How to Encrypt or Decrypt a USB Flash Drive in Windows 11

If you store important files on your USB flash drive — whether work documents, personal photos, or sensitive data — encrypting it is one of the best ways to protect your privacy. Windows 11 makes it easy to encrypt your USB drive using BitLocker To Go, a built-in security tool that prevents unauthorized access, even if someone else gets hold of your USB.

In this guide, we’ll walk you through how to encrypt and decrypt a USB flash drive in Windows 11 step by step.

What Does Encrypting a USB Drive Mean?

When you encrypt a USB drive, you’re locking its contents using a digital key. Without the correct password or recovery key, no one can access your files — even if they plug your drive into another computer.

Windows 11 uses BitLocker To Go for this purpose. It’s available on:

Windows 11 Pro
Windows 11 Enterprise
Windows 11 Education

If you’re using Windows 11 Home, you can use a free third-party encryption tool (we’ll mention a few later).

Why Encrypt a USB Flash Drive?

Encryption is especially useful if you:

Carry confidential or financial documents.
Use USB drives for business data transfers.
Want to prevent unauthorized access to personal files.
Frequently travel or share USB drives across multiple systems.

Once encrypted, even if your USB is lost or stolen, the data will remain unreadable without your password.

Step 1: Check if BitLocker Is Available

To use BitLocker To Go, you’ll need Windows 11 Pro or higher.

Press Windows + R, type: winver and press Enter.
In the About Windows dialog, check your Edition.

If it says Windows 11 Pro, Enterprise, or Education, you’re good to go.
If it says Home, skip to Step 8.

Step 2: Plug In Your USB Flash Drive

Insert your USB drive into an available USB port. Wait for Windows to recognize it — you should see it under This PC in File Explorer.

Tip: Make sure to back up your files before encrypting, just in case.

Step 3: Open BitLocker Drive Encryption

There are two easy ways to open the BitLocker settings:

Option 1: Through File Explorer

Right-click your USB drive → select Show more options → Turn on BitLocker.

Option 2: Through Control Panel

Press Windows + S, type Control Panel, and open it.
Go to System and Security → BitLocker Drive Encryption.
Find your USB drive under Removable data drives and click Turn on BitLocker.

Step 4: Choose How to Unlock the Drive

You’ll now be prompted to select a method for unlocking the drive.

You can unlock the drive by:

Using a password, or
Using a smart card (for business environments).

Most users should choose Use a password to unlock the drive.

Enter a strong password (use letters, numbers, and symbols).
Re-enter the password to confirm.
Click Next.

Step 5: Save Your Recovery Key

This key allows you to unlock the drive if you forget your password. Windows gives you several options to save it:

Save to your Microsoft account.
Save to a file on your PC.
Print the recovery key.

Important: Do not store the recovery key on the same USB drive you’re encrypting.

Once saved safely, click Next.

Step 6: Choose How Much of the Drive to Encrypt

You’ll have two options:

Encrypt used disk space only (faster) — Best for new USB drives or empty drives.
Encrypt entire drive (slower) — Best if the drive already contains files.

Select your preferred option and click Next.

Step 7: Start Encrypting Your USB Drive

Choose Compatible mode (for drives that might be used on older Windows versions).
Click Start Encrypting.

The process may take a few minutes depending on your drive size and speed. You can continue using your computer while encryption runs in the background.

When complete, your USB flash drive is now fully encrypted with BitLocker.

Each time you plug it into a PC, Windows will ask for your password before allowing access.

Step 8: Alternative Tools for Windows 11 Home Users

If you’re using Windows 11 Home, BitLocker To Go isn’t available — but you can use free third-party encryption tools instead.

Recommended Free Alternatives:

VeraCrypt – Open-source and supports full USB encryption.
DiskCryptor – Lightweight tool for encrypting removable drives.
AES Crypt – Simple encryption for individual files on USB drives.

Tip: VeraCrypt is the most secure and trusted option. It works similarly to BitLocker but requires you to mount the encrypted drive using a password each time.

Step 9: How to Decrypt (Turn Off Encryption)

If you no longer want your USB encrypted, you can easily decrypt it.

Insert your USB drive and unlock it using your password.
Open Control Panel → System and Security → BitLocker Drive Encryption.
Find your USB drive and click Turn Off BitLocker.
Confirm by clicking Decrypt Drive.

Decryption will take a few minutes, and once completed, your USB drive will return to normal with no password requirement.

Step 10: Manage Your BitLocker Settings

If you want to change your password or back up your recovery key later:

Go to Control Panel → System and Security → BitLocker Drive Encryption.
Under your USB drive, you’ll find options to:
- Change password
- Back up recovery key
- Turn off BitLocker

This gives you full control over your USB drive’s security.

Step 11: What Happens If You Forget Your Password

If you forget your password, don’t panic — use the recovery key you saved earlier.

Plug in your USB drive.
On the unlock screen, click More options → Enter recovery key.
Type your 48-digit recovery key to unlock the drive.

You can then reset the password or decrypt the drive from the BitLocker settings.

Wrapping Up

Encrypting your USB flash drive on Windows 11 is a simple and effective way to keep your files secure.

To recap:

BitLocker To Go lets you encrypt your USB drive easily (Windows 11 Pro and higher).
Use a strong password and store your recovery key safely.
Windows 11 Home users can use VeraCrypt or similar third-party tools.

Once encrypted, your USB drive will be safe from unauthorized access — giving you peace of mind whether you’re carrying it to work, school, or on the go.