Published by


Brink's Avatar
Administrator

Posts: 25,723

Show Printable Version 


How to Check Status of BitLocker Drive Encryption for Drive in Windows 10

information   Information
You can use BitLocker Drive Encryption to help protect your files on an entire drive. BitLocker can help block hackers from accessing the system files they rely on to discover your password, or from accessing your drive by physically removing it from your PC and installing it in a different one. You can still sign in to Windows and use your files as you normally would.

New files are automatically encrypted when you add them to a drive that uses BitLocker. However, if you copy these files to another drive or a different PC, they're automatically decrypted.

BitLocker can encrypt the drive Windows is installed on (the operating system drive) as well as fixed data drives (such as internal hard drives). You can also use BitLocker To Go to help protect all files stored on a removable data drive (such as an external hard drive or USB flash drive).

This tutorial will show you how to use the manage-bde -status or Get-BitLockerVolume command to check the status of BitLocker Drive Encryption for a drive in Windows 10.

You must be signed in as an administrator to be able to check the status of BitLocker.


CONTENTS:
  • Option One: To Check Status of BitLocker in Command Prompt
  • Option Two: To Check Status of BitLocker in PowerShell







Check BitLocker Drive Encryption Status in Windows 10 OPTION ONE Check BitLocker Drive Encryption Status in Windows 10
To Check Status of BitLocker in Command Prompt

Note   Note
The manage-bde -status command provides the following information about a drive on the PC:
  • Size
  • BitLocker version
  • Conversion status
  • Percentage encrypted
  • Encryption method
  • Protection status
  • Lock status
  • Identification field
  • Automatic Unlock
  • Key protectors


1. Open an elevated command prompt.

2. Type the command below you want to use below in the elevated command prompt, and press Enter. (see screenshots below)

(See status of all drives)
manage-bde -status

OR

(See status for specific drive)
manage-bde -status <drive letter>:

Note   Note
Substitute <drive letter> in the command above with the actual drive letter you want to check the status of.

For example: manage-bde -status C:



Status: BitLocker encryption in progress
Click image for larger version. 

Name:	BitLocker_Status-in_progress.png 
Views:	2614 
Size:	51.0 KB 
ID:	58119



Status: BitLocker turned on (encrypted entire drive)
Click image for larger version. 

Name:	BitLocker_Status-on.png 
Views:	702 
Size:	50.1 KB 
ID:	58121



Status: BitLocker turned on (encrypted used space only)
Click image for larger version. 

Name:	BitLocker_Used_Space_Only.png 
Views:	1244 
Size:	60.6 KB 
ID:	75201



Status: BitLocker turned off (decrypted)
Click image for larger version. 

Name:	BitLocker_Status-off.png 
Views:	490 
Size:	46.3 KB 
ID:	58120






Check BitLocker Drive Encryption Status in Windows 10 OPTION TWO Check BitLocker Drive Encryption Status in Windows 10
To Check Status of BitLocker in PowerShell

Note   Note
The Get-BitLockerVolume command provides the following information about a drive on the PC:
  • VolumeType = Data or Operating System.
  • Mount Point = Drive letter.
  • CapacityGB = Size of drive.
  • VolumeStatus = Whether BitLocker currently protects some, all, or none of the data on the volume.
  • Encryption Percentage = Percent of the volume protected by BitLocker.
  • KeyProtector = Type of key protector or protectors.
  • AutoUnlock Enabled = Whether BitLocker uses automatic unlocking for the volume.
  • Protection Status = Whether BitLocker currently uses a key protector to encrypt the volume encryption key.


1. Open an elevated Powershell.

2. Type the command below you want to use below in the elevated Powershell, and press Enter. (see screenshots below)

(See status of all drives)
Get-BitLockerVolume

OR

(See status for specific drive)
Get-BitLockerVolume -MountPoint "<drive letter>:"

Note   Note
Substitute <drive letter> in the command above with the actual drive letter you want to check the status of.

For example: Get-BitLockerVolume -MountPoint "C:"



Status: BitLocker encryption in progress
Click image for larger version. 

Name:	BitLocker_Status-in-progress_PowerShell.png 
Views:	727 
Size:	21.1 KB 
ID:	58992



Status: BitLocker turned on (encrypted)
Click image for larger version. 

Name:	BitLocker_Status-encrypted_PowerShell.png 
Views:	360 
Size:	20.7 KB 
ID:	58991



Status: BitLocker turned off (decrypted)
Click image for larger version. 

Name:	BitLocker_Status-decrypted_PowerShell.png 
Views:	362 
Size:	20.0 KB 
ID:	58990



That's it,
Shawn