As technology advances, users must take effective security measures to keep themselves safe from threats and malicious actors taking advantage of every vulnerability they find. This means that, in addition to securing the system with anti-virus programs, users must know how to keep their local files safe and secure.
Thankfully, Microsoft has addressed the great need of users in protecting sensitive data, by providing them with a built-in option to encrypt the hard drive. In this article, Quantrimang.com will discuss two methods of enabling device encryption on Windows 11 PCs so you can better secure your system.
You have two ways to encrypt your hard drive on Windows 11: through Device Encryption or BitLocker. Both are security features that help users protect their sensitive information. Device Encryption uses one or more mathematical techniques to protect your data, while BitLocker encryption uses 128-bit XTS-AES encryption to secure files.
A. Using Device Encryption
Unfortunately, only some Windows 11 devices support the Device Encryption feature because it requires a device that supports Modern Standby. If you want to know if your computer can use Device Encryption, follow the steps below:
1. Open Windows Search by pressing and holding the Windows Keys + S. In the search bar, enter system information and click Run as Administrator..
2. Then, scroll to the bottom of the System Summary window and find Device Encryption Support. If the value says Meets prerequisites, then you can use device encryption on your PC. If you don't see this message, go to the next method to encrypt the hard drive.
How to enable Device Encryption on Windows 11
1. Open Settings by pressing and holding Windows Keys + I.
2. Then, go to the Privacy & Security option in the left navigation.
3. Under Privacy & Security, click Device Encryption. If you don't see this option on your settings, the feature isn't available on your device.
4. When you are on the Device Encryption page, turn on the switch for the Device Encryption option.
5. Once enabled, wait a few seconds for the encryption to finish.
6. Close the Settings. Your Windows 11 hard drive is now encrypted.
How to turn off Device Encryption on Windows 11
1. Click the Start menu and click the Settings application. You can also open Settings by pressing and holding Windows keys + I.
2. Next, click Privacy & Security in the left menu.
3. On Privacy & Security, select Device encryption.
4. Then, turn off the switch found to the right of the Device encryption option.
5. When the pop-up screen appears, select Turn off to confirm your action.
6. Next, wait for the decryption process to finish. It may take a while, depending on your device.
7. Finally, close Settings.
B. Using BitLocker
If your Windows 11 device doesn't have the Device Encryption feature, you can use BitLocker instead. BitLocker is also available in most Windows 11 devices, especially those with TPM 2.0. In addition to protecting sensitive information, you can also use it to prevent unauthorized people from accessing your device.
How to enable BitLocker on Windows 11
1. Press and hold Windows Keys + S to open Windows Search. Next, type BitLocker in the Windows Search bar and press the Enter button. This will open the BitLocker Drive Encryption
2. Then, select the drive you want to encrypt.
3. Now, click Turn on BitLocker to start encrypting the hard drive.
4. On the window that appears, you will be asked how you want to unlock the hard drive at startup. The article recommends using the password method because it is more convenient to use. However, you can also choose to open with USB if that's what you prefer.
5. Then, enter twice the password you want to unlock the drive and click Next.
6. In the next window, you will be asked to choose a recovery option in case you forget your password. The best option is to save it to your USB or Microsoft account, so that it can be accessed by another computer in case you forget your BitLocker password and cannot access your PC.
7. Then you need to choose whether you want to encrypt the entire hard drive or just the used parts of it.
8. Next, choose how you want to encrypt the drive. You can choose the first option if you are using a fixed drive. But if you are going to move your hard drive, choose the second option.
9. Finally, tick the option Run BitLocker system check and click Continue.
10. After the encryption process is finished, you will be asked to restart the computer. If you want to check if the encryption is working, click Restart now. Otherwise, click Restart later if you still need to get something done on your device.
How to turn off BitLocker on Windows 11
1. Open Windows Search by pressing and holding the Windows Keys + S. Type BitLocker in the Windows search bar and press Enter.
2. Next, select the drive you want to decrypt and click Turn off BitLocker.
3. Then confirm your action by clicking Turn off BitLocker again on the pop-up window.
4. Wait for the decryption process to finish before shutting down or restarting the computer.
C. Using Group Policy Editor
If after enabling BitLocker on your device and you find it is not available for your Windows 11 device, this means that your computer does not have TPM 2.0 available. But don't be discouraged. You can still enable BitLocker even if you don't have a compatible TPM using the Group Policy Editor. Here's how to do it:
1. Open Run by pressing and holding Windows Keys + R . Then type gpedit.msc and press Enter to open Group Policy Editor.
2. In the Group Policy Editor, follow the path Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives found in the left navigation.
3. Next, double-click the Require additional authentication at startup key found on the right-side window. This will open a new window.
4. On the new window, make sure to select the Enabled option in the top left corner of the window, then select the option Allow BitLocker without compatible TPM (requires a password or a startup key on a USB flash drive) and click Click Apply > OK. .
4. Now, BitLocker is enabled on your device. Follow the steps above to enable this feature on Windows 11.
Hard drive encryption keeps all your sensitive data safe and secure. At the same time, it adds another layer of protection against threats and malicious actors. However, you need to be careful when enabling this feature because if you are not careful in managing your passwords or keys, you will lose access to your precious data.
No comments:
Post a Comment