Share this article
Improve this guide
Windows 11 Device Encryption: How to Enable & Use it
Protect your data from unauthorized users
4 min. read
Updated onOctober 4, 2023
updated onOctober 4, 2023
Share this article
Improve this guide
Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more
Key notes
If you want to protect your sensitive data, it’s important to use drive encryption on Windows 11.
And the great news is that the OS (except for the Home version) comes with a built-in tool to do that, called BitLocker.
Here, we will explain how to encrypt your hard drive on Windows 11 and use BitLocker on Microsoft’s operating system.
However, we will start by telling you a few things you should know about drive encryption and security.
What is drive encryption, and why do we need it?
Hard-drive encryption is the process of encrypting the data stored on a hard drive using mathematical functions.
This way, essential data will not be seen by anyone who doesn’t have access to the key or password you set up. This is an essential layer of security against ransomware and other online attacks.
Here’s how it works: when a file is written to the drive, it is encrypted automatically with the help of specialized software.
In the same way, when you access a file on the drive, the same tool decrypts it, but only if you can provide the password you set up when you encrypted the drive. Windows 11 comes withDevice Encryption and BitLocker Encryption.
There’s a catch! You can’t use BitLocker if your PC has no TPM 2.0 chip installed. However, we have a workaround for that, too, so read on.
How to manage the encryption of my hard drive on Windows 11?
1. Enable hard drive encryption
You can encrypt your disk on your Windows 11 device using the built-in BitLocker tool from Control Panel. This tool allows users to encrypt their data so that it is only accessible to those who either insert a designated USB drive upon booting, or input the required password.
1.Click theSearchicon on yourTaskbar.
- TypeBitLockerin the search box that opened and click on the app from the results.
3.SelectTurn on BitLocker.
4.You will be prompted to select a method to unlock your drive at startup. We recommend using the password method but you can also use a USB key that you need to provide.
5.Enter the password and re-enter it, then clickNext.
6.After that, you will be asked to save the key in another way too. You can save it in your Microsoft account, on a file, on a USB stick or just print it.
7.The next step is to choose whether you want to encrypt the whole drive or just the used part.
-
Make your selection, then clickNext.
-
Now you need to choose the encryption mode you want to use.As you’re using Windows 11, you can go with the first option, for fixed drives, but you can also select the second one if you plan on moving your drive.
10.At last, check theRun BitLocker system checkbox and then clickContinue.
11.You will now be prompted toRestart.
12.After the reboot, you will be prompted to enter the password to unlock your drive.
2. Encrypt your drive if your PC is not TPM 2.0 compatible
If after you click on theBitLocker drive encryptionfromDevice encryptionyou see the message thatDevice encryption is not available for this device,that means your PC is not TPM 2.0 ready.
Don’t worry, we can take care of that with a few easy steps to perform.
3. Disable drive encryption
If you have changed your mind and down want to use drive encryption on your Windows 11 PC, you can do that by following these steps:
Encrypting the drive is essential for all sensitive data from your PC and will enforce an additional layer of protection against attacks and even prying eyes.
However, this can be a two-way street because if you don’t take all precautions in managing your unlocking keys or your password, you will be unable to access your data yourself. But many, when setting up the feature, found thatDevice Encryption is missing in Windows 11.
You might also be interested in ourguide on how to protect a folder in Windows 11and only secure certain files. You can check out more with ourin-depth comparison of Device Encryption and BitLocker Encryption.
We hope our guide helped you enable drive encryption on Windows 11 and that your data is safe now.
If you have any questions or suggestions, write them down in a comment in the dedicated section below, and we will get back to you as soon as possible.
More about the topics:file encryption,Windows 11
Claudiu Andone
Windows Toubleshooting Expert
Oldtimer in the tech and science press, Claudiu is focused on whatever comes new from Microsoft.
His abrupt interest in computers started when he saw the first Home Computer as a kid. However, his passion for Windows and everything related became obvious when he became a sys admin in a computer science high school.
With 14 years of experience in writing about everything there is to know about science and technology, Claudiu also likes rock music, chilling in the garden, and Star Wars. May the force be with you, always!
User forum
0 messages
Sort by:LatestOldestMost Votes
Comment*
Name*
Email*
Commenting as.Not you?
Save information for future comments
Comment
Δ
Claudiu Andone
Windows Toubleshooting Expert
Oldtimer in the tech and science press, with 14 years of experience in writing on everything there is to know about science, technology, and Microsoft
Reviewed byVlad Turiceanu
Coming from a solid background in PC building and software development, he’s a Windows 11 Privacy & Security expert.More about Vlad ›
