You may not need any external software to encrypt files on your PC. Windows 10 itself has a built-in encryption tool called BitLocker, with which you can encrypt entire drives. We explain how to get started.
BitLocker is only available on computers running Windows 7 Ultimate or Enterprise, Windows 8.1 Pro and Enterprise or Windows 10 Pro. Mind you, Home editions of Windows are not included.
In addition, you must have a storage drive with at least two partitions and a Trusted Platform Module (TPM), a special chip that can perform checks on your hardware, software and firmware. If an unauthorized change is found, your computer will start up in a restricted mode so that malicious parties can do little additional damage.
To make sure that BitLocker can run on your computer, you can run the program itself when you start BitLocker.
Is BitLocker Safe To Use?
Some people don’t like the idea of ​​using BitLocker because they can’t be sure that Microsoft doesn’t provide access to government agencies and the like. BitLocker is not an open source program, so people who know code cannot walk through it to check whether backdoor access is possible.
On the other hand, the program does offer protection against other malicious parties. So if you don’t care if the government could possibly access your disk content, BitLocker is a great solution. If you still worry, try a program like VeraCrypt.
Tip: Before you get started with BitLocker, we recommend a backup your important files to make.
Enable BitLocker
In Windows 10 you can enable Bitlocker by going to the Control panel to go. Then type the text bitlocker in the search bar and press Enter or find the icon Bitlocker Drive Encryption on. Then click on Enable Bitlocker.
The program then checks whether your computer is suitable for BitLocker. If you have a TPM module but it is not turned on, your computer will need to be completely rebooted to enable the module. First remove any USB sticks or external drives from the computer.
Do you get a message during startup that changes have been made to your computer? Then press F10 to confirm the change. When your computer has restarted you will immediately see the BitLocker window. The TPM hardware is now enabled. You can check this in the BitLocker window by checking if there is a check mark next to it.
Select password
Before encrypting your drive, choose one secure password. You must enter this password each time you start your computer before the Windows 10 login screen appears. You can choose to enter the password manually or using a USB drive.
Next, you’ll need to save a recovery key that will help you unlock your computer in an emergency. You can save this key in your Microsoft account, in a file or on a flash drive. You can also print the recovery key. It is recommended that you choose at least two ways, in case you lose one.
If you save the key in your Microsoft account, you can unlock your files from the Windows servers if you lose your own saved versions. But you are then dependent on the integrity of Microsoft’s servers. You never know exactly who has access to the Microsoft servers.
If you have chosen two or more storage methods, click Next one to proceed to.
Using BitLocker
Now you are going to choose how much of your hard drive you want to encrypt. If you have a new PC, it is better to encrypt the part of the drive that is in use, as all new files are then automatically encrypted. If you have an older PC, it is wise to encrypt the entire disk. Choose what best suits your computer and click on Next one.
Since Windows 10, you choose an encryption mode: new or compatible. The compatible mode is mainly for removable drives used with older Windows versions where the new encryption mode is not available. So if it’s an internal drive or a removable drive that you only use on Windows 10 computers, it’s best to choose the new mode. click on Next one.
Your drive is not encrypted until you restart your computer. From that moment on you also need your password or the USB drive to unlock your computer. Encryption may take a while, depending on the format of your drive and the choices you have made. You can use your computer during this process and you will be kept informed of the progress. It’s a good idea to only run tasks that don’t take up too much of your system resources.
When the encryption process is complete, you are done. All files you create from now on are automatically encrypted, and every time you start your computer you need your BitLocker password or USB drive.
.