How to Turn On BitLocker in Windows 11 Pro and Find Your Recovery Key
Share
BitLocker encrypts your drive so that nobody can read your files if your PC is lost or stolen. Windows 11 Pro includes full BitLocker Drive Encryption with management tools. This guide shows how to turn it on, back up your recovery key, find a lost key and fix common problems.
The Short Answer
- Search for Manage BitLocker in the Start menu and open it.
- Select Turn on BitLocker next to your Windows drive (C:).
- Back up your recovery key, choose the encryption options and restart.
BitLocker on Pro vs Home
Windows 11 Pro includes BitLocker Drive Encryption, with the control panel and management tools. Windows 11 Home offers a simpler device encryption feature on supported hardware, but without the full BitLocker controls. On many newer PCs, encryption may already be switched on, so check before you start. If you are on Home and want the full feature, see how to upgrade Windows 11 Home to Pro.
Before You Start
- Sign in as an administrator.
- Back up important files first.
- Most Windows 11 PCs have a TPM 2.0 chip, which BitLocker uses to store keys. Without a TPM, BitLocker can be set up with a password or USB key through Group Policy.
- Keep your PC plugged in during the first encryption.
How to Turn On BitLocker
- Open the Start menu, type Manage BitLocker and open it.
- Next to Operating system drive (C:), select Turn on BitLocker.
- Choose how to back up your recovery key: save it to your Microsoft account, save it to a file or print it. Do not save it only on the drive you are encrypting.
- Choose how much of the drive to encrypt. Used space only is faster and suits a new PC. Entire drive suits a PC that has been used for a while.
- Choose the encryption mode. New encryption mode suits fixed drives such as C:, and Compatible mode suits drives you may move to older PCs.
- Select Start encrypting and restart if asked. You can keep using your PC while it encrypts.
How to Find Your BitLocker Recovery Key
If Windows asks for a recovery key, note the key ID on the blue screen, then look for the matching key in one of these places:
- Your Microsoft account: sign in at aka.ms/myrecoverykey on another device.
- A file or printout you saved when you turned BitLocker on.
- Your work or school account or your IT department, if the PC is managed.
Without the recovery key, data on an encrypted drive may be unrecoverable, so store it somewhere safe.
Avoid Surprise Recovery Prompts
Changing the BIOS or firmware, or replacing hardware, can cause Windows to ask for the recovery key. Before you do either, open Manage BitLocker and choose Suspend protection, then resume it afterwards.
How to Turn Off BitLocker
- Open Manage BitLocker.
- Select Turn off BitLocker for the drive.
- Confirm. Windows decrypts the drive in the background, which can take a while.
Troubleshooting
"Manage BitLocker" is missing
You are probably on Windows 11 Home. Check Settings > System > About for your edition.
"This device can't use a Trusted Platform Module"
Your PC may not have an available TPM. Check that TPM is enabled in the BIOS, or set BitLocker to use a password or USB key through Group Policy. Our guide to the Group Policy Editor explains how to open it.
Windows keeps asking for the recovery key
Find the key, sign in, and then suspend and resume protection so Windows re-seals the encryption keys.
Frequently Asked Questions
Does BitLocker slow down my PC?
On modern hardware the effect is usually small, but results vary by PC.
Does BitLocker need a Microsoft account?
No. You can save the recovery key to a file or print it, but a Microsoft account makes the key easy to retrieve.
Is BitLocker included in Windows 11 Pro?
Yes. Full BitLocker Drive Encryption is a Pro feature.
Need Windows 11 Pro? Browse our Windows 11 license keys, or get the Windows 11 Home to Pro Upgrade Key if you already run Home. See Windows 11 Home vs Pro to compare editions.
Menu names can vary slightly between Windows 11 versions. Check Microsoft's current instructions if your screen looks different.