Its not. The account directed an NBC News reporter to a T-shirt on which the word “ANTIFA” is written across an upside-down red triangle as proof. The shirt was created by a user from Spain on a website in which anyone can upload their own T-shirt design.

Thats not a good implementation for a corporate deployment. In our system (PC Guardian), there's a self password reset that involves the user answering 3 person questions that they created during the initial installation. If they forget those passwords, then they can call the help desk. PC Guardian uses a public/private key system where the end user reads a unique public key, and the help desk then can identify a private key that only unlocks that laptop. This prevents the end user from obtaining the master password. PC Guardian also provides a facility to globally change all master passwords should it become compromised. While I did not want to make this sound like a product pitch, PC Guardian is an example of a good encryption deployment. sou I would hope that other systems have a similar system.