How To Turn On or Turn Off Device Encryption in Windows 11

Learn how to quickly and safely turn ON or OFF the Device Encryption feature in Windows 11 using the Settings app.

By default, the Device Encryption feature is enabled (turned ON) on Windows 11. When enabled, it automatically encrypts the drives and their contents with BitLocker encryption. When you log in to your user account, Windows 11 automatically decrypts the data so you can use it normally. This simple yet effective method protects your data so that only authorized users can access the data on your computer. For example, if your laptop or hard disk is stolen, the data on it cannot be accessed unless you are logged into the Windows user account.

While this feature is enabled by default, it might be disabled if Windows thinks your system doesn’t support this feature, or if some other program has modified Windows settings. In those cases, you can manually enable it, as long as your system meets the minimum hardware requirements. On the other hand, if you think Device Encryption is causing unnecessary problems, especially with a multi-user computer, you can disable it.

So, without further ado, let me show you how to turn ON and OFF Device Encryption on Windows 11. Let’s get started.

Before You Start

• Administrator rights are required to enable or disable Device Encryption.

Device Encryption System Requirements

To enable the Device Encryption feature on Windows 11, your desktop computer or laptop should meet the following minimum hardware requirements.

• Should have the TPM (Trusted Platform Module) v2.0 or higher chip.
• The system should be using UEFI (not BIOS).
• Your computer should support Secure Boot, and it must be enabled.
• Should be using Windows 11 Pro or Enterprise editions.

Turn on Device Encryption in Windows 11

You can turn ON or enable the Device Encryption feature in Windows 11 using the Settings app. Here’s how:

1. Use “Windows key + I” to open Settings.
2. Select “Privacy & Security” on the sidebar.
3. Click the “Device Encryption” option.
4. Turn ON the “Device Encryption” toggle.
5. With that, Device Encryption is enabled in Windows 11.

Detailed Steps (With Screenshots)

Press the “Windows key + I” shortcut to open the Settings app.

After opening it, go to the “Privacy & Security” tab in the sidebar, then click the “Device Encryption” page in the right panel.

On this page, turn ON the “Device Encryption” option. As soon as you turn on the option, Windows 11 will start the encryption process.

The whole encryption will take some time to complete. The time mainly depends on your system specifications and the amount of data you have. While the encryption is in progress, you can continue with your work. It just runs silently in the background.

Once completed and the Device Encryption is fully enabled, you will see the lock icons on the drives in Windows 11 File Explorer.

Turn off Device Encryption in Windows 11

To disable Device Encryption in Windows 11, follow the steps below:

1. Use “Windows key + I” to open Settings.
2. Select “Privacy & Security” on the sidebar.
3. Click the “Device Encryption” option.
4. Turn OFF the “Device Encryption” toggle.
5. Click the “Turn off” button in the confirmation dialog.
6. With that, Device Encryption is enabled in Windows 11.

After turning off the Device Encryption feature, Windows 11 will start the decryption process. The decryption will take time to complete, depending on your system resources and how much data you have. While the decryption is running, you can do other work on the computer.

Once the Device Encryption is turned off, you will no longer see the lock icons on the drives in Windows 11 File Explorer.

Troubleshooting

I cannot find the Device Encryption option in Windows 11, or it is greyed out

If you don’t see the Device Encryption option or it is greyed out, then your system doesn’t support this feature because it doesn’t meet the specific minimum hardware or software requirements. For example, if you are using Windows 11 Home editor, secure boot is disabled, or TPM is not available, you won’t have access to the Device Encryption feature.

—

That is all. It is that simple to turn on or turn off Device Encryption in Windows 11. If you have any questions or need help, comment below. I’ll be happy to assist.