Device encryption helps protect your data, and it is available on a vast range of Windows devices. If you turn on encryption, the data on your device can only be accessible to authorized people.
If your device stores critical and confidential data, it is essential to take appropriate steps to protect them.
BitLocker provides a way to encrypt the data on the storage device to prevent unauthorized access to your data. Only the authorized user with the encryption recovery key can decrypt the data and make it available. Drive Encryption can help prevent hackers from accessing the system files or your drive.
BitLocker To Go is BitLocker Drive Encryption used for removable storage devices: USB flash drives, SD and CF memory cards, external hard disk drives, and other drives formatted by using the NTFS, FAT16, FAT32, or exFAT file systems.
Here we show you how to turn on or off BitLocker To Go and encrypt or decrypt a removable storage device in Windows 10.
To Turn On BitLocker for a Removable Data Drive in BitLocker Manager
Step 1
Press and hold or right-click on the removable data storage (example: E: ) you want to encrypt. Then click/tap on Turn on BitLocker and go to step 4 below.
Step 2
Select the removable data storage (example: E: ) you want to encrypt, click/tap on the "Drive Tools" Manage Tab. Next, click/tap on the BitLocker button in the ribbon, and after that, click/tap on Turn on BitLocker. The next step is step 4 below.
Step 3
Open the "Control Panel," then click/tap on the BitLocker icon in the System and Security settings. Select the removable drive (example: E: ) you want to encrypt under "Removable data drives - BitLocker To Go." Then click/tap on Turn on BitLocker and go to step 4 below.
Step 4
Choose how (password or smart card) you want to unlock this drive, and click/tap on Next.
Step 5
Select how (Microsoft Account, File, or Print) you want to back up your BitLocker recovery key for this drive, and click/tap on Next after finishing.
File = BitLocker recovery key will be saved as a .TXT file to a location you select.
Print = BitLocker recovery key will be printed by the selected printer.
Microsoft Account = BitLocker recovery key will be saved in the OneDrive account online.
Step 6
Select how much of your devices to encrypt now, and click/tap on Next. We recommend selecting "Encrypt entire drive."
Step 7
Select which encryption mode to use, and click/tap on Next.
New encryption mode = For a fixed drive that will only be used on devices running at least Windows 10 or later.
Compatible mode = For a removable drive that will be used on an older version of Windows (example: Vista, Windows 7, or Windows 8).
Step 8
Click/tap on Start encrypting.
Step 9
Encrypting will be started after it. Finish time depends on the size of the drive and the amount of data that is being encrypted.
Step 10
When encryption is finished, click/tap on Close.
And this is how encrypted drive will look on unauthorized devices.
To Turn Off BitLocker for a Removable Data Drive in BitLocker Manager
Step 1
Press and hold or right-click on the encrypted removable drive (example: E: ). Then click/tap on Manage BitLocker, and go to step 4 below.
Step 2
Select the encrypted removable data drive (example: E: ), click/tap on the "Drive Tools" tab. Next, click/tap on the BitLocker button in the ribbon, click/tap on Manage BitLocker, and go to step 4 below.
Step 3
Open the Control Panel, click/tap on the BitLocker Drive Encryption icon in the System and Security settings, and open the encrypted removable drives (example: E: ) under "Removable data drives - BitLocker To Go." Then click/tap on Turn off BitLocker, and go to step 4.
Step 4
Click/tap on Turn off BitLocker to continue the process.
Step 5
Decrypting will be started after it.
Step 6
When decryption is finished, click/tap on Close.
To Turn Off BitLocker for a Removable Data Drive in Command Prompt
Step 1
Run a Command Prompt as an administrator.
Step 2
Type the command "manage-bde -off <drive letter>:" in the elevated command prompt by substituting <drive letter> in with the actual drive letter of the encrypted drive you want to decrypt. (example: manage-bde -off E:)
Step 3
After it is finished, press Enter.
To Turn Off BitLocker for a Removable Data Drive in Windows PowerShell
Step 1
Run a Windows PowerShell as an administrator.
Step 2
Type the command "Disable-BitLocker -MountPoint "<drive letter>:" in the elevated command prompt by substituting <drive letter> in with the actual drive letter of the encrypted drive you want to decrypt. (example: Disable-BitLocker -MountPoint "E:")
Step 3
After it is finished, press Enter.
For more information about Windows 10 Encryption and Decryption via BitLocker, call us. Our support team representative will gladly provide you with it.
Frequently Asked Questions
What is BitLocker To Go?
BitLocker To Go is a feature in Windows 10 that allows you to encrypt removable drives such as USB flash drives and external hard drives. It helps protect your data from unauthorized access in case your drive is lost or stolen.
Can I use BitLocker To Go on any removable drive?
BitLocker To Go is available on Windows 10 Pro, Enterprise, and Education editions. It may not be available on Windows 10 Home. Additionally, your drive must be formatted with the NTFS or exFAT file system.
What happens if I forget the password for a BitLocker-encrypted drive?
If you forget the password for a BitLocker-encrypted drive, you will not be able to access the data on the drive. Microsoft does not provide a password recovery option. It’s essential to store your password or recovery key in a safe place.
Can I use BitLocker To Go on a Mac or other non-Windows devices?
BitLocker To Go is a Windows-specific feature. While you can use a BitLocker-encrypted drive on a Mac or other non-Windows devices, you will need to install additional software or input the password to unlock and access the drive.
Does BitLocker To Go encrypt the entire drive?
BitLocker To Go encrypts the entire drive, including all the files and folders on it. It provides full disk encryption to protect your data comprehensively.