How to configure BitLocker encryption on Windows 11 (2024)

How to configure BitLocker encryption on Windows 11 (1)

Jump to:

  • BitLocker on Windows 11 Pro
  • BitLocker on Windows 11 Home

On Windows 11, BitLocker adds an extra layer of security with encryption to protect your device and files from unauthorized access. When using encryption, the feature scrambles the data on the drive to make it unreadable for anyone without the correct decryption key (your account password).

The BitLocker security feature is available on Windows 11 Pro, Enterprise, and Education editions. However, on Windows 11 Home, you can use "device encryption," a limited version of BitLocker. It works identically to the full version but without many advanced management settings and capabilities, such as "BitLocker To Go." Also, when using device encryption, all the drives will encrypt automatically, while the full version of BitLocker allows you to choose the storage using encryption.

This guide will walk you through the steps to set up device encryption with BitLocker on your computer.

How to set up BitLocker on Windows 11 Pro

To configure BitLocker in the Pro edition of Windows 11, use these steps:

  1. Open Settings.
  2. Click on System.
  3. Click the Storage page on the right side.

How to configure BitLocker encryption on Windows 11 (2)

  1. Under the "Storage management" section, click on Advanced storage settings.
  2. Click on Disks & volumes.

How to configure BitLocker encryption on Windows 11 (3)

  1. Select the drive with the partition to encrypt.
  2. Select the partition to enable encryption and click the Properties button.

How to configure BitLocker encryption on Windows 11 (4)

  1. Click the "Turn on BitLocker" option.
  1. Click the "Turn on BitLocker" option again.

How to configure BitLocker encryption on Windows 11 (6)

  1. Select the option to back up the recovery key — for example, Save to your Microsoft account.
  • Quick note: You can always find the recovery key on your Microsoft account. Also, the option to save online is only available when the account is connected to a Microsoft account.

How to configure BitLocker encryption on Windows 11 (7)

  1. Click the Next button.
  2. Select the "Encrypt used disk space only" option.

How to configure BitLocker encryption on Windows 11 (8)

  1. Click the Next button.
  2. Select the "New encryption mode" option.

How to configure BitLocker encryption on Windows 11 (9)

  1. Check the "Run BitLocker system check" option.

How to configure BitLocker encryption on Windows 11 (10)

  1. Click the Restart now button (if applicable).

Once you complete the steps, the system will begin encrypting the data on the drive.

While in the "BitLocker Drive Encryption," it is also possible to encrypt other drives, such as secondary storage, external USB hard drives, and removable data drives, using "BitLocker To Go."

Remove BitLocker encryption

Get the Windows Central Newsletter

All the latest news, reviews, and guides for Windows and Xbox diehards.

If you need to remove the system encryption, use these steps:

  1. Open Control Panel.
  2. Click on System and Security.
  3. Click on BitLocker Drive Encryption.

How to configure BitLocker encryption on Windows 11 (11)

  1. Under the "Operating system drive" section, click the "Turn off BitLocker" option.
  1. Click the "Turn off BitLocker" button again.

After you complete the steps, the decryption process will take a while, depending on how large the drive is and your data.

How to set up BitLocker on Windows 11 Home

To configure BitLocker in the Home edition of Windows 11, use these steps:

  1. Open Settings.
  2. Click on Privacy & Security.
  3. Click the Device encryption setting.

How to configure BitLocker encryption on Windows 11 (13)

  1. Turn on the Device encryption toggle switch.

How to configure BitLocker encryption on Windows 11 (14)

  1. (Optional) Under the "Related" section, click the "BitLocker drive encryption" option.
  2. Under the "Operating system drive" section, click the "Back up your recovery key" option.

How to configure BitLocker encryption on Windows 11 (15)

  1. Click the Save to a file option.
  2. Save the BitLocker recovery key in a different location.
  3. Click the Save button.

Once you complete the steps, BitLocker will turn on the system to encrypt the files on the drive.

This version of BitLocker is only available on some devices. If you don't find the option, the device most likely doesn't support encryption. You would typically see this feature on devices like Microsoft Surface devices and those from other brands like HP, Lenovo, Dell, etc.

Remove BitLocker encryption

To decrypt a device using BitLocker, use these steps:

  1. Open Settings.
  2. Click on Privacy & Security.
  3. Click the Device encryption setting.

How to configure BitLocker encryption on Windows 11 (16)

  1. Turn off the Device encryption toggle switch.

How to configure BitLocker encryption on Windows 11 (17)

After you complete the steps, the decryption process will begin on the device.

More resources

For more helpful articles, coverage, and answers to common questions about Windows 10 and Windows 11, visit the following resources:

  • Windows 11 on Windows Central — All you need to know
  • Windows 10 on Windows Central — All you need to know

How to configure BitLocker encryption on Windows 11 (18)

Windows 11

Cutting-edge operating system

A refreshed design in Windows 11 enables you to do what you want effortlessly and safely, with biometric logins for encrypted authentication and advanced antivirus defenses.

How to configure BitLocker encryption on Windows 11 (19)

Mauro Huculak

Mauro Huculak is technical writer for WindowsCentral.com. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. He has an IT background with professional certifications from Microsoft, Cisco, and CompTIA, and he's a recognized member of the Microsoft MVP community.

