How to Enable BitLocker in Windows

Edited 6 months ago by ExtremeHow Editorial Team

WindowsBitLockerSecurityEncryptionOperating SystemMicrosoftPCLaptopProtectionSettings

BitLocker is a full disk encryption feature that is included with Windows. It is designed to help protect data by providing encryption for the entire volume. Whether you want to keep company secrets safe or keep your private documents out of prying eyes, BitLocker can be a great tool to ensure the safety of your data. In this guide, we will explain how to enable BitLocker in Windows step by step.

Prerequisites for BitLocker

Before we can enable BitLocker, there are a few requirements you need to meet:

• Your computer must have the Trusted Platform Module (TPM) version 1.2 or later. The TPM is a special microchip in your computer that provides secure encryption services.
• If your system doesn't have a TPM, you can still use BitLocker, but you'll need to modify group policy settings and use a USB flash drive as the key.
• BitLocker is available on Windows 10 Pro, Enterprise, and Education editions.
• You should back up your important data before enabling BitLocker so you can use it in case something goes wrong during the encryption process.

Checking the TPM

The first step is to verify if your computer has a TPM and if it is enabled. Here's how you can check it:

Step 1: Open the TPM Management Console

Use the Windows + R keyboard shortcut to open the Run dialog box, then type tpm.msc and press Enter. This will open the TPM Management Console.

Step 2: Verify TPM status

In the TPM management console, you will see whether or not a TPM is present and enabled. If it is present and enabled, you can proceed to the next step. If not, you may need to enable it from your BIOS settings.

Enabling BitLocker

Step 3: Open BitLocker Drive Encryption

To get started, you'll need to access the BitLocker settings:

• Open the Start Menu and search for "BitLocker."
• Select BitLocker Manage from the results. This will open the BitLocker Drive Encryption window.

Step 4: Turn on BitLocker

Once you are in the BitLocker Drive Encryption window, follow these steps:

• Find the drive you want to encrypt under the Operating System Drives or Fixed Data Drives section.
• Click Turn On BitLocker next to that drive.

Step 5: Choose how to unlock the drive

You'll be asked to choose how you want to unlock the drive:

• TPM only: This is automatic and does not require any additional authentication.
• TPM with PIN: Requires a user-entered PIN at startup.
• TPM with startup key: This requires a USB flash drive with the BitLocker startup key plugged in at startup.
• TPM with PIN and startup key: This requires both a user-entered PIN and a startup key.

Choose the option that best suits your security needs. Most users opt for TPM with a PIN for added security.

Step 6: Back up your recovery key

Next, BitLocker will ask you to back up your recovery key. This is important if you ever forget your PIN or lose your startup key. You have several options:

• Save to your Microsoft account
• Save to USB drive
• Save to file
• Print the recovery key

Choose the option that best suits you, and be sure to keep this key in a safe place.

Step 7: Choose what to encrypt

BitLocker will ask you if you want to encrypt only the used disk space or the entire drive:

• Encrypt only used disk space: Fast and good for newer computers and drives.
• Encrypt the entire drive: This is slower, but it ensures everything is encrypted. Recommended for PCs and internal drives already in use.

Step 8: Choose the encryption mode

You will be asked to select an encryption mode:

• New encryption mode: Best for static drives only on this device.
• Compatible Mode: Best for drives that may need to be moved to another device.

For most users, the new encryption mode is suitable, unless you plan on moving your drive to another device frequently.

Step 9: Start the encryption process

Finally, you're ready to begin the encryption process:

• Click Start Encrypting to get started.

Depending on your choice and the size of the drive, this may take some time. Make sure your computer is connected to a power source and avoid using your computer for any other task during this process to ensure the process completes smoothly.

Verifying BitLocker Encryption

Checking the encryption status

Once the encryption process is complete, you'll want to verify that BitLocker is working properly:

• Return to the BitLocker Drive Encryption window.
• You should see that the drive's status is BitLocker On.

Using the Command Prompt to check status

Alternatively, you can use the Command Prompt to check BitLocker status:

Open Command Prompt as administrator and type the following command:

Press Enter, and you will see a detailed status report showing which drives are encrypted and what their encryption status is.

Troubleshooting

Common issues and solutions

If you have problems enabling BitLocker, try the following:

• If BitLocker isn’t seeing the TPM, make sure it’s enabled in the BIOS settings.
• If you can't turn on BitLocker, check if your Windows version supports it.
• For any errors, consider updating your system and trying the process again.

Additional help

If you continue to have difficulties or have specific questions, Microsoft provides support documentation, or you can check out the community forums for solutions.

Conclusion

BitLocker is a powerful tool integrated into Windows to help protect your data through encryption. Whether used on a personal PC or in a professional setting, knowing how to enable and manage BitLocker is a vital skill. By following the steps outlined here, you should be armed with the knowledge you need to confidently encrypt your drives using BitLocker.

Ensuring data security is more important than ever in our digital age, and with tools like BitLocker, you are able to keep your information secure from unauthorized access.

  Share This Article

If you find anything wrong with the article content, you can request an update