My surface 3 will be used for work and will contain sensitive information. I plan to invoke bitlocker to protect the SSD. But access control will be critical too. It seems that Face Recognition would provide a nice balance between effectiveness and convenience but that may not be ready for prime time. On my soon to be replaced laptop, I have enabled Bitlocker's USB authentication. So it requires a thumb drive with the bitlocker access key. Absent that, it will not boot. I am wondering what you more experienced folks are doing to protect access to your data on this very portable device.