Error codes

BitLocker can't be enabled

This device can't use BitLocker

What it means

Windows refused to turn on BitLocker because a requirement is missing: TPM, a Microsoft or work account for the key, or a policy.

Common causes

• TPM missing, disabled or not owned
• No Microsoft/work account to store the recovery key
• Group Policy or a third-party encryption tool blocks it

How to fix it

1. Open tpm.msc and make sure the TPM is ready and owned.
2. Sign in with a Microsoft account or join the work domain so the recovery key has somewhere to go.
3. Check gpedit.msc or your organisation's policy if the option is greyed out.
4. On Windows Home, BitLocker management is limited; Device Encryption may be the only option.