How to Enable Device Encryption in Windows 11
Device Encryption scrambles the files on your Windows 11 PC so your personal data stays safe if someone steals the hardware. It works like a digital lock. Your readable documents are turned into scrambled code that nobody can open without your sign-in details or your recovery key.
Most modern Windows 11 computers support this feature, including the Home edition. Many new PCs turn it on automatically when you sign in with a Microsoft account. Open the Settings app to check whether your computer supports it, then turn it on to protect your files. The feature relies on hardware support such as a TPM chip, so older or unusual machines may not offer it.
To enable device encryption in Windows 11, press Win+I to open Settings , go to Privacy & security, select Device encryption, and switch it on. Approve the User Account Control prompt with Yes. You need an administrator account, and keep the PC plugged in and powered on until encryption finishes.
Turning On Device Encryption
To enable device encryption, open Settings by pressing the Win+I, go to Privacy & security, and select Device encryption. This scrambles your personal files so they stay safe from anyone who lacks your login details. You need to be signed in with an administrator account. Windows usually also wants you signed in with a Microsoft account (or a work or school account), because that is where it stores your recovery key.
Open Settings . Press the Win and the I key on your keyboard together. The Settings app opens.
Go to Privacy & security. In the Settings window, click Privacy & security in the left sidebar. The path is Settings Privacy & security On the right side, click Device encryption. You should now see a page with a single switch labelled Device encryption.
💡TipIf you don’t see “Device encryption” under Privacy & security, your computer probably doesn’t support it.The usual reasons are a missing TPM or hardware that doesn’t meet the requirements. If you have Windows Pro, Enterprise, or Education, you can use standard BitLocker instead.
Turn on Device Encryption. Click the switch to turn it on. You might see a User Account Control (UAC) prompt asking for permission. Click Yes to continue. (Requires Administrator privileges.) If the switch is already on, your PC is already encrypted and there is nothing more to do here. If the page asks you to sign in with a Microsoft account first, do that and come back.
Device encryption starts scrambling your drive's data once you start the process. You will likely see a message like "Encryption is in progress." How long it takes depends on how much data you have and how fast your computer is. Do not turn off your computer while this runs. Let it finish completely.
⚠️WarningDo not shut down or restart your computer while encryption is happening.This could cause problems. If you are using a laptop, make sure it is plugged in.
Close Settings. Once encryption is done, close the Settings window. Your computer is now encrypted. You can reopen the same page at any time to check that the switch is still on.
Back up your BitLocker recovery key. Windows creates this key for your encrypted drive, and you must keep a copy somewhere safe. If your computer has a problem and won't start, or if you need to reach your drive from another device, this key lets you get your data back. Windows may also ask for it after a hardware change or a firmware (BIOS) update. You can back up the key when you first turn on encryption, or find it later in the BitLocker settings. Save it to a USB drive or a cloud storage service, or print it and keep the paper somewhere secure. Don't store it only on the encrypted PC itself, because you won't be able to read it if the PC won't start.
Tip: To find your recovery key later, go to Settings Privacy & security Device encryption. Look for an option to "Back up your recovery key." If you don't see it, search for "BitLocker" in the Windows search bar and select "Manage BitLocker." If you signed in with a Microsoft account, a copy of the key is usually stored with that account online as well.
Turning Off Device Encryption
To switch device encryption off, press the Windows key + I to open Settings, select Privacy & security, and click Device encryption. Turning it off removes the data scrambling from your drive and decrypts your files. Only do this if you have a good reason, because once the drive is decrypted, anyone who gets hold of the PC can read your files.
Open Settings. Press the Windows key + I on your keyboard to open the Settings app.
Go to Privacy & security. In the Settings window, click Privacy & security in the left menu. The path is Settings Privacy & security On the right side, select Device encryption. You should see the Device encryption switch set to On.
Tip: If the Device encryption option is greyed out or missing, make sure you are signed in as an administrator. If you still can't reach it, your computer might not have had Device Encryption turned on, or it's not supported.
Turn off Device Encryption. Click the switch to turn it off. You will likely see a User Account Control (UAC) prompt asking for confirmation. Click Yes. (Requires Administrator privileges.)
Windows asks you to confirm. A dialog box appears asking if you are sure you want to turn off Device Encryption. Click the Turn off button in the dialog box.
Decryption begins, and Windows unscrambles your drive's data. A message stating "Decryption is in progress" appears. This can take a long time, depending on your drive size and the amount of data. Do not turn off your computer during decryption. Let it finish completely.
Warning: Stopping the decryption process can cause data loss or make your drive unusable. If you are using a laptop, make sure it is plugged into a power source.
Close Settings. Once decryption is complete, close the Settings app. Your computer's drive is no longer encrypted by this feature. To protect it again later, return to the same page and turn the switch back on.
Summary
Device Encryption in Windows 11 is a security feature that scrambles your data to protect it. You can turn it on or off in the Settings app, under Privacy & security. Both enabling and disabling it require administrator privileges and take time to complete, so keep the PC powered on until the process finishes. Whatever you decide, keep your recovery key backed up in a safe place.
Have a question about this guide?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!