Encryption helps protect the data on your device so it can only be accessed by people who have authorization.


For Windows 10

Both device encryption and BitLocker drive encryption are security features designed by Microsoft to help Windows users protect their data.


Note: Device encryption is available on supported devices running all the editions of Windows 10 while BitLocker is a full volume encryption feature included in Windows 10 Pro, Enterprise, or Education (BitLocker is not available on Windows 10 Home edition).


To turn on device encryption

  1. Sign in to Windows with an administrator account (you may have to sign out and back in to switch accounts).
  2. Select the Start button, then select Settings  > Update & Security > Device encryption. If Device encryption doesn't appear, it isn't available. 
  3. If device encryption is turned off, select Turn on

To turn on BitLocker encryption

Note: You'll only see this option if BitLocker is available for your device. It isn't available on Windows 10 Home edition.


Once a drive is encrypted by BitLocker, it can only be unlocked or decrypted with a Bitlocker password or the Bitlocker Recovery Key. And anyone without proper authentication will be denied access even if the computer has been stolen or the hard disk is taken.


  1. Sign in to your Windows device with an administrator account (you may have to sign out and back in to switch accounts).
  2. In the search box on the taskbar, type Manage BitLocker and then select it from the list of results. Or you can select the Start button, and then under Windows System, select Control Panel. In Control Panel, select System and Security, and then under BitLocker Drive Encryption, select Manage BitLocker.
  3. Note: You'll only see this option if BitLocker is available for your device. It isn't available on Windows 10 Home edition.
  4. Select Turn on BitLocker and then follow the instructions.


For Windows 11

Both device encryption and BitLocker drive encryption are security features designed by Microsoft to help Windows users protect their data. 


Note: Device encryption is available on devices that support Modern Standby and it is available on all Windows 11 editions; the standard BitLocker encryption is only available on supported devices running Windows 11 Pro, Windows 11 Enterprise, or Windows 11 Education (it's not available on Windows 11 Home edition).


To turn on device encryption

  1. Open Settings app by pressing Windows + I. 
  2. Select Privacy & security from the left pane. 
  3. Click Device encryption from the right pane. 
  4. Flip the switch of Device encryption to On.

To turn on BitLocker encryption

Once a drive is encrypted by BitLocker, it can only be unlocked or decrypted with a Bitlocker password or the Bitlocker Recovery Key. And anyone without proper authentication will be denied access even if the computer has been stolen or the hard disk is taken.

  1. Open Settings app by pressing Windows + I
  2. In the Settings app, go to the System tab and select the Storage option on the right pane.
  3. On the next settings page, scroll down to the bottom and click the Advanced storage settings option under Storage management.
  4. When you click the Advanced storage settings drop-down, it will reveal a list of storage options. In there, select Disk & volumes.
  5. This will open the Disk & Volumes page, where all of the disks and drives (volumes) on your computer are listed. Here, select the Operating system drive (often labeled C:) and click Properties.
  6. On the selected volume page, click Turn on BitLocker under the BitLocker section.
  7. This will take you to the BitLocker Drive Encryption control panel where you can Turn on BitLocker.
  8. When the BitLocker Drive Encryption wizard opens, choose Use a password to unlock this drive and click Next. 
  9. Enter and Reenter a password with a combination of uppercase and lowercase letters, numbers, spaces, and symbols, then click Next
  10. In the next screen, choose how you want to back up your recovery key. In case you forgot your password, you can always use your recovery key to unlock the encrypted drive. You can choose any and all recovery options.
  11. Select your desired option and back up your recovery key. Once your recovery key is backed up or saved, you’ll see a message at the top as shown below. Then, click Next.
  12. The next window will ask how much of the drive space you want to encrypt. Either option is fine. If you are unsure, select Encrypt used disk space only and click Next.
  13. In the next window, choose New encryption mode and click Next.
  14. On the final screen, click the Start Encrypting button to start the encryption process.
  15. You may see another screen in the BitLocker Drive Encryption wizard ask if you want to run a BitLocker system check and restart your computer. Check the box for Run a BitLocker system check and click the Continue button.
  16. The drive will start encrypting. You can continue to work on your computer while it’s being encrypted.
  17. Once it’s done, you’ll see an Encryption of C: is complete message.
  18. Remember to keep a copy of your BitLocker password. This will be required on each reboot.