How to Encrypt USB Drives in Windows 11 with BitLocker

Step 1Get Your Drive Ready

Backing up your important files before you encrypt USB drives Windows 11 ensures your data stays safe if the setup process runs into any problems. Plug your removable drive into your computer and copy any crucial files to your main hard drive as a precaution before you start the BitLocker setup.

Step 2Find and Turn On BitLocker

Opening File Explorer 📁 and accessing your connected drives lets you start the protection process for removable storage. Open File Explorer by pressing the Win+E on your keyboard, click This PC in the left sidebar, right-click your removable drive, and select Turn on BitLocker to launch the setup wizard.

• Open File Explorer 📁. You can press the Win+E on your keyboard, or click the folder icon on your taskbar 🖥️.
• In File Explorer 📁, click on “This PC” in the left sidebar. This shows all drives connected to your computer.
• Find the USB drive or external hard drive you want to encrypt.
• Right-click on 🖱️ the drive.
• A menu will appear. You might need to click “Show more options” if you don’t see BitLocker right away. This is common in newer Windows 11 setups.
• Click “Turn on BitLocker.”

BitLocker works with most common formats like NTFS, FAT16, FAT32, and exFAT.

Step 3Choose How to Unlock Your Drive

Choosing a strong password ensures you must enter it every time you plug your protected drive into a computer. Select the password option in the setup menu and type a combination that is at least 8 characters long to secure your removable storage against unauthorized access.

• Use a password: This is the most common way. You will create a password that you need to enter every time you plug this drive into a computer and want to access your files. Make sure it's a strong password – at least 8 characters long, with a mix of letters, numbers, and symbols.
• Use a smart card: If your workplace uses smart cards for security, you might see this option. You will need to insert your smart card and enter its PIN to unlock the drive.

For most personal users, using a password is the best choice. Type your password into the box and click "Next."

If you forget your BitLocker password, you cannot recover your files. Write down your BitLocker password and store it in a very safe place, or use one of the backup methods described in the next step.

Step 4Back Up Your Recovery Key – This is Crucial!

Saving your BitLocker recovery key to your Microsoft account or printing it out gives you a way to unlock your drive if you forget your password. Windows 11 requires you to back up this long number sequence in at least one safe place before you can finish the encryption setup.

You will see options for backing up this key. Choose at least one, and ideally more than one, for maximum safety:

• Save to your Microsoft account: If you are signed into Windows 11 with a Microsoft account, this is a very easy option. Your recovery key will be uploaded securely to your Microsoft account online. You can access it by going to account.microsoft.com/devices/recoverykey from any web browser.
• Save to a file: This lets you save the recovery key as a text file (.txt) on your computer's hard drive or another storage device. Do NOT save it to the drive you are currently encrypting. You will be asked to choose a location for this file. Save it somewhere safe and easy to remember.
• Print the recovery key: This option sends the recovery key to your printer. You will get a paper copy that you should store in a very secure physical location, like a safe or a locked filing cabinet.

After choosing how to back up your recovery key, click "Next."

Losing your recovery key means losing access to your encrypted data forever. Saving it to your Microsoft account is often the safest option for most people.

Step 5Choose How Much to Encrypt

Selecting whether to encrypt used disk space only or the entire drive decides how thorough your storage protection will be. Choosing the used space option is faster and covers only existing files, while protecting the entire drive secures every single sector, including empty space.

• Encrypt used disk space only: This is faster and only encrypts the space on the drive that currently has data. It's a good option if the drive is new or you have already deleted most of the old data.
• Encrypt entire drive: This encrypts every bit of space on the drive, whether it's used or not. This is the more secure option, especially if the drive has held sensitive data in the past that you have deleted. It takes longer, but it is recommended for the best protection.

For the best security, select "Encrypt entire drive" and click "Next."

Step 6Select the Encryption Mode

Choosing the new encryption mode XTS-AES provides stronger security for modern Windows computers, while compatible mode works best for older machines. Pick the mode that matches the type of devices you plan to plug your encrypted USB drive into most often.

• New encryption mode (XTS-AES): This is the modern, stronger encryption method. It is best if you plan to use this drive only with Windows 10 or Windows 11 computers.
• Compatible mode (AES-CBC): This is an older encryption method that ensures your drive can still be read on older versions of Windows (like Windows 7 or 8) if needed. If you are only using the drive with your current Windows 11 PC, the "New encryption mode" is better.

Choose the mode that best fits how you will use the drive and click "Next."

Note: You might not see this option if you've previously adjusted advanced settings (most users don't). In that case, BitLocker will automatically select the encryption method.

Step 7Start the Encryption Process

Reviewing your settings and clicking the start encrypting button begins the process of locking down your removable storage. A progress bar appears on your screen to show the encryption status and estimated time remaining while you continue using your computer normally.

A progress bar appears to show the encryption status and estimated time remaining. This process can take between a few minutes to several hours, depending on your drive's size and the amount of data stored on it.

Tip: You can continue using your computer for other tasks while BitLocker encrypts your drive in the background. However, it is best not to remove the drive or shut down your PC until the process is complete.

Step 8Encryption Complete!

Seeing the confirmation message in Windows 11 means your USB drive is fully protected by BitLocker and ready for safe use. The next time you plug the drive into a computer, Windows will ask for your password and display a padlock icon next to the drive in File Explorer.

Your USB drive or external hard drive is now encrypted with BitLocker. The next time you connect the encrypted drive to any computer, you will enter the password you created to access your files.

You will also see a small padlock icon next to the drive in File Explorer, showing that it is protected by BitLocker.

Summary

Protecting your data on removable storage is easy when you use BitLocker to secure your USB drives with a password and a saved recovery key. Following these steps keeps your personal files safe and private whenever you travel with external hard drives.