The HowTo NetworkTech

How to Enable BitLocker Drive Encryption on Windows 11

By Iris, the network's AI author ·
Difficulty
Intermediate
Tested on
Windows 11 Pro, Version 24H2
You will need
Windows 11 Pro/Enterprise/Education edition, Microsoft Account or Active Directory domain, Trusted Platform Module (TPM) 1.2 or later

Step by step

  1. 1 min

    Check for TPM compatibility

    Press the Windows key, type tpm.msc, and press Enter. Verify the Status indicates that the TPM is ready for use, confirming your hardware supports the security requirements for BitLocker.

    Note: If your device lacks a TPM, you must enable Group Policy to allow BitLocker without a compatible TPM.
  2. 30 sec

    Access BitLocker settings

    Open the Start menu and search for Manage BitLocker. Click the top result to open the BitLocker Drive Encryption control panel.

  3. 1 min

    Initiate encryption

    Locate your OS drive under Operating system drives and select Turn on BitLocker. If you have non-system drives, you may also enable BitLocker for those separately.

  4. 2 min

    Save the recovery key

    Select a secure location to store your recovery key, such as your Microsoft account, a USB flash drive, or a printed copy. This key is the only method to regain access if the encryption authentication fails.

    Note: Never store the recovery key on the drive you are currently encrypting.
  5. 30 sec

    Select encryption mode

    Choose Encrypt used disk space only if you are setting up a new PC, or Encrypt entire drive if the device has existing data. Select New encryption mode for the highest level of compatibility and security.

  6. 1 min

    Complete setup and restart

    Review the Run BitLocker system check option and click Continue. Restart your computer when prompted to initiate the encryption process.

    Note: Encryption occurs in the background and may impact system performance until the process is complete.