How to use BitLocker Drive Encryption on Windows 10 | Windows Central.How to Encrypt a Hard Drive with BitLocker in Windows 10 | Carbide
Looking for:
Bitlocker encryption windows 10. How to Encrypt a Hard Drive with BitLocker in Windows 10 |
Bitlocker encryption windows 10
When you use encryption to scramble your data, it will continue to be unreadable even when sharing it with other people. Only you with the proper encryption key can decrypt the data to make it usable.
If you've never use BitLocker before, the feature offers two methods of encryption, including hardware-based encryption using Trusted Platform Module TPM chip and software-based encryption using a password or USB flash drive to decrypt the drive and continue booting into Windows Also, the feature allows protecting the data on the installation drive, secondary storage, and removable media with "BitLocker To Go. In this Windows 10 guide, we will walk you through the steps to set up BitLocker on your computer to make sure your sensitive data stays secure.
Although BitLocker does a good job securing your data, any system change carries its risks. It's always recommended that you make a full backup of your system before proceeding with this guide. Alternatively, you can also check your manufacturer's support website for details on whether the computer includes the security chip and the instructions to enable the security feature. After you complete the steps, the device will restart, BitLocker will enable, and you will not be prompted to enter a decryption password to continue starting Windows Depending on the option you selected and the size of the drive, this process can take a long time, but you can continue to work on the computer.
After the encryption process is complete, the drive will include a lock icon, and the label will read BitLocker on. In the case that the computer does not have a Trusted Platform Module chip, you won't be able to configure BitLocker on Windows However, you can still use encryption if you use the Local Group Policy Editor to enable additional authentication at startup.
Once the feature is enabled, you will need to provide a password or USB flash drive with the recovery key to unlock the drive and continue booting into Windows After you complete the steps, the computer will restart, and BitLocker will prompt you to enter your encryption password to unlock the drive. Once you complete the steps, the drive will start using encryption.
If the drive already had data, the process could take a long time to complete. Alternatively, you can also use the "BitLocker To Go" feature to encrypt removable drives such as USB flash and external drives connected to your computer. When using encryption, always try to start with an empty drive to speed up the process, then the data will encrypt quickly and automatically.
In addition, similar to the feature of the operating system drive, you will get the same additional options and a few more, including:. Once you complete the steps, the decryption process will begin, and it will take some time to complete depending on the amount of data.
For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:. Mauro Huculak is technical writer for WindowsCentral. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. Windows Central Windows Central. Mauro Huculak. More about windows Windows 10 version 22H2 announced, and its first build is available fo You might also want to click a picture of the paper and store it on your phone.
You never know what will go wrong, so it is better to create as many backups as possible. Click on Next to continue after you have printed or sent the recovery key to your Microsoft account. Bitlocker gives you the option to either encrypt the entire hard drive or only the part used. Encrypting a complete hard drive takes longer to accomplish and is recommended for older PCs and drives where most of the storage space is already being used.
If you are enabling Bitlocker on a new disk or a new PC, you should choose to encrypt only the space that is currently filled with data as it is much faster. Also, Bitlocker will automatically encrypt any new data you add to the disk and save you the trouble of doing it manually. Select your preferred encryption option and click on Next. Optional : Starting from Windows 10 Version , Bitlocker started providing the option to select between two different encryption modes.
Select the New encryption mode if the disk is a fixed one and the compatible mode if you are encrypting a removable hard drive or USB flash drive. On the final window, some systems will need to tick the box next to Run BitLocker system check while others can directly click on Start encrypting.
You will be prompted to restart the computer to initiate the encryption process. Comply with the prompt and restart. Users can also manage Bitlocker via the Command Prompt using the command line manage-bde. Earlier, actions like enabling or disabling auto-locking could only be performed from the Command Prompt and not the GUI. Firstly, ensure you are logged in to your computer from an administrator account. Open Command Prompt with administrator rights.
If you receive a User Account Control pop-up message requesting permission to allow the program Command prompt to make changes to the system, click on Yes to grant the necessary access and continue.
Once you have an elevated Command Prompt window in front of you, type manage-bde. Inspect the Parameter List for the one you need. To encrypt a volume and turn on Bitlocker protection for it, the parameter is -on. You can obtain further information regarding the -on a parameter by executing the command manage-bde.
Alternatively, you can also check your manufacturer's support website for details on whether the computer includes the security chip and the instructions to enable the security feature. After you complete the steps, the device will restart, BitLocker will enable, and you will not be prompted to enter a decryption password to continue starting Windows Depending on the option you selected and the size of the drive, this process can take a long time, but you can continue to work on the computer.
After the encryption process is complete, the drive will include a lock icon, and the label will read BitLocker on. In the case that the computer does not have a Trusted Platform Module chip, you won't be able to configure BitLocker on Windows However, you can still use encryption if you use the Local Group Policy Editor to enable additional authentication at startup.
Once the feature is enabled, you will need to provide a password or USB flash drive with the recovery key to unlock the drive and continue booting into Windows After you complete the steps, the computer will restart, and BitLocker will prompt you to enter your encryption password to unlock the drive. Once you complete the steps, the drive will start using encryption.
If the drive already had data, the process could take a long time to complete. Alternatively, you can also use the "BitLocker To Go" feature to encrypt removable drives such as USB flash and external drives connected to your computer.
When using encryption, always try to start with an empty drive to speed up the process, then the data will encrypt quickly and automatically. In addition, similar to the feature of the operating system drive, you will get the same additional options and a few more, including:.
Once you complete the steps, the decryption process will begin, and it will take some time to complete depending on the amount of data. For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:. Mauro Huculak is technical writer for WindowsCentral.
