How to Turn On or Off Device Encryption in Windows 10  

Page 1 of 2 12 LastLast
    How to Turn On or Off Device Encryption in Windows 10

    How to Turn On or Off Device Encryption in Windows 10

    Published by Category: Security System
    07 Dec 2021
    Designer Media Ltd

    How to Turn On or Off Device Encryption in Windows 10


    Device encryption (aka: BitLocker automatic device encryption) helps protect your data, and it's available on a wide range of Windows devices. If you turn on device encryption, the data on your device can only be accessed by people who've been authorized. If device encryption isn't available on your device, you may be able to turn on standard BitLocker encryption instead.

    Device encryption is available on supported devices (ex: tablet or 2-in-1 laptop) running any Windows 10 edition. If you want to use standard BitLocker encryption instead, it is only available on supported devices running Windows 10 Pro, Enterprise, or Education. Some devices have both types of encryption. BitLocker is not available on Windows 10 Home edition.

    Device encryption requirements:

    See also:

    This tutorial will show you how to turn on or off device encryption in Windows 10.

    You must be signed in as an administrator to turn on or off device encryption



    Contents




    EXAMPLE: Device encryption turned on:
    How to Turn On or Off Device Encryption in Windows 10-device_encryption_this_pc.jpg How to Turn On or Off Device Encryption in Windows 10-manage_bitlocker.jpg






    OPTION ONE

    Turn On Device Encryption in Windows 10


    This is the default setting.


    1 Device encryption uses XTS-AES 128-bit BitLocker encryption method and cipher strength by default in Windows 10. If you would like to use a stronger XTS-AES 256-bit BitLocker encryption method and cipher strength, then you will need to change the BitLocker encryption method and cipher strength before turning on device encryption.

    If device encryption is already turned on, then you would need to turn off device encryption, change the BitLocker encryption method and cipher strength, and then turn on device encryption.


    2 Open Settings, and click/tap on the Update & Security icon.

    3 Click/tap on Device encryption on the left side, and click/tap on the Turn on button on the right side. (see screenshot below)

    If you do not have a Device encryption settings page, then your PC doesn't support device encryption.

    How to Turn On or Off Device Encryption in Windows 10-turn_on_device_encryption-1.jpg

    4 Device encryption is now turned on. Any new files are encrypted automatically, and this will finish encrypting your older files when your device isn't being used. (see screenshot below)

    This may take a while to finish, but you can keep using your device.

    If you like, you can check the status of device encryption as wanted to see its current percentage encrypted.

    How to Turn On or Off Device Encryption in Windows 10-turn_on_device_encryption-2.jpg

    5 When finished, you can close Settings if you like.

    6 It is highly recommended that you now backup the BitLocker recovery key used for Device Encryption. You will need to know this BitLocker recover key if you should ever be prompted for it to gain access to your Windows drive.






    OPTION TWO

    Turn Off Device Encryption in Windows 10


    1 Open Settings, and click/tap on the Update & Security icon.

    2 Click/tap on Device encryption on the left side, and click/tap on the Turn off button on the right side. (see screenshot below)

    If you do not have a Device encryption settings page, then your PC doesn't support device encryption.

    How to Turn On or Off Device Encryption in Windows 10-turn_off_device_encryption-1.jpg

    3 Click/tap on Turn off to confirm. (see screenshot below)

    How to Turn On or Off Device Encryption in Windows 10-turn_off_device_encryption-2.jpg

    4 Your device will now start decrypting. This may take a while to finish, but you can keep using your device.

    Do not turn off your PC until decrypting has finished.

    If you like, you can check the status of device decryption as wanted to see its current percentage decrypted.

