How to Enable BitLocker Encryption on Windows 11

🛡️ How to Enable BitLocker Encryption on Windows 11
Protect the data on your NEO device by enabling BitLocker drive encryption — so your files stay safe even if your device is lost or stolen.
📋 Before You Begin
  • Your device must be running Windows 11 Pro, Enterprise, or Education. Windows 11 Home uses Device Encryption instead — see the note below.
  • You must be signed in with an account that has administrator privileges.
  • Your device should have a TPM (Trusted Platform Module) chip — most NEO-issued devices do.
  • Make sure your device is plugged in or has sufficient battery before starting.
  • Back up your data before enabling encryption as a precaution.

🔐 Enable BitLocker on Your Drive ⏱ ~5 minutes

Follow these steps to turn on BitLocker encryption for your primary drive (C:).

  1. Click the Start button and open Settings, or press Windows + I.
  2. In the left sidebar, click Privacy & security.
  3. Click BitLocker Drive Encryption.
  4. Under Operating system drive, click Turn on BitLocker next to your C: drive.
  5. Windows will check that your device meets the requirements. If a warning appears about TPM, contact the IT Help Desk.
  6. On the How do you want to back up your recovery key? screen, choose one of the following:
    • Save to your Microsoft account — recommended if you use a Microsoft account to sign in
    • Save to a USB flash drive — store on a separate USB drive and keep it secure
    • Save to a file — save to a location other than the C: drive (e.g., a network share)
    • Print the recovery key — print and store in a secure location
  7. Choose how much of your drive to encrypt:
    • Encrypt used disk space only — faster, recommended for new devices
    • Encrypt entire drive — more thorough, recommended for devices already in use
  8. Select the encryption mode:
    • New encryption mode (XTS-AES) — recommended for fixed drives on this device
    • Compatible mode — use only if the drive may be moved to older Windows devices
  9. Check the box labeled Run BitLocker system check, then click Continue.
  10. Click Restart now. Windows will restart and encryption will begin in the background.
💡 Tip: Encryption runs in the background and may take anywhere from a few minutes to several hours depending on drive size. You can continue using your computer during this time.

🗝️ Save Your Recovery Key ⏱ ~2 minutes

Your BitLocker recovery key is a 48-digit code used to unlock your drive if you forget your PIN, replace your motherboard, or encounter a boot issue. Never lose this key.

  1. If you did not save the key during setup, open Settings > Privacy & security > BitLocker Drive Encryption.
  2. Click Back up your recovery key next to your C: drive.
  3. Choose a backup method — saving to your Microsoft account is the easiest to retrieve later.
  4. Store a printed or written copy in a secure, off-device location (such as a locked drawer or with your IT department).
⚠️ Warning: Without your recovery key, you cannot access your encrypted drive if BitLocker locks you out. IT cannot recover a lost key on your behalf — keep it safe.

✅ Check BitLocker Status ⏱ ~1 minute

You can verify whether BitLocker is active on your drive at any time.

Method A – Settings

  1. Open Settings > Privacy & security > BitLocker Drive Encryption.
  2. Your C: drive will show either BitLocker on or BitLocker off.

Method B – File Explorer

  1. Open File Explorer and click This PC.
  2. If BitLocker is enabled, your C: drive will show a padlock icon on the drive.
💡 Tip: You can also check status quickly by searching Manage BitLocker in the Start menu search bar.

🏠 Windows 11 Home – Device Encryption ⏱ ~2 minutes

Windows 11 Home does not include BitLocker, but offers a simplified version called Device Encryption that works the same way for most users.

  1. Open Settings and click Privacy & security.
  2. Click Device encryption.
  3. If the toggle shows Off, click it to turn On.
  4. Windows will begin encrypting your device in the background.
⚠️ Note: If Device Encryption does not appear in Settings on your Home edition device, your hardware may not support it. Contact the IT Help Desk for guidance on alternative data protection options.

🙋 Still Need Help?

If you need assistance enabling BitLocker, retrieving your recovery key, or have questions about encryption on your NEO device, the IT Help Desk is here to help.

📞 Phone: (918) 540-6099
📧 Email: neosuport@neo.edu
🚶 Walk-in: IT Department, Library Administration, 2nd Floor, Room 216
🕐 Hours: Monday – Friday, 8:00 AM – 5:00 PM
Print Article