How to Enable and Use BitLocker Drive Encryption on Windows

Learn to encrypt your Windows drives with BitLocker. Step-by-step guide to enable BitLocker, set recovery options, and manage encrypted drives securely.

1. Check BitLocker compatibility. Open Settings > Update & Security > Device encryption or search 'BitLocker' in the Start menu. If BitLocker appears in search results, your system supports it. Windows 11 Pro, Enterprise, and Education include full BitLocker support. Windows 11 Home only includes device encryption for modern devices.
2. Open BitLocker management. Type 'BitLocker' in the Start menu and select 'Manage BitLocker' from the results. Alternatively, open Control Panel > System and Security > BitLocker Drive Encryption. This opens the BitLocker management interface showing all available drives.
3. Turn on BitLocker for your system drive. Find your C: drive in the BitLocker window and click 'Turn on BitLocker' next to it. Windows will check if your system meets BitLocker requirements. If prompted about TPM, restart your computer to complete the hardware check.
4. Choose how to unlock your drive. Select your preferred unlock method. Choose 'Enter a password' to create a password you'll enter at startup, or 'Insert a USB flash drive' to use a USB key for authentication. Create a strong password with at least 8 characters including numbers and symbols if using password authentication.
5. Save your recovery key. Choose where to save your 48-character recovery key. Select 'Save to your Microsoft account' for cloud backup, 'Save to a USB flash drive' for physical backup, or 'Print the recovery key' for paper backup. Store this key safely—you'll need it if you forget your password or lose your USB key.
6. Choose encryption scope. Select 'Encrypt used disk space only' for new computers or drives to save time, or 'Encrypt entire drive' for maximum security on existing drives with previous data. The first option encrypts faster but the second option prevents recovery of deleted files.
7. Select encryption mode. Choose 'New encryption mode' for drives that stay on this computer, or 'Compatible mode' for removable drives used with older Windows versions. Click 'Next' and then 'Start encrypting' to begin the process. Keep your computer plugged in and avoid shutting down during encryption.
8. Restart and test BitLocker. Restart your computer when encryption completes. Windows will prompt for your BitLocker password or USB key before loading. Enter your credentials to unlock the drive and boot normally. Verify BitLocker is active by checking for a lock icon next to your C: drive in File Explorer.