    How to Turn On or Off Device Encryption in Windows 10-turn_off_device_encryption-3.jpg

    5 When finished, you can close Settings if you like.


    That's it,
    Shawn Brink


    Related Tutorials



  1. Windows 11 Tutorials



  2. FreeBooter
    Posts : 5,467
    Windows 11 Pro 64-bit
       New #1

    @Brink

    Option Two: labeled as.
    Turn On Device Encryption in Windows 10
      My Computer
    Quote Quote

  4. Brink
    Posts : 70,694
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #2

    Oops. Not anymore.
      My Computers
    Quote Quote

  5. Probe
    Posts : 115
    Windows 10 64bit
       New #3

    I just noticed this is ON, on my new HP Horizon Blue Pavilion laptop. It must be on by default because I never turned it on. Is this really necessessary? I dont plan on leaving this anywhere. Besides, once the get thru the correct password to the machine, its all available to someone. So what is this protecting?
      My Computer
    Quote Quote

  6. Brink
    Posts : 70,694
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #4

    Probe said:
    I just noticed this is ON, on my new HP Horizon Blue Pavilion laptop. It must be on by default because I never turned it on. Is this really necessessary? I dont plan on leaving this anywhere. Besides, once the get thru the correct password to the machine, its all available to someone. So what is this protecting?
    Hello Probe,

    Correct. Device Encryption is turned on by default on devices (ex: "2 in 1") that support modern standby.

    Device Encryption provides the same security at BitLocker to prevent access to data on the drive (even if connected to another computer) unless you are able to sign in to unlock it.
      My Computers
    Quote Quote

  7. Probe
    Posts : 115
    Windows 10 64bit
       New #5

    Happy belated Turkey Day Brink,

    I'm just confused as to what is encrypted? If a bad actor enters my 4 digit pin correctly at the lock screen, my entire computer is usable and viewable.
      My Computer
    Quote Quote

  8. Brink
    Posts : 70,694
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #6

    Probe said:
    Happy belated Turkey Day Brink,

    I'm just confused as to what is encrypted? If a bad actor enters my 4 digit pin correctly at the lock screen, my entire computer is usable and viewable.
    The link below at Wikipedia can give you more details about what encryption is to help.

    Encryption - Wikipedia

    Correct. If someone is able to sign in to your computer, then they would of course have full access.

    If someone is not able to sign in to your computer, then data on the encrypted drive would look like a garbled unreadable mess. They wouldn't be able to simply bypass the encryption.
      My Computers
    Quote Quote

  9. Probe
    Posts : 115
    Windows 10 64bit
       New #7

    Okay, thanks. So if someone removes the SSD say, they couldn't get into it.
      My Computer
    Quote Quote

  10. Brink
    Posts : 70,694
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #8

    Probe said:
    Okay, thanks. So if someone removes the SSD say, they couldn't get into it.
    Not very easily if encrypted.
      My Computers
    Quote Quote

  12. hdmi
    Posts : 1,205
    11 Home
       New #9

    Out of the box, my Medion Akoya S15450 laptop, that came with Windows 10 Home 2004 preinstalled, asked me this (slightly cryptic) question: "Do you want to use BitLocker?" so, because this question can be a part of the normal OOBE and because it uses the term BitLocker without mentioning anything whatsoever about "device encryption", maybe you should update this tutorial to avoid any possible confusion. That is, to make the proper distinction between standard BitLocker and what appears to be officially called "BitLocker drive encryption" and "BitLocker automatic device encryption".
    https://docs.microsoft.com/en-us/win.../oem-bitlocker
      My Computers
    Quote Quote

 

Tutorial Categories

How to Turn On or Off Device Encryption in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
How to Check if Device Encryption is Supported in Windows 10 Device encryption helps protect your data, and it's available on a wide range of Windows devices. If you turn on device encryption, the data on your device can only be accessed by...
Device Encryption for Dell windows 10
in AntiVirus, Firewalls and System Security

Device Encryption for Dell windows 10 I tried to update my BIOS as suggested by Dell but it kept failing. Here is their reply: We received a support assist request reporting that your computer is unable to update the latest version of System...
How to Turn On or Off Device Encryption for your Windows 10 Mobile Phone Device encryption helps protect your files and folder on your Windows 10 Mobile phone from unauthorized access in case your phone is lost or stolen. This tutorial will...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 13:45.
Find Us




Windows 10 Forums