How to Turn On BitLocker and Protect a Lost Laptop

If your laptop is stolen from a car or left on a train, your Windows password does very little to protect the files on it. Anyone can pull the drive, connect it to another computer and read your documents, browser data and saved photos in minutes. When you turn on BitLocker, that drive becomes scrambled data that is useless without your key.

It takes about 10 minutes of setup and then runs quietly in the background. This guide covers which version of Windows you need, the exact steps, where to keep your recovery key, and how to check that encryption is really on.

What BitLocker does and does not protect

BitLocker is the full disk encryption built into Windows. It encrypts the entire drive, so the data is only readable after Windows starts normally on your own hardware, using a chip on the motherboard called the TPM (Trusted Platform Module) to hold the key.

That protects you against the most common real world threat: a lost or stolen device. A thief who removes the SSD gets nothing readable. A repair shop cannot browse your files without your permission.

It does not protect you while you are signed in. Malware, phishing and someone using your open laptop all work the same with or without encryption. Pair it with good antivirus settings; our list of Microsoft Defender settings worth turning on covers that side.

Check which encryption your Windows version has

Press Windows key + R, type winver and press Enter. The window shows your edition.

• Windows 11 or 10 Pro, Enterprise or Education: you have full BitLocker with all the options.
• Windows 11 or 10 Home: you usually have a simpler feature called Device encryption, which uses BitLocker technology but with fewer settings. It still protects a stolen drive.

Many new laptops ship with Device encryption already switched on once you sign in with a Microsoft account. Do not assume; check using the steps below.

How to turn on BitLocker step by step

On Windows Pro

1. Plug the laptop into power. Encryption can take 20 minutes to a few hours depending on drive size, and it will pause on low battery.
2. Open the Start menu, type Manage BitLocker and open the Control Panel result.
3. Next to your C: drive, click Turn on BitLocker.
4. Choose how to back up your recovery key. Pick at least two of the options offered (explained in the next section).
5. When asked how much of the drive to encrypt, choose Encrypt entire drive on a laptop that has been in use. On a brand new machine, used disk space only is fine and faster.
6. Choose New encryption mode (XTS-AES) for the internal drive.
7. Tick Run BitLocker system check and restart when asked. Encryption starts after the restart and you can keep working while it runs.

On Windows Home

1. Open Settings, then Privacy and security, then Device encryption.
2. If the switch is off, turn it on. You need to be signed in with a Microsoft account, which is where the recovery key will be saved.
3. If you do not see Device encryption at all, your hardware may not support it. Upgrading to Pro costs about $99 and adds full BitLocker.

Save your BitLocker recovery key properly

The recovery key is a 48 digit number. Windows asks for it when something changes, such as a firmware update, a new motherboard, or a BIOS setting being reset. Without it, your data is gone. Nobody, including Microsoft support, can recover the drive.

Keep it in at least two separate places:

• Your Microsoft account. Keys saved there appear when you sign in at the account recovery keys page on another device. Make sure that account has two factor authentication turned on.
• A password manager entry. Copy the key into a secure note with the laptop's name and date.
• A printed copy. Store it with your passport or other important papers at home, never in the laptop bag.

If you manage several family or work laptops, label each key clearly. A key from the wrong machine wastes a stressful afternoon. Our guide to the free security tools worth setting up first lists a password manager near the top for exactly this kind of job.

Check that encryption is actually on

Do not rely on the setup screen alone. Open the Start menu, type cmd, right click Command Prompt and choose Run as administrator. Then type:

manage-bde -status

Look at the C: drive section. You want to see Conversion Status: Fully Encrypted and Protection Status: Protection On. If you see "Encryption in Progress" with a percentage, leave the laptop plugged in and check again later.

One common trap: on some machines Device encryption shows as on, but protection is suspended because the key was never backed up to an account. The status command reveals it. Fix it by backing up the key, then resuming protection from the BitLocker settings page.

The "BitLocker will slow down my laptop" myth

A lot of forum advice still says to skip encryption because it makes your computer slower. That was a fair worry on hard drives and older processors 10 years ago. It is no longer a good reason.

Modern Intel and AMD chips include dedicated encryption instructions (AES-NI). In everyday use, measured slowdowns on an SSD are typically in the low single digits of percent, and most people cannot notice any difference in boot time, browsing or office work. Games and video editing are equally unaffected in practice.

The real cost of BitLocker is not speed. It is the risk of losing your recovery key. Spend your effort there instead of worrying about benchmarks.

Extra steps for higher risk users

If you carry client data, travel often or have a laptop that is easy to grab, consider adding a startup PIN. It means the drive will not open until you type a short PIN before Windows loads, which protects against more advanced attacks on the TPM. On Pro, you can enable it through Group Policy under BitLocker Drive Encryption settings.

Also encrypt USB sticks and external drives with BitLocker To Go, available from the same Manage BitLocker page. And if a device does go missing, act quickly; the steps in what to do in the first hour after your phone is stolen apply to laptops too, especially changing passwords and signing out sessions.

Frequently asked questions

Should I turn on BitLocker on my laptop?

Yes, for nearly everyone with a laptop. It protects your files if the device is lost or stolen and has almost no effect on everyday speed. Just make sure the recovery key is saved in at least two places before you rely on it.

What happens if I lose my BitLocker recovery key?

If Windows asks for the key and you cannot find it, the data on the drive cannot be recovered. The only option is to wipe the drive and reinstall Windows. That is why keeping the key in your Microsoft account and a second secure place matters so much.

Does Windows 11 Home have BitLocker?

Windows 11 Home does not include the full BitLocker tools, but most modern laptops running it support Device encryption, which protects the drive in a similar way. You can find it under Settings, Privacy and security. Upgrading to Pro adds full BitLocker controls.