Windows 11: How To Encrypt The Contents Of Your PC With Bitlocker

Secure the data stored on your computer by encrypting it with the native encryption utility that Microsoft has built into Windows.

Contents

Your PC undoubtedly contains a fair amount of such personal data. If some are valuable in your eyes, others may be sensitive. This is the case, for example, when you save work documents on your PC. To ensure that this data does not fall into the hands of malicious people, especially if your PC is lost or stolen, it is highly recommended to encrypt it.

To do this, Microsoft has integrated BitLocker into its operating system. This encryption engine, first introduced in the Enterprise and Ultimate versions of Windows Vista, has since been implemented in all Professional and Enterprise versions of Windows. If you have a PC with Windows 11 in the Professional or Enterprise version, you can use it to encrypt the data on your computer. And the procedure should be a mere formality.

It may already be activated automatically, especially if you have a newer PC. At least that’s what Microsoft says on its website. In principle, only machines used with a local account do not benefit from the automatic activation of BitLocker. In fact, there are many newer PCs that do not have Microsoft’s encryption system active by default. There are several ways to encrypt your computer with Bitlocker. However, the simplest of these only takes a few seconds.

1. Open Settings

Start by opening the settings Windows via the key combination Windows+R. Then select privacy and security in the left column and then go to the Device Encryption menu.

2. Enable encryption

Now click the Enable Encryption button. Bitlocker is now enabled and should encrypt all partitions and hard drives on your PC. The encryption process for your device may take longer or shorter depending on the performance of your computer. Windows 11 automatically displays the Encryption in progress message in the device’s Encryption Settings window until the device is finished.

3. Back up your recovery key

The encryption key is automatically managed by your PC’s TPM module. Therefore, when you start your machine, you do not have to enter a different password than that of your usual session. However, in the event of a problem with the TPM module or if you have forgotten your password, it is imperative that you have your recovery key. This is essential to access the files on your hard drive or to unlock your PC. It is therefore necessary to keep this recovery key in a safe place.

To access the Bitlocker Drive Encryption management module, under the heading Similar linksclick on BitLocker Drive Encryption.

The window that appears should list your various drives/partitions. You need to save the recovery key for each of them. To do this, click on Back up your recovery key.

Depending on the disc type, you will then be offered several options. The simplest is probably stillSave to your Microsoft account. The recovery key is thus accessible online after you have logged into your Microsoft account.

However, you can choose to do soSave asWhere from on a USB stick which you then need to keep and keep in a safe place. You can also opt for thisprint key Recovery key, an old school method which again requires you to keep the paper on which the recovery key was printed in a safe place. Remember that if you lose your recovery key and your PC’s TPM module becomes unresponsive, you will no longer be able to access your PC’s data.

In addition, Microsoft states on the support pages of its website that in the event that Bitlocker detects that an unauthorized person is trying to access your computer, it will automatically lock your PC and hard drives. The system will then ask you to enter the recovery key to authorize access to your data.

Your device data should now be encrypted. You can easily check if your drives are encrypted by opening a file explorer window and then selecting This PC in the left column. Your computer’s hard drive(s) should show an icon with a padlock over it.

4. Access your recovery key online

If you chose to store the recovery key in your Microsoft account, simply go to https://account.microsoft.com/devices/recoverykey and sign in with your Microsoft credentials to access your recovery key .

5. Disable Bitlocker

However, should you decide for your own reasons that you no longer encrypt your PC, all you have to do is go back to Settings > Privacy & Security > Device Encryption to disable the option. Bitlocker then decrypts all your data that is no longer secure.