What Is BitLocker and How to Enable It on Windows
The real difference between Home and Pro, and why safely storing the recovery key is literally the most important part of the process.
BitLocker encrypts your disk's content, so that if someone steals your computer or removes the hard drive, they can't access your files without the key — not even by connecting it to another machine.
Check your edition first: full BitLocker (with all its options) requires Windows Pro, Education or Enterprise. If you have Windows Home, you aren't left completely unprotected — there's a simpler version called "device encryption", with fewer options but the same principle, and it's usually enabled by default on modern machines that meet the requirements.
Checking whether device encryption is already active (Windows Home)
Settings → Privacy & security → "Device encryption". If this option appears and is turned on, your files are already protected without you having had to do anything.
Enabling full BitLocker (Windows Pro)
- Search for "Manage BitLocker" in Windows.
- Next to the drive you want to encrypt (usually "C:"), click "Turn on BitLocker".
- Choose where to save the recovery key (see the warning below).
- Choose to encrypt only used space (faster) or the entire drive.
- Start the encryption.
Warning — this is the single most important thing in the whole article: if you lose the recovery key and forget your password, there is no way to recover your files. There is no possible "password recovery" with properly done encryption — that is precisely what makes it secure. Save the key to your Microsoft account (the most convenient option) and, if you want an extra copy, print it or save it to a separate USB stick that isn't the one you're encrypting.
Technical requirements
For the most complete protection, BitLocker uses a component called TPM (Trusted Platform Module) — a chip that securely stores the key within the hardware itself. Most computers made in the last few years include one, especially those compatible with Windows 11, which requires it. You can check this in Device Manager, under "Security devices".
What about encrypting a USB drive?
BitLocker also works with external USB drives (called "BitLocker To Go") — useful if you're going to carry sensitive information from one place to another. The process is the same: right-click the drive in File Explorer → "Turn on BitLocker".
Note: encrypting a disk takes time (anywhere from minutes to several hours depending on size) and slightly slows down performance while it's running. It's a good idea to do it when you don't need to use the computer intensively.
Frequently asked questions
Is BitLocker available on Windows Home?
Not in its full version, but Windows Home usually includes 'Device encryption', a simpler version with the same purpose, enabled by default on many modern machines.
What happens if I lose the recovery key?
You lose access to your files permanently and irreversibly — there is no recovery route for properly implemented encryption. That's why it's so important to save the key somewhere safe and accessible, like your Microsoft account.
Does encrypting the disk permanently slow down the computer?
The initial encryption process does consume resources while it completes, but once finished, the impact on daily use is minimal on most modern machines.