Privacy and Security Turn On BitLocker for Removable Data Drive in Windows 11


BitLocker_drive_banner.png

This tutorial will show you how to turn on or off BitLocker To Go to encrypt or decrypt a removable data drive in Windows 10 and Windows 11.

BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned drives and computers.

New files are automatically encrypted when you save them to a drive encrypted by BitLocker. However, if you copy these files to another drive or a different PC not encrypted by BitLocker, the files are automatically decrypted.

BitLocker To Go is BitLocker Drive Encryption on removable data drives. This includes the encryption of USB flash drives, SD cards, external hard disk drives, and other drives formatted by using the NTFS, FAT16, FAT32, or exFAT file systems.

You can choose to unlock BitLocker for a removable data drive with a password or a smart card. You can set the removable data drive to automatically unlock after encrypted when you sign in to Windows.


BitLocker Drive Encryption is only available in the Windows 10/11 Pro, Enterprise, and Education editions.



EXAMPLE: BitLocker turned on for removable data drive in File Explorer > This PC, and if you choose to unlock removable data drive with password

BitLocker_This_PC.png




Here's How:

1 If you like, set a default encryption method (XTS-AES or AES-CBC) and cipher strength (128 bit or 256 bit) you want used by BitLocker.

BitLocker Drive Encryption uses AES-CBC 128 bit by default for removable data drives.

XTS-AES 256 bit offers the strongest encryption strength available for BitLocker.


2 Open This PC in File Explorer (Win+E).

3 Right click or press and hold on the removable data drive (ex: "F") you want to encrypt with BitLocker, click/tap on Show more options, and click/tap on Turn on BitLocker. (see screenshot below)

BitLocker_removable_data_drive-1.png

4 Choose how (ex: password or smart card you want to unlock the removable data drive. (see screenshot below)

A password requires at least 8 characters.


BitLocker_removable_data_drive-2.png

5 Select how (Microsoft account, file, and/or print) you want to back up your BitLocker recovery key for this removable data drive. (see screenshot below)

Microsoft account = This option is only available if you are signed in to Windows with a Microsoft account. It will save the BitLocker recovery key to your Microsoft account online at https://account.microsoft.com/devices/recoverykey.

File = This option will save the BitLocker recovery key to a TXT file at a folder location you select.

Print = This option will print the BitLocker recovery key to the selected printer.


BitLocker_removable_data_drive-3.png

6 When finished backing up your BitLocker recovery key where you want, click/tap on Next. (see screenshot below)

BitLocker_removable_data_drive-4.png

7 Select (dot) Encrypt used disk space only or Encrypt entire drive for how much of your drive to encrypt right now, and click/tap on Next. (see screenshot below)

It is recommended to select Encrypt entire drive.



BitLocker_removable_data_drive-5.png

8 Select (dot) which encryption mode to use, and click/tap on Next. (see screenshot below)

If you did step 1 above to set a default encryption method and cipher strength, then you will not have this setting available since BitLocker will use what you set in step 1 instead.

New encryption mode (XTS-AES 128-bit) = Select this mode if this is a fixed drive or if this drive will only be used on devices running Windows 10 or Windows 11.

Compatible mode (AES-CBC 128-bit) = Select this mode if this is a removable drive that you're going to use on an older version of Windows (ex: Vista, Windows 7, or Windows 8/8.1).


BitLocker_removable_data_drive-6.png

9 Click/tap on Start encrypting when ready. (see screenshot below)

BitLocker_removable_data_drive-7.png

10 The removable data drive will now start encrypting. (see screenshot below)

This could take a long time to finish depending on the size of the drive and how much data on the drive is being encrypted.


BitLocker_removable_data_drive-8.png

11 When encryption has finished, click/tap on Close. (see screenshot below)

BitLocker_removable_data_drive-9.png


That's it,
Shawn Brink


 
Last edited:
Hey brink, the starting text says windows 10, might want to change to 11
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Ryzen 7 5700 X3D
    Motherboard
    MSI MPG B550 GAMING PLUS
    Memory
    64 GB DDR4 3600mhz Gskill Ripjaws V
    Graphics Card(s)
    RTX 4070 Super , 12GB VRAM Asus EVO Overclock
    Monitor(s) Displays
    Gigabyte M27Q (rev. 2.0) 2560 x 1440 @ 170hz HDR
    Hard Drives
    2TB Samsung nvme ssd
    2TB XPG nvme ssd
    PSU
    CORSAIR RMx SHIFT Series™ RM750x 80 PLUS Gold Fully Modular ATX Power Supply
    Case
    CORSAIR 3500X ARGB Mid-Tower ATX PC Case – Black
    Cooling
    ID-COOLING FROSTFLOW X 240 CPU Water Cooler
    Internet Speed
    900mbps DOWN, 100mbps UP
  • Operating System
    Chrome OS
    Computer type
    Laptop
    Manufacturer/Model
    HP Chromebook
    CPU
    Intel Pentium Quad Core
    Memory
    4GB LPDDR4
    Monitor(s) Displays
    14 Inch HD SVA anti glare micro edge display
    Hard Drives
    64 GB emmc

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender

Latest Support Threads

Back
Top Bottom