BitLocker is Windows’ built-in drive encryption feature. When enabled, it encrypts everything on your drive — if your laptop is stolen or lost, the data is completely unreadable without your PIN or recovery key. It is one of the most important security measures you can enable on a Windows PC, and it takes about five minutes to set up.
Do You Have BitLocker?
BitLocker is available on Windows 11 Pro, Enterprise, and Education. Windows 11 Home has a simpler version called Device Encryption — the setup is similar but with fewer options.
To check your Windows edition: Settings → System → About → Windows specifications.
How to Enable BitLocker on Windows 11 Pro
- Open the Start menu and search for Manage BitLocker
- Click Turn on BitLocker next to your C: drive
- Choose how to unlock your drive at startup — for most users, Enter a PIN is the most secure option
- Set a strong PIN (you will enter this each time Windows starts)
- Choose how to back up your recovery key — Save to your Microsoft account is the easiest; you can also save to a USB drive or print it
- Choose Encrypt used disk space only for a new or clean PC, or Encrypt entire drive for maximum security on an existing PC
- Choose New encryption mode (XTS-AES) for a fixed drive
- Click Start encrypting
Encryption runs in the background and your PC remains usable throughout. It typically takes 30 minutes to a few hours depending on drive size.
How to Enable Device Encryption on Windows 11 Home
- Settings → Privacy & Security → Device Encryption
- Toggle Device Encryption on
- Sign in with a Microsoft account if prompted — your recovery key is saved there automatically
Device Encryption is simpler than full BitLocker but provides the same core protection: your drive is encrypted and unreadable without your account credentials.
Your Recovery Key — Do Not Lose It
The recovery key is a 48-digit code that unlocks your drive if you forget your PIN or move the drive to another PC. If you lose both your PIN and recovery key, your data is permanently inaccessible — there is no back door.
- Save it to your Microsoft account (accessible at account.microsoft.com/devices/recoverykey)
- Print a copy and store it somewhere safe and separate from your PC
- Never store the recovery key on the same drive it protects
Checking BitLocker Status
# Check BitLocker status via Command Prompt (run as Administrator)
manage-bde -status C:Look for Protection Status: Protection On to confirm encryption is active.
BitLocker on Multiple Drives
BitLocker can protect additional drives (D:, external USBs) using BitLocker To Go. In Manage BitLocker, scroll down to see additional drives and enable protection on each one.
Does BitLocker Slow Down Your PC?
On modern hardware with NVMe SSDs, BitLocker has negligible performance impact — typically less than 2-3%. The encryption/decryption happens at the hardware level on modern drives. On older spinning hard drives you may notice a slight slowdown, but for most users it is imperceptible.
