This key is itself encrypted in some way using a password or pass-phrase known (ideally) only to the user.
In order to access the disk's data, the user must supply the password to make the key available to the software.