His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. Windows Central Windows Central. Mauro Huculak. More about windows Windows 10 version 22H2 announced, and its first build is available fo Topics Windows 10 Help.
See all comments Of course the best BitLocker method is with an eDrive, setup during a clean Windows installation. That way the encryption is offloaded to the drive. But this is second best.
Definitely worth enabling if you can in case your device is ever stolen. But make sure you have a good backup mechanism in place. You have two options when encrypting your drive if your computer is a new one just encrypted by selecting Used Disk Space Only.
Alternatively, you can choose the second way to encrypt the entire disk Encrypt entire drive. Note, if you choose the second method, the encryption process will take a long time if the drive is large. Make sure your computer uses a UPS in case of a power failure UPS - Uninterruptible Power Supply, or UPS is a device that can provide power for a period of time corresponding to the design capacity to maintain Operation of electrical equipment is not interrupted when the power grid goes down.
If your computer is using Windows 10 November Update. If it's a fixed drive, you can choose this way to encrypt it. After logging into Windows 10 , you will see nothing else. You should now see a lock icon on the system drive. Right-click the drive, then select Manage BitLocker.
Bitlocker encryption windows 10. Overview of BitLocker Device Encryption in Windows
Confirm your Windows edition on the following screen. You can also type winver a Run command in the start search bar and press the enter key to check your Windows edition. The TPM is used by Bitlocker to generate and store the encryption key. In the following window, check the TPM status. On some systems, TPM chips are disabled by default, and the user will need to enable the chip manually. Bitlocker can be enabled using its graphical interface found inside the control panel or executing a few commands in the Command Prompt.
Enabling Bitlocker on Windows 10 from either is very simple, but users generally prefer the visual aspect of managing Bitlocker via the Control Panel rather than the command prompt.
Setting up Bitlocker is pretty straight-forward. One only needs to follow the on-screen instructions, choose their preferred method to encrypt a volume, set a strong PIN, safely store the recovery key, and let the computer do its thing. For a few users, the Bitlocker Drive Encryption will itself be listed as a Control Panel item, and they can directly click on it.
Expand the drive you want to enable Bitlocker to click on the Turn on Bitlocker hyperlink. You can also right-click on a drive in File Explorer and select Turn On Bitlocker from the context menu. If your TPM is already enabled, you will directly be brought to the BitLocker Startup Preferences selection window and can skip to the next step.
Otherwise, you will be asked to prepare your computer first. Go through the Bitlocker Drive Encryption startup by clicking on Next. Click on Shutdown when ready to continue. Turn on your computer and follow the instructions that appear on the screen to activate the TPM. Activating the module is as simple as pressing the requested key.
The key will vary from manufacturer to manufacturer, so carefully read the confirmation message. The computer will most likely shut down again once you activate the TPM; turn on your computer back on. We will be setting a PIN on our computer. If you decide to move forward with the other option, do not lose or damage the USB drive bearing the startup key. On the following window set a strong PIN and re-enter it to confirm.
The PIN can be anywhere between 8 to 20 characters long. Click on Next when done. Bitlocker will now ask you your preference for storing the recovery key. The recovery key is extremely important and will help you access your files on the computer in case something deters you from doing so for example — if you forget the startup PIN.
You can choose to send the recovery key to your Microsoft account, save it on an external USB drive, save a file on your computer or print it. We recommend you print the recovery key and store the printed paper safely for future needs.
You might also want to click a picture of the paper and store it on your phone. You never know what will go wrong, so it is better to create as many backups as possible. Click on Next to continue after you have printed or sent the recovery key to your Microsoft account.
Bitlocker gives you the option to either encrypt the entire hard drive or only the part used. Encrypting a complete hard drive takes longer to accomplish and is recommended for older PCs and drives where most of the storage space is already being used.
If you are enabling Bitlocker on a new disk or a new PC, you should choose to encrypt only the space that is currently filled with data as it is much faster. Also, Bitlocker will automatically encrypt any new data you add to the disk and save you the trouble of doing it manually. Select your preferred encryption option and click on Next. Optional : Starting from Windows 10 Version , Bitlocker started providing the option to select between two different encryption modes.
Select the New encryption mode if the disk is a fixed one and the compatible mode if you are encrypting a removable hard drive or USB flash drive.
On the final window, some systems will need to tick the box next to Run BitLocker system check while others can directly click on Start encrypting. You will be prompted to restart the computer to initiate the encryption process. Comply with the prompt and restart. Users can also manage Bitlocker via the Command Prompt using the command line manage-bde.
Earlier, actions like enabling or disabling auto-locking could only be performed from the Command Prompt and not the GUI. Any behavior that is insulting, rude, vulgar, desecrating, or showing disrespect. Any behavior that appears to violate End user license agreements, including providing product keys or links to pirated software. Unsolicited bulk mail or bulk advertising. Any link to or advocacy of virus, spyware, malware, or phishing sites. Any other inappropriate content or behavior as defined by the Terms of Use or Code of Conduct.
Any image, link, or discussion related to child pornography, child nudity, or other child abuse or exploitation. Details required : characters remaining Cancel Submit. Was this reply helpful? Yes No. Sorry this didn't help. Thanks for your feedback. Choose where you want to search below Search Search the Community.
Search the community and support articles Windows Windows 10 Search Community member. I do not need any help with Bitlocker software encryption, but I very much need help with Bitlocker hardware encryption.
I have the same question 1. Report abuse. Details required :. Cancel Submit. Hi Welcome to Microsoft community.
How satisfied are you with this reply? Thanks for your feedback, it helps us improve the site.
Comments
Post a Comment