TPM

A TPM is a dedicated security chip on a computer's motherboard that stores cryptographic keys and measurements of the boot process. It underpins features like BitLocker disk encryption and verified boot, so keys never leave the hardware. Because the chip is tamper-resistant, it gives software a hardware-backed root of trust.