Bitlocker is a feature of certain versions of Windows that encrypts your hard drive’s contents. Without the right decryption keyit’s virtually impossible to crack this protection. Soeven if someone were to physically open your PCtake your internal drive out and attach it to another computerthey could not read the data without that key. If it’s your drive and you lost the encryption keysee our article on how to find a BitLocker key.
What You’ll Need
There are some hardware requirements toosuch as having a TPM 1.2 or better (Trusted Platform Module) chip in your system. If your computer does not have the required TPMyou’ll have to use a USB drive that will be formatted with your encryption key to start up and run the computer. Your C drive must also be set as your first boot deviceand not (for example) your USB or optical drives.
Don’t worry too much about the requirementssince if your computer isn’t ready for BitLockeryou won’t find the option to enable it. If you’re worried about the possibility that you could lose your files if you encrypt with BitLockerfirst read our guide on how to find a BitLocker key and recover files from encrypted drives.
With that saidlet's look at how to turn BitLocker on.
How To Turn BitLocker On in Windows
Assuming that your computer complies with the requirementshere’s how to activate BitLocker on your Windows PC. We’re using Windows 11 herebut the same steps apply to Windows 10:
1. Sign into Windows with an Administrator account. If this is your personal computer and you’re the only useryou’re most likely already the administrator. If notyou’ll have to ask the administrator to activate BitLocker for you. On a work computerthis is almost certainly someone from the IT department.
2. Open the Start Menu and search for “Manage Bitlocker” then click on it.
3. Select ‘Turn on BitLocker’. BitLocker is individually applied to each one of your drives. So if you have more than one driveensure that you turn it on for all of themassuming you want all of them protected by encryption. Alsobear in mind that if you copy a file from your encrypted drive to a non-encrypted drivethe file will no longer be protected!
4. Select your backup key method and click Next. The backup key will let you decrypt the drive in case you forget your passcode. There are three options here and you can choose more than one. Since we’ve signed in with our Microsoft Accountwe’ll choose that as the backup method heresince that means the key can be recovered from Microsoft’s servers.
5. Choose how much of the drive to encrypt and click next. Simply choose the method that matches your circumstances. If this is a new PCchoose the first option. If it’s a PC that’s been in usechoose the second.
6. Choose your encryption mode and click next. Choose the first mode for fixed drivesand the second for drives that will be used with other PCs.
7. (Optional) Tick the system check box. This makes sure that your encryption keys are readable. We recommend doing thiseven though it’s not strictly necessary.
8. Click ‘Start Encrypting.’
9. Restart your computer.
10. Open BitLocker Management again. Follow steps 1 to 3 againand now you’ll see a message that the drive is being encrypted. You can keep using your PCbut you might notice worse performance until the process is done.
That’s it; once encryption is doneyour PC’s drive is now protectedand even if someone got their hands on it and plugged it into their own computerit’s impossible to decrypt the data without the keyor some sort of quantum supercomputer that doesn’t exist yet.
How To Turn BitLocker Off in Windows
If you no longer want to have your drive encryptedyou can turn BitLocker off as easily as you turned it on. Howeverdo note that you don’t have to decrypt your drive before formatting it. Formatting will erase all data on the drivewhether encrypted or not. To turn off BitLockerdo the following:
1. Repeat steps 1 to 3 above. This will take you back to the BitLocker Management Window.
2. Click ‘Turn Off Bitlocker” next to the drive in question.
3. Click ‘Turn Off Bitlocker’ again in the confirmation window that pops up.
The drive is now decrypting.
Just as when you encrypted the drivethis process will take a while to completebut you can keep using your computer as normal with the possibility of slightly worse performance. Most modern computers should have no noticeable performance differences with BitLocker switched onso there’s little downside to using the feature unless you lose your recovery keybut then your most important data should always be backed up in more than one locationsuch as cloud storage.