Published on

How to use Windows BitLocker To Go for external drive encryption.

Authors
  • avatar
    Name
    how-to.digital
    Twitter

How to Use Windows BitLocker To Go for External Drive Encryption

BitLocker To Go is a powerful encryption feature provided by Microsoft Windows to protect external drives, such as USB flash drives and external hard drives. This tutorial will guide you through the process of setting up and using BitLocker To Go to encrypt your external drives on Windows.

Prerequisites

Before getting started, make sure you meet the following prerequisites:

  1. A compatible version of Windows: BitLocker To Go is available in Windows 10 Pro, Enterprise, and Education editions. If you have a different version of Windows, you might need to upgrade to a compatible edition.
  2. An external drive: You'll need a USB flash drive or an external hard drive to encrypt using BitLocker To Go.
  3. Administrative access: You'll need administrative rights on your Windows machine to enable and use BitLocker To Go.

Step 1: Enabling BitLocker To Go

To enable BitLocker To Go on your Windows machine, follow these steps:

  1. Connect the external drive (USB flash drive or external hard drive) to your computer.
  2. Open Windows Explorer by pressing Win + E or through the Start menu.
  3. Under "This PC," find and right-click the external drive you want to encrypt.
  4. From the context menu, select "Turn on BitLocker."

Step 2: Choose How to Unlock the Drive

After enabling BitLocker To Go, you'll need to select how you want to unlock the drive. There are two options:

  1. Use a password: This option allows you to set a password that you'll need to enter to unlock the drive when connected to your computer.
  2. Use a smart card: This option enables you to use a smart card to unlock the drive. You'll need to insert the smart card into a smart card reader to access the drive.

Choose the desired option and follow the steps below:

Option 1: Use a Password

  1. Select the "Use a password to unlock the drive" radio button.
  2. Enter a strong password that meets the complexity requirements.
  3. Retype the password to confirm it.
  4. Click "Next."

Option 2: Use a Smart Card

  1. Select the "Use a smart card to unlock the drive" radio button.
  2. Insert the smart card into the smart card reader.
  3. Click "Next."

Step 3: Choose How to Back Up Your Recovery Key

In case you forget your password or lose your smart card, Windows provides a recovery key that allows you to access your encrypted drive. You can choose from the following options to back up your recovery key:

  1. Save to a file: This option allows you to save the recovery key to a specific location, such as your computer's hard drive, another external drive, or a network location.
  2. Print the recovery key: Select this option if you want to print the recovery key and store it in a safe place.
  3. Save to your Microsoft account: If you're signed in with a Microsoft account, you can choose to save the recovery key associated with your account.

Choose the desired option and follow the instructions provided by Windows.

Step 4: Choose Encryption Options

Now it's time to select the encryption options for your external drive. There are two options:

  1. New encryption mode (best for fixed drives on this device): Choose this option if the external drive will be used primarily on this Windows machine.
  2. Compatible mode (best for removable drives): This option is recommended if you plan to use the external drive across multiple devices, including non-Windows devices.

Select the appropriate option and click "Next."

Step 5: Encrypt the Drive

Finally, click "Start encrypting" to begin the encryption process. The time taken to encrypt the drive depends on the size of the drive and your computer's performance.

Once the encryption is complete, your external drive will be protected by BitLocker To Go. From now on, every time you connect the encrypted drive to your Windows machine, you'll be prompted to enter your password or use your smart card to unlock it.

Additional Tips

  • To disable BitLocker To Go and remove encryption from an external drive, simply right-click the drive in Windows Explorer, select "Manage BitLocker," and choose "Turn off BitLocker."
  • BitLocker To Go can also be managed through the Group Policy settings for organizations using Windows Enterprise or Education editions.

Congratulations! You have successfully learned how to use Windows BitLocker To Go for external drive encryption. Protecting your sensitive data has never been easier!