How to configure BitLocker encryption on Windows 11 (2024)

FAQs

How to configure BitLocker encryption on Windows 11? ›

Turn on standard BitLocker encryption

How to enable BitLocker encryption in Windows 11? ›

Follow these steps to enable and configure BitLocker on Windows 11/10:
  1. Press Windows key + R, type “Control Panel,” then press Enter.
  2. Navigate to “System and Security” > “BitLocker Drive Encryption” in the Control Panel.
  3. In the section called “Operating system drive,” right-click “Turn on BitLocker.”
Apr 22, 2024

Is BitLocker automatically on Windows 11? ›

"A clean installation of Windows 10 or Windows 11 may enable Bitlocker drive encryption automatically. The main system partition and all fixed drives will be encrypted..." "Problem is, since the encryption process happens automatically in this case, users may not be aware of it.

How do I start Windows 11 in Safe Mode BitLocker? ›

Select Update & Security > Recovery . Under Advanced startup, select Restart now. After your PC restarts to the Choose an option screen, select Troubleshoot > Advanced options > Startup Settings > Restart. You may be asked to enter your BitLocker recovery key.

How to check if BitLocker is enabled in Windows 11? ›

Press and hold the Windows button on the keyboard and R , type cmd and press Enter . Right-click Command Prompt and select "Run as Administrator." In the command prompt, type manage-bde -status and press Enter . View the status of BitLocker on the drives in the computer.

Does Windows automatically enable BitLocker? ›

BitLocker automatic device encryption starts during Out-of-box (OOBE) experience. However, protection is enabled (armed) only after users sign in with a Microsoft Account or an Azure Active Directory account.

How to turn off or disable BitLocker encryption in Windows 11? ›

  1. Type and search [Manage BitLocker] in the Windows search bar①, then click [Open]②.
  2. Click [Turn off BitLocker]③ on the drive that you want to decrypt. ...
  3. Confirm whether you want to decrypt your drive, then select [Turn off BitLocker]④ to start turning off BitLocker, and your drive will not be protected anymore.
Oct 24, 2023

Where is BitLocker key stored in Windows 11? ›

The Bitlocker key can be found on both your account at Microsoft and on OneDrive. Click on the link below to find the Bitlocker code. You should see the key for your computer. It is possible to copy and paste the code.

What triggers BitLocker on Windows? ›

The BitLocker recovery key prompt can be triggered by a variety of reasons, including hardware changes, software updates (especially if BIOS update is involved), etc. It is not necessarily alarming. The recent security update can be definitely a trigger here as well.

How do I enable BitLocker on Windows 11 missing? ›

What if BitLocker Is Missing or Not Showing. You can click the search box in the taskbar, search for BitLocker, and select the best match result to open BitLocker. You can also go to Control Panel, choose to view by large icons, and select BitLocker Drive Encryption to open the setting interface.

How do I enable BitLocker without TPM Windows 11? ›

Here is how:
  1. Press the Windows key + R to open the Run dialog box.
  2. Type gpedit. ...
  3. Expand Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives. ...
  4. Right-click Require additional authentication at startup and then click Edit to modify the policy.
May 2, 2023

How do I unlock BitLocker in Windows 11 command prompt? ›

Type in the command line.
  1. Type in the command line: manage-bde –unlock X: -RecoveryPassword XXXXXX-XXXXXX-XXXXXX-XXXXXX-XXXXXX- XXXXXX-XXXXXX-XXXXXX.
  2. “X:” is the letter of Bitlocker encrypted drive and the 48 characters of the recovery key. Remember to change the X to your recovery key.

Why is Windows 11 asking for BitLocker recovery key? ›

Windows will require a BitLocker recovery key when it detects a possible unauthorized attempt to access the data. This extra step is a security precaution intended to keep your data safe and secure.

How do I set up BitLocker on Windows 11? ›

Turn on standard BitLocker encryption

In the search box on the taskbar, type Manage BitLocker and then select it from the list of results. Or, select Start > Settings > Privacy & security > Device encryption > BitLocker drive encryption. Note: You'll only see this option if BitLocker is available for your device.

Does Windows 11 encrypt hard drive by default? ›

Windows 11 Home and Windows 11 Pro both support automatic device encryption, with the Home version a more streamlined experience. You just have to sign into the machine with a Microsoft account, which nearly all people do during setup.

Should I turn on BitLocker? ›

Individual users with sensitive information: If you store sensitive information, such as personal identification, financial data, or medical records on your computer, enabling BitLocker can help keep this information safe from unauthorized access.

How do I enable encrypt contents to secure data in Windows 11? ›

How to encrypt a file in Windows 11
  1. Right-click on the icon for the file or folder you'd like to encrypt.
  2. Select Properties.
  3. Near the bottom of the Properties window, select Advanced.
  4. Check the box beside Encrypt contents to secure data.
  5. Select Apply.
Sep 28, 2023

Where is my BitLocker key Windows 11? ›

In your Microsoft account: Open a web browser on another device. Go to https://account.microsoft.com/devices/recoverykey to find your recovery key.

Top Articles
Latest Posts
Article information

Author: Annamae Dooley

Last Updated:

Views: 5895

Rating: 4.4 / 5 (45 voted)

Reviews: 92% of readers found this page helpful

Author information

Name: Annamae Dooley

Birthday: 2001-07-26

Address: 9687 Tambra Meadow, Bradleyhaven, TN 53219

Phone: +9316045904039

Job: Future Coordinator

Hobby: Archery, Couponing, Poi, Kite flying, Knitting, Rappelling, Baseball

Introduction: My name is Annamae Dooley, I am a witty, quaint, lovely, clever, rich, sparkling, powerful person who loves writing and wants to share my knowledge and understanding with you.