How to encrypt and password‑protect external backup drives on Windows

Summary

This guide helps you troubleshoot and resolve: How to encrypt and password‑protect external backup drives on Windows. Follow the steps below to fix the issue.

Common Causes

External backup drives are a convenient way to protect your business data, but they can become a liability if lost or stolen. By enabling BitLocker To Go encryption and setting a strong password, you ensure that only authorised users can access the contents of the drive. This guide walks you through the process for Windows 10 and Windows 11, tailored for Australian small businesses.

Australian businesses should consider data privacy obligations when storing sensitive information on portable media. Encrypting external drives helps protect customer records and financial data in the event of theft or loss, supporting compliance with the Privacy Act 1988 and the Australian Privacy Principles.

Quick Fix Steps

1. Connect the external drive to your PC.
2. Open Control Panel → System and Security → BitLocker Drive Encryption.
3. Find your external drive in the list and click Turn on BitLocker.
4. Select Use a password to unlock the drive and enter a strong password.
5. Save the recovery key to a secure location, such as Active Directory or Azure AD.
6. Choose an encryption mode and click Start encrypting.
7. After encryption completes, verify the status and safely eject the drive.

Detailed Instructions

1. Verify prerequisites

• Your Windows edition must be Pro, Enterprise or Education. Home editions do not include BitLocker.
• NTFS is recommended for external drives. While BitLocker can work with other file systems in some versions, NTFS provides the best compatibility and performance.
• Ensure you have administrative rights on the computer.
• Encrypt the drive before your first backup to ensure all backup data is protected from the start.

2. Open BitLocker management

1. Press Win + X and select Control Panel.
2. Navigate to System and Security → BitLocker Drive Encryption.
3. Locate your external drive under Removable data drives - BitLocker To Go.

3. Turn on BitLocker To Go for the external drive

1. Click Turn on BitLocker next to the external drive.
2. When prompted, choose Use a password to unlock the drive.
3. Enter a password that meets the following criteria:
   • At least 8 characters
   • Mix of upper‑case, lower‑case, numbers and symbols
   • Avoid common words or personal information
4. Re‑enter the password to confirm.

4. Save the recovery key

1. Choose how you want to back up the recovery key:
   • Save to Active Directory or Azure AD – recommended for business environments so your IT team can recover the key if needed.
   • Save to a file – store on a separate USB stick or secure network location.
   • Print the recovery key – keep a physical copy in a secure place.
2. Do not save the recovery key on the same drive you are encrypting. If you lose access to the drive, you will also lose access to the key.
3. Click Next after selecting your preferred method.

5. Select encryption options

1. Choose an encryption mode:
   • Encrypt used space only – faster, suitable for new drives.
   • Encrypt entire drive – more thorough, recommended for drives with existing data.
2. Click Next, then Start encrypting.
3. Encryption progress will be displayed. You can continue to use the drive, but avoid removing it until the process completes.

6. Verify encryption status

1. Return to the BitLocker window. The drive should now show BitLocker on with a lock icon.
2. Safely eject the drive using the system tray icon.
3. Reconnect the drive to confirm that the password prompt appears before you can access the files.

Troubleshooting

BitLocker option is missing

• Confirm you are running a supported Windows edition (Pro, Enterprise, Education).
• Open gpedit.msc (Local Group Policy Editor) and navigate to Computer Configuration → Administrative Templates → Windows Components → BitLocker Drive Encryption. Ensure the policies are not disabling BitLocker.

Drive does not appear in BitLocker list

• Make sure the drive is properly connected and recognised by Windows.
• Use diskmgmt.msc to check the drive status and file system.
• Disconnect and reconnect the drive, then refresh the BitLocker window.

Password not accepted

• Check for leading or trailing spaces; passwords are case‑sensitive.
• Ensure the keyboard layout has not changed (for example, switching between English (Australia) and another layout).

Encryption stalls or fails

• Verify there is sufficient free space on the drive for temporary files.
• Run chkdsk /f X: (replace X: with your drive letter) to fix file‑system errors.
• If the issue persists, Open a Ticket for further assistance.

BitLocker suspension during BIOS or UEFI firmware updates

• If you are updating firmware on the computer, BitLocker may enter suspension mode.
• After the firmware update is complete, resume BitLocker protection from the BitLocker Drive Encryption window in Control Panel.
• Verify that the external drive shows BitLocker on before resuming normal backup operations.

Related Articles

• How to backup photos to external drive
• Managing BitLocker recovery keys in Active Directory
• Azure AD device encryption for small business
• Data privacy obligations for Australian small business
• Safely removing external storage devices

Still Having Issues?