How to Enable BitLocker with PIN and USB Key in Windows 11
This guide explains how to add extra security to your computer. You can require a PIN and a USB key to unlock your drive when you turn on your PC. This adds a strong layer of protection for your files.
Why do this? If someone steals your computer, they cannot access your data without both your physical USB drive and your secret PIN.
What happens when done? Your computer will stay locked at startup. You must plug in your USB drive and type your PIN before Windows will start.
BitLocker helps keep your data safe. It makes sure only you can see your files. BitLocker even checks that no one has tampered with your computer settings.
Most modern computers use a TPM chip to unlock automatically. Adding a PIN and USB key makes it much harder for others to get in.
Before you start, make sure BitLocker is already turned on for your drive. If it is not, see this guide: How to turn on or off Bitlocker in Windows 11
Enable a PIN to unlock BitLocker
Note: These steps require admin privileges.
Open the Control Panel and go to the BitLocker Drive Encryption page. You can find this by navigating to Control Panel\System and Security\BitLocker Drive Encryption.
Click the link that says, “Change how drive is unlocked at startup.”
Select the option that says, “Enter a PIN (recommended).”
Type in a PIN that is 6 to 20 numbers long. Confirm it and click “Set PIN.”
Close the Control Panel when you are finished.
Unlock with a USB drive at startup
Note: These steps require admin privileges.
Go back to the Control Panel and open the BitLocker Drive Encryption section again.
Click the link, “Change how drive is unlocked at startup.”
Click the option that says, “Insert a USB flash drive.”
Plug in your USB drive and click “Save.”
If you ever need to turn these settings off, you can read this guide: How to set up BitLocker to automatically unlock PC at startup via TPM in Windows 11
Summary
You have now added two extra locks to your computer. To start your PC, you must now have your specific USB drive plugged in and know your secret PIN. This makes your computer much safer from unauthorized access. Always keep your USB key in a safe place.
Was this guide helpful?
[…] you have set up BitLocker to require users to insert a USB drive that contains a startup key and a PIN at sta… before the computer starts, the steps below show you how to revert to the default […]
[…] users can add additional security by requiring a USB flash drive and a PIN to unlock BitLocker at […]