How to Enable BitLocker Drive Encryption in Windows

- Difficulty
- Intermediate
- Tested on
- Windows 11 Pro - Version 24H2
- You will need
- Windows Pro/Enterprise/Education edition, Microsoft Account or Active Directory domain, TPM 1.2 or higher
Step by step
Open the BitLocker Drive Encryption control panel
Open the Start menu, type 'Manage BitLocker', and press Enter. If you do not see this option, ensure your version of Windows supports BitLocker, as it is not available on Windows Home editions.
Note: If you are on Windows Home, you must upgrade to Pro to access this feature.Turn on BitLocker for the system drive
Locate the Operating System drive (usually C:) under the BitLocker Drive Encryption section. Click the 'Turn on BitLocker' link to initiate the setup wizard.
Choose a backup method for your recovery key
The wizard will prompt you to back up your recovery key. Select 'Save to your Microsoft account', 'Save to a file', or 'Print the recovery key'. This key is critical for regaining access to your files if your authentication fails.
Note: Store your recovery key in a secure, offline location. Never store it on the drive you are encrypting.Choose how much of your drive to encrypt
Select 'Encrypt used disk space only' for new PCs or 'Encrypt entire drive' for PCs that have been in use for a long time. Encrypting the entire drive is slower but more secure.
Select the encryption mode
Choose 'New encryption mode' if you are sure this drive will only be used on Windows 10 (version 1511) or later. Select 'Compatible mode' if you intend to move the drive between devices running older versions of Windows.
Start the encryption process
Check the box labeled 'Run BitLocker system check' and click 'Continue'. Restart your computer when prompted to complete the encryption process. Windows will encrypt your drive in the background.
Note: Your computer remains usable during the encryption process, though you may notice a slight drop in performance.