guide · static export
Security

Set Up BitLocker Drive Encryption on a New Windows 11 25H2 Pro Laptop

Encrypt your laptop's system drive with BitLocker, securely store the recovery key, and verify that encryption is active.

by@guidox updated:10/29/26 time:30 min level:Intermediate works on:Windows 11 25H2 Pro x64, BitLocker Drive Encryption
⚠ Safety notice

Encryption changes can cause permanent data loss if recovery information is unavailable. Keep an independent backup.

TL;DR

Enable **BitLocker** on your Windows 11 Pro system drive, back up its recovery key, and confirm that encryption completes.

Before you start

Requirements

  • Windows 11 25H2 Pro, x64
  • Administrator account
  • Compatible TPM and UEFI firmware
  • A secure location for the recovery key
  • Backup of important files
Step by step

Instructions

01

Check Windows edition

Open **Settings**, select **System**, and open **About**. Confirm that the installed edition is **Windows 11 Pro**.

02

Check existing encryption

Search for **Manage BitLocker** in Start. Check whether the operating system drive is already encrypted before changing anything.

tipSome laptops enable encryption automatically during initial Windows setup.
03

Enable BitLocker

In **BitLocker Drive Encryption**, select **Turn on BitLocker** for the system drive if encryption is disabled. Follow the setup wizard.

04

Save the recovery key

Choose a supported recovery-key backup method. Store the key somewhere accessible without the encrypted laptop.

⚠ warningLosing the recovery key can make encrypted data permanently inaccessible.
05

Choose encryption options

For a new drive, select the offered used-space encryption option if appropriate. Choose the encryption mode recommended for the operating system drive.

06

Verify encryption

Allow the wizard to complete any required restart or system check. Open an elevated **Terminal** and verify the drive's protection and conversion status.

manage-bde -status C:
Troubleshooting

Common issues

BitLocker reports an incompatible TPM.

Check **Windows Security > Device security** and review the laptop manufacturer's TPM firmware instructions.

Encryption is suspended.

Open **Manage BitLocker** and select **Resume protection** after resolving any pending firmware or recovery issue.

FAQ

Frequently asked

Does BitLocker require Windows 11 Pro?

Full BitLocker management requires Pro, Enterprise, or Education. Some Home devices support automatic Device Encryption.

Can I use my laptop during encryption?

Yes. Keep it powered and allow the encryption process to finish.

How to undo this

Open **Manage BitLocker**, select **Turn off BitLocker**, and allow decryption to finish before removing the device or reinstalling Windows.

Interactive version: checklist, feedback, related guides →

Free · no account needed · tracks your progress