TPM 2.0, or Trusted Platform Module 2.0, is a hardware-based security component built into many modern PCs and laptops. It can generate, store, and protect cryptographic keys and perform trusted operations such as device attestation, secure boot measurements, and key sealing so secrets are only released when the system is in a known-good state.
In cyber security, TPM 2.0 matters because it strengthens trust at the device level. It helps protect Windows Hello, BitLocker, and other identity or encryption features from simple software theft. Defenders use it to anchor hardware trust and verify platform integrity. Attackers may try to bypass or abuse the trust chain by tampering with firmware, attacking boot flow, or stealing keys from misconfigured systems, but a properly used TPM raises the cost of those attacks. In Windows environments, TPM-backed protections are especially important when biometric sign-in, local AI features, or other sensitive services depend on trusted hardware.