How to configure BitLocker encryption on Windows 11

By Mauro Huculak
published

You can use BitLocker encryption for extra data security. Here's how to enable the feature on Windows 11.

Windows 11 set up BitLocker
Windows 11 set up BitLocker (Image credit: Windows Central )

BitLocker on Windows 11 adds an extra layer of security with encryption to protect your device and files from unauthorized access. When using encryption, the feature scrambles the data on the drive to make it unreadable for anyone without the correct decryption key.

The BitLocker security feature is available on Windows 11 Pro, Enterprise, and Education editions. However, on Windows 11 Home, you can use "device encryption," a limited version of BitLocker. It works identical to the full version but without many of the advanced management settings and capabilities, such as "BitLocker To Go." Also, when using device encryption, all the drives will encrypt automatically, while the full version of BitLocker allows you to choose the storage using encryption.

In this Windows 11 guide, we will walk you through the steps to get started setting up device encryption with BitLocker on your computer.

How to set up BitLocker on Windows 11 Pro

To configure BitLocker in the Pro edition of Windows 11, use these steps:

  1. Open Settings.
  2. Click on Storage.
  3. Under the "Storage management" section, click on Advanced storage settings.
  4. Click on Disks & volumes.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Select the drive with the partition to encrypt.
  2. Select the partition to enable encryption.
  3. Click the Properties button.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Turn on BitLocker option.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Turn on BitLocker option again.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Select the option to back up the recovery key — for example, Save to your Microsoft account.Quick note: You can always find the recovery key on your Microsoft account (opens in new tab). Also, the option to save online is only available when the account is connected with a Microsoft account.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Next button.
  2. Select the Encrypt used disk space only option.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Next button.
  2. Select the New encryption mode option.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Check the Run BitLocker system check option.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Restart now button (if applicable).

Once you complete the steps, the system will begin encrypting the data on the drive.

While in the "BitLocker Drive Encryption," it is also possible to encrypt other drives, such as secondary storage, external USB hard drives, and removable data drives, using "BitLocker To Go."

Remove BitLocker encryption

If you need to remove the system encryption, use these steps:

  1. Open Control Panel.
  2. Click on System and Security.
  3. Click on BitLocker Drive Encryption.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Under the "Operating system drive" section, click the Turn off BitLocker option.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Turn off BitLocker button again.

After you complete the steps, the decryption process will take a while, depending on how large the drive is and your data.

How to set up BitLocker on Windows 11 Home

To configure BitLocker in the Home edition of Windows 11, use these steps:

  1. Open Settings.
  2. Click on Privacy & Security.
  3. Click the Device encryption setting.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Turn on Device encryption toggle switch.

Source: Windows Central (Image credit: Source: Windows Central)
  1. (Optional) Under the "Related" section, click the BitLocker drive encryption option.
  2. Under the "Operating system drive" section, click the Back up your recovery key option.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Click the Save to a file option.
  2. Save the BitLocker recovery key in a different location.
  3. Click the Save button.

Once you complete the steps, BitLocker will turn on the system to encrypt the files on the drive.

This version of BitLocker is only available on some devices. If you don't find the option, the device most likely doesn't support device encryption. You would typically see this feature on devices like Microsoft Surface devices, and those from other brands like HP, Lenovo, Dell, etc.

Remove BitLocker encryption

To decrypt a device using BitLocker, use these steps:

  1. Open Settings.
  2. Click on Privacy & Security.
  3. Click the Device encryption setting.

Source: Windows Central (Image credit: Source: Windows Central)
  1. Turn off the Device encryption toggle switch.

Source: Windows Central (Image credit: Source: Windows Central)

After you complete the steps, the decryption process will begin on the device.

More Windows resources

For more helpful articles, coverage, and answers to common questions about Windows 10 and Windows 11, visit the following resources:

Mauro Huculak
Mauro Huculak

Mauro Huculak is technical writer for WindowsCentral.com. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. He has an IT background with professional certifications from Microsoft, Cisco, and CompTIA, and he's a recognized member of the Microsoft MVP community.

1 Comment
  • I have a Lenovo Legion Y740 laptop running Windows 11 Home 21H2; and that doesn't have the encryption option mentioned in this article.