only use English Windows versions, so we know it was reformatted and not hacked.) The thief got caught when he'd crashed his car while driving the stolen goods to someone who'd ordered them, apparently.

When your laptop is stolen, there's a big chance the thief will just ignore the data on it. The machine has value, the data often not. So encryption and/or passwords? Not such a big deal in this scenario.

But you would be in trouble if someone targets your lattop for data theft. It does need to have some valuable data on it to take the risks, though. Sourcecode of a new product. Creditcard information of visitors from a webshop. Possibly some other data that might interest them. Or maybe just your picture collection from your visit to the nude beach, last summer. If you have some data to protect, you better make sure the data itself is secure. (Thus, encrypt this data!)

However, do keep in mind that if you encrypt your data, then anyone can still access this data if they know your password. Encrypted or not doesn't make a difference in that case. Password strength does, though. Protection is as strong as it's weakest link. So, having a strong password is always best, even if you don't use encryption. (Because it requires someone to take more extreme actions to access your data instead of just logging in.)