How to Encrypt USB Drives with BitLocker in Windows 11

Securing sensitive data on portable storage is essential to prevent unauthorized access in case of loss or theft. BitLocker To Go is a built-in Windows feature that allows you to encrypt removable USB flash drives and external hard drives with strong password protection. This guide covers the step-by-step process to configure BitLocker To Go on a USB flash drive using Windows 11 Pro, Enterprise, or Education editions.

Prerequisites

Step 1: Connect the USB Drive

  1. Insert your USB flash drive into an available USB port on your Windows 11 PC.
  2. Ensure the drive is recognized and properly formatted.

Step 2: Launch BitLocker To Go

  1. Open File Explorer (press Windows Key + E).
  2. Navigate to This PC in the left sidebar.
  3. Right-click your USB flash drive and select Turn on BitLocker. (Alternatively, click Show more options > Turn on BitLocker).

Step 3: Choose How to Unlock the Drive

  1. Check the box for Use a password to unlock the drive.
  2. Enter a strong password in the text fields provided (passwords should include uppercase and lowercase letters, numbers, