How to Enable BitLocker Drive Encryption on Windows 11

Secure your Windows 11 data by enabling BitLocker drive encryption. Follow this step-by-step guide to protect your local drives with industry-standard security.

1. Check for TPM compatibility. Press the Windows key, type tpm.msc, and press Enter. Verify the Status indicates that the TPM is ready for use, confirming your hardware supports the security requirements for BitLocker.
2. Access BitLocker settings. Open the Start menu and search for Manage BitLocker. Click the top result to open the BitLocker Drive Encryption control panel.
3. Initiate encryption. Locate your OS drive under Operating system drives and select Turn on BitLocker. If you have non-system drives, you may also enable BitLocker for those separately.
4. Save the recovery key. Select a secure location to store your recovery key, such as your Microsoft account, a USB flash drive, or a printed copy. This key is the only method to regain access if the encryption authentication fails.
5. Select encryption mode. Choose Encrypt used disk space only if you are setting up a new PC, or Encrypt entire drive if the device has existing data. Select New encryption mode for the highest level of compatibility and security.
6. Complete setup and restart. Review the Run BitLocker system check option and click Continue. Restart your computer when prompted to initiate the encryption process.