How to Enable Encryption on Windows 11

Data security is an important aspect of modern computing, especially when storing sensitive personal, financial, or work-related information on a computer. If your device is lost, stolen, or accessed by unauthorized users, unencrypted data can be easily read from the storage drive. Encryption helps protect your data by converting it into an unreadable format that can only be accessed with the correct authentication.

Windows 11 includes built-in encryption features that protect files and entire drives from unauthorized access. Depending on your system edition and hardware capabilities, you can enable Device Encryption or BitLocker Drive Encryption to secure your data. These features encrypt the contents of your storage drive so that only authorized users can access it.

In this guide, we will walk you through the steps to enable encryption on Windows 11 using the available built-in tools.

How to Enable Encryption on Windows 11

Follow the methods below to enable encryption and protect your data on Windows 11.

1. Enable Device Encryption in Windows Settings

Some Windows 11 devices support Device Encryption, which automatically encrypts your system drive once enabled.

1. Press Windows + I on your keyboard to open the Settings app.
2. Click Privacy & security in the left sidebar.
3. Select Device encryption.
4. Locate the Device encryption option.
5. Toggle the switch to On.
6. Wait while Windows encrypts your device.
7. Ensure that your Microsoft account is signed in so the recovery key can be backed up automatically.

Once enabled, your system drive will be encrypted, helping protect your data if the device is accessed without authorization.

2. Enable BitLocker Drive Encryption

If you are using Windows 11 Pro, Enterprise, or Education, you can enable BitLocker for stronger drive encryption and more control.

1. Press Windows + S and type Control Panel.
2. Open the Control Panel from the search results.
3. Click System and Security.
4. Select BitLocker Drive Encryption.
5. Locate your system drive (usually C:).
6. Click Turn on BitLocker.
7. Choose how you want to unlock the drive, such as using a password or smart card.
8. Save your recovery key to a Microsoft account, file, or printed copy.
9. Choose whether to encrypt used disk space only or the entire drive.
10. Select the encryption mode recommended by Windows.
11. Click Start encrypting.

Windows will begin encrypting the drive in the background.

3. Encrypt External Drives Using BitLocker To Go

Windows 11 also allows you to encrypt removable storage devices such as USB drives using BitLocker To Go.

1. Insert the USB drive or external storage device into your computer.
2. Open File Explorer using Windows + E.
3. Right-click the removable drive.
4. Select Turn on BitLocker.
5. Choose Use a password to unlock the drive.
6. Enter and confirm a strong password.
7. Save the recovery key in a safe location.
8. Select the encryption option and click Start encrypting.

After encryption is complete, the drive will require a password before it can be accessed.

4. Verify That Encryption Is Enabled

After enabling encryption, it is important to verify that your drive is protected.

1. Open Control Panel.
2. Click System and Security.
3. Select BitLocker Drive Encryption.
4. Check the status of your system drive.
5. Confirm that it shows BitLocker On.

This confirms that your drive is encrypted and protected from unauthorized access.

Conclusion

Enabling encryption on Windows 11 is an effective way to protect your personal and sensitive data from unauthorized access. Whether you use Device Encryption or BitLocker Drive Encryption, these built-in tools provide strong security for both internal and external storage devices.

By enabling encryption through Windows Settings or the BitLocker control panel, you can ensure that your files remain protected even if your device is lost or stolen. Taking the time to enable encryption is an important step toward improving the overall security of your Windows 11 system.