How to Encrypt a Drive on Windows 11 Home (Device Encryption vs BitLocker)

Windows 11 Home does not include the full BitLocker tool; that comes with Windows 11 Pro, Enterprise and Education. What Home does have, on supported hardware, is Device encryption, which uses the same BitLocker technology to encrypt the system drive automatically. Microsoft relaxed the hardware requirements in version 24H2, so more PCs now show the option, but not all do.

Quick Answer

Open Settings, Privacy and security, Device encryption and turn it on. If you do not see Device encryption, your PC does not support it on Home; upgrade to Windows 11 Pro for full BitLocker.

How to Encrypt a Drive on Windows 11 Home

  1. Sign in with a Microsoft account (or add one) so Windows can back up the recovery key.
  2. Open Settings and select Privacy and security.
  3. Select Device encryption. If the page is missing, search Settings for Device encryption to double-check.
  4. Turn Device encryption on and wait while Windows encrypts the drive in the background.
  5. Confirm your recovery key is saved: sign in to your Microsoft account online and look under Devices, then BitLocker recovery keys.
  6. For removable drives or full BitLocker control, upgrade to Windows 11 Pro under Settings, System, Activation.
Windows Settings Device encryption page with the Device encryption switch highlighted
Device encryption is the Home edition’s built-in drive encryption.

Home vs Pro Encryption

Feature Windows 11 Home
Device encryption of the system drive Yes, on supported hardware
Full BitLocker management No (Pro and above)
BitLocker To Go for USB drives Can unlock drives encrypted elsewhere; cannot create new ones
Recovery key backup To your Microsoft account
Choose encryption strength and PIN at startup No

Troubleshooting

  • No Device encryption option: the PC lacks a supported TPM or firmware setting. Check that TPM and Secure Boot are on in the firmware, or upgrade to Pro.
  • Status says waiting for activation: sign in with a Microsoft account so the key can be backed up.
  • Locked out after a hardware change: you will need the key. See how to find your BitLocker recovery key.
  • To protect a USB drive, read how to put a password on a USB drive in Windows 11.

Frequently Asked Questions

Is Device encryption as secure as BitLocker?

It uses the same encryption engine, but with fewer management options.

Why is my drive already encrypted?

Many new PCs, and clean installs of 24H2 on supported hardware, turn Device encryption on automatically.

Does encryption slow the PC down?

On modern hardware the impact is usually small.

Can I turn it off?

Yes. Turn off the Device encryption switch and Windows decrypts the drive.

Summary

  1. Sign in with a Microsoft account.
  2. Settings, Privacy and security, Device encryption.
  3. Turn it on.
  4. Confirm the recovery key is backed up.
  5. Upgrade to Pro for full BitLocker.