Turn on disk encryption. If someone steals the computer, or you lose it, encryption stops other people from reading your files.
If your computer has the necessary hardware and you sign in with a Microsoft account, Windows turns on Device encryption or BitLocker automatically. Do the steps below to make sure that it is on.
Many Windows 10 computers, especially tablets and hybrid laptops, have encryption on when you get them.
Check that Device encryption is on (Windows Home)
-
Select the Start button. Select Settings, then select Update & Security.
- On the left side, scroll down and select Device encryption.
If you do not see Device encryption, your computer possibly does not support it. If you have Windows Pro, you can use BitLocker to encrypt your computer.
Check that BitLocker Drive Encryption is on (Windows Pro)
Windows Home does not have BitLocker. To see your Windows edition, go to Settings > System > About.
To check that BitLocker Drive Encryption is on:
- In the Start menu, search for "bitlocker".
- Select Manage BitLocker.
-
The window shows the BitLocker status for each connected drive. In this example, the only drive, C:\, has BitLocker on.
Important: make a backup of your recovery key now. You need the recovery key to unlock the drive if the hardware fails or if you forget the account password.
Back up your recovery key
In the Manage BitLocker window, select Back up your recovery key, then select Save to your Microsoft account.
For more safety, also select Save to a file or Print the recovery key. Keep the file or the printed key in a safe place away from the computer. Do not keep the only copy on the encrypted computer.
If the computer is a company computer joined to your Microsoft 365, you can get its recovery key from the IT Solver dashboard. See Find a BitLocker recovery key in the dashboard.
Comments
0 comments
Please sign in to leave a comment.