How to Enable Device Encryption in Windows 11
Device Encryption scrambles the files on your Windows 11 PC to keep your personal data safe if someone steals your hardware. This built-in security tool acts like a digital lock, turning your readable documents into scrambled code that nobody can open without your password or recovery key.
Most modern Windows 11 computers support this feature, including the Home edition, and many new PCs turn it on automatically when you sign in with a Microsoft account. Open the Settings app to check if your computer supports the feature, then turn it on to protect your files.
Enable device encryption in Windows 11 by going to Settings Privacy & security Device encryption and toggling it on. This feature requires TPM 2.0 and signing in with a Microsoft account.
Turning On Device Encryption
To enable device encryption on your computer, open Settings by pressing the Win+I, go to Privacy & security, and select Device encryption. This feature scrambles your personal files so they stay safe from anyone who lacks your login details.
Open Settings . Press the Win and the I key on your keyboard together. This opens the Settings app.
Go to Privacy & security. In the Settings window, click on Privacy & security in the left sidebar. Then, on the right side, click on Device encryption.
💡TipIf you don’t see “Device encryption” under Privacy & security, your computer might not support it.You might be able to use standard BitLocker if you have Windows Pro, Enterprise, or Education.
Turn on Device Encryption. You will see a switch for Device encryption. Click it to turn it on. You might see a User Account Control (UAC) prompt asking for permission. Click Yes to continue. (Requires Administrator privileges)
Device encryption scrambles your drive's data after you start the process. You will likely see a message like "Encryption is in progress." Device encryption can take a while, depending on how much data you have and your computer's speed. Do not turn off your computer while device encryption is happening; let device encryption finish completely.
⚠️WarningDo not shut down or restart your computer while encryption is happening.This could cause problems. If you are using a laptop, make sure it is plugged in.
Close Settings. Once encryption is done, you can close the Settings window. Your computer is now encrypted!
Back up your BitLocker Recovery Key. Windows creates this BitLocker recovery key for your encrypted drive. You must save this key in a safe place. If your computer has a problem and won't start, or if you need to access your drive from another device, this key lets you retrieve your data. You can back up this key when you first turn on encryption, or find the key later in BitLocker settings. Save the key to a USB drive, a cloud storage service, or print it and keep it safe.
Tip: To find your recovery key later, go to Settings Privacy & security Device encryption. Look for an option to "Back up your recovery key." If you don't see it, search for "BitLocker" in the Windows search bar and select "Manage BitLocker."
Turning Off Device Encryption
Press the Windows key + I to open Settings, select Privacy & security, and click Device encryption to switch it off. This removes the data scrambling from your hard drive and decrypts your files.
Open Settings. Press the Windows key + I on your keyboard to open the Settings app.
Go to Privacy & security. In the Settings window, click on Privacy & security in the left menu. Then, on the right side, select Device encryption.
Tip: If the Device encryption option is greyed out or missing, make sure you are logged in as an administrator. If you still can't access it, your computer might not have had Device Encryption turned on, or it's not supported.
Turn off Device Encryption. You will see the Device encryption switch. Click it to turn it off. You will likely see a User Account Control (UAC) prompt asking for confirmation. Click Yes. (Requires Administrator privileges)
Turning off Device Encryption requires confirmation. A dialog box will appear asking if you are sure you want to turn off Device Encryption. Click the "Turn off" button in the confirmation dialog box.
Drive decryption finishes when your computer finishes unscrambling your drive's data. A message stating "Decryption is in progress" will appear. This process can take a long time, depending on your drive size and the amount of data. Do not turn off your computer during drive decryption. Let the drive decryption finish completely.
Warning: Stopping the decryption process can cause data loss or make your drive unusable. Make sure your computer is plugged into a power source if it's a laptop.
Close Settings. Once decryption is complete, you can close the Settings app. Your computer's drive is no longer encrypted by this feature.
Summary
Device Encryption in Windows 11 is a security feature that scrambles your data to protect it. You can turn this feature on or off through the Settings app, specifically under Privacy & security. Both enabling and disabling Device Encryption require administrator privileges and take time to complete.
Was this guide helpful?
100% of readers found this helpful (1 votes)
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!