How to set up USB drive encryption on Windows 11 to protect sensitive business data

Summary

This guide helps you troubleshoot and resolve: How to set up USB drive encryption on Windows 11 to protect sensitive business data. Follow the steps below to fix the issue.

Common Causes

Losing a USB flash drive can be a significant security risk for any small business. If a drive containing client records, financial data, or confidential contracts falls into the wrong hands, your business could face a serious data breach. BitLocker Drive Encryption is a built-in Windows 11 feature that encrypts your USB drive, ensuring that files remain inaccessible without the correct password or recovery key.

Quick Fix Steps

1. Insert your USB drive into an available USB port on your Windows 11 PC.
2. Open File Explorer and locate your USB drive under This PC.
3. Right-click the USB drive and select Turn on BitLocker.
4. Choose Use a password to unlock the drive and enter a strong password.
5. Save your recovery key to your Microsoft account or print a physical copy.
6. Select Encrypt used disk space only for faster setup on new drives.
7. Click Start encrypting and wait for the process to complete.

Detailed Instructions

1. Enable BitLocker on your USB drive

1. Plug your USB flash drive into your computer.
2. Press Windows key + E to open File Explorer.
3. In the left navigation pane, click This PC.
4. Under Devices and drives, right-click your USB drive.
5. Select Turn on BitLocker from the context menu.

2. Set your unlock method

1. When the BitLocker setup window opens, select Use a password to unlock the drive.
2. Enter a strong password in both fields. Use a mix of uppercase and lowercase letters, numbers, and symbols.
3. Click Next.

3. Back up your recovery key

1. Choose how you want to back up your recovery key. We recommend Save to your Microsoft account or Print the recovery key.
2. If you save to your Microsoft account, you can retrieve it later by signing into your account online.
3. Click Next.

4. Choose your encryption mode

1. Select Encrypt used disk space only if the drive is new or mostly empty. This is significantly faster.
2. Select Encrypt entire drive if the drive has previously stored sensitive files you want to scrub.
3. Click Next.

5. Start the encryption process

1. Choose Compatible mode if you plan to use the drive on older versions of Windows (note: this uses less secure encryption). For drives used only on Windows 10 or 11, the default encryption mode is recommended.
2. Click Start encrypting.
3. Wait for the progress bar to reach 100%. Do not remove the USB drive during this process.
4. Click Close when finished.

Using your encrypted USB drive

Once encrypted, the drive will appear locked when inserted into any computer. To access your files:

1. Insert the USB drive into a Windows PC.
2. Open File Explorer and double-click the drive.
3. Enter the password you created during setup.
4. Click Unlock.

To lock the drive again, simply eject it safely via the system tray or restart your computer.

Troubleshooting

BitLocker is not available

BitLocker Drive Encryption is available on Windows 11 Pro, Enterprise, and Education editions. It is not included in Windows 11 Home. If you do not see the Turn on BitLocker option, you are likely running Windows 11 Home. Consider upgrading your edition or using a third-party encryption tool.

Forgotten password

If you forget your password, you can unlock the drive using your recovery key. When prompted for the password, click More options and then Enter recovery key. Input the 48-digit key you saved during setup.

Drive not recognised after encryption

BitLocker-encrypted drives are designed for Windows and may not be readable on macOS or Linux without third-party software. Ensure you are using a Windows operating system to access the drive. For maximum compatibility across different Windows versions, format the drive as exFAT before enabling BitLocker.

If you cannot resolve the issue, Open a Ticket with our support team.

Still Having Issues?