How to Lock a BitLocker Drive in Windows 11
BitLocker is a built-in Windows 11 tool that encrypts your files to keep them safe from anyone who gains physical access to your PC or USB drive. It scrambles all data on a drive so it looks like total gibberish without the right password or recovery key.
Your main system drive usually unlocks on its own when you turn on your computer. However, you can also lock removable USB drives and extra data drives by hand whenever you want maximum privacy.
One edition note: you can turn on BitLocker in Windows 11 Pro, Enterprise and Education. Windows 11 Home offers a simpler feature called device encryption on supported hardware, and it does not give you the full set of BitLocker controls. The steps below assume the drive is already encrypted with BitLocker.
Open Windows Terminal as administrator, switch to PowerShell, then run Lock-BitLocker -MountPoint “D:” -ForceDismount, replacing D with your drive letter. The drive locks immediately and shows a padlock icon in File Explorer .
Why Lock a BitLocker Drive?
Locking a BitLocker drive protects your files if someone takes your PC or removable storage without permission. The drive hides all contents until you enter the correct password or recovery key.
Removable drives lock themselves when you unplug them. Manual locking is useful when the drive stays connected, for example when you step away from a shared desk or want to lock a data drive without restarting the PC.
How to Lock a BitLocker Drive in 🪟 Windows 11
Here’s how to lock a BitLocker drive. Before you start, close any files or programs that are using the drive. Windows will not lock a drive that is still in use.
Step 1Open Windows Terminal as an Administrator
- Click the Start button (or press the Windows key). The Start menu opens with the search box ready.
- Type Windows Terminal. It should appear at the top of the search results.
- Right-click Windows Terminal in the search results and choose Run as administrator. ⚠️ Admin privileges required If a User Account Control prompt appears, click Yes. A Terminal window opens, and "Administrator" shows in its title bar. If you do not see that word, close the window and try again, because the lock command will fail without elevation.
Step 2Switch to PowerShell Tab
Windows Terminal may open with Command Prompt or PowerShell, depending on your settings. To make sure you are in PowerShell, click the down arrow at the top of the Windows Terminal window, next to the plus (+) tab button, as shown below.
Then select Windows PowerShell from the list. A new tab opens with a PowerShell prompt. If PowerShell is already your default, you can skip this step.
You should now have an elevated PowerShell tab open and waiting for a command. Check that the tab title or prompt shows PowerShell before you continue.
Step 3Lock Your Drive with the Command
Run this command by typing it at the prompt and pressing Enter:
Lock-BitLocker -MountPoint "<drive letter>:" -ForceDismountReplace <drive letter> with the letter of the drive targeted for locking. If you are not sure of the letter, open File Explorer and check This PC. For example, typing this command locks drive D:
Lock-BitLocker -MountPoint "D:" -ForceDismountAfter the command succeeds, the terminal confirms the drive is locked. In File Explorer, the drive now shows a padlock icon, and opening it asks for the password or recovery key. If you get an error saying the drive is in use, close any File Explorer windows or apps that have it open and run the command again.
It locks when the PC shuts down or restarts. Also, if you turned on auto-unlock for a data drive, Windows may unlock it again on this PC without asking for the password.
Alternative Method Using Command Prompt or PowerShell
Command Prompt or PowerShell also handles this task if either utility runs with elevated privileges: ⚠️ Admin privileges required. Open either one the same way as above, with Run as administrator, and enter the command shown below. The command is the same in both.
manage-bde -lock "<drive letter>:" -ForceDismountExample for drive D:
manage-bde -lock "D:" -ForceDismountIf you forgot the password, choose the option to use your recovery key instead. Keep a copy of that key somewhere safe and separate from the PC, such as your Microsoft account or a printout.
Summary
You can lock a BitLocker drive quickly using Command Prompt or PowerShell if you want to secure your files immediately without waiting for Windows to do it automatically. Locking a drive hides its contents and requires a password or recovery key to open it again. This works for external USB drives, internal hard drives, and solid-state drives connected to your computer.
- BitLocker helps keep your computer data safe by locking drives.
- You can lock external USB drives, fixed drives inside your PC, and your main system drive. The system drive only locks when Windows shuts down or restarts, not while you are using it.
- Locking a drive means no one can access it without the right password or key.
- Use Windows Terminal or Command Prompt as an administrator to lock your drives easily. Close anything that is using the drive first.
- For more details on turning on BitLocker, visit this easy guide: How to Turn On BitLocker in Windows 11.
Have a question about this guide?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!