TPM Trusted Platform Module
Dedicated security chip on the motherboard — stores encryption keys, does hardware-backed authentication.
Powers BitLocker (Windows), Secure Boot, Windows Hello, passkeys. Windows 11 requires TPM 2.0. As important in enterprise laptops as BIOS passwords. Apple's equivalent: Secure Enclave (integrated in M-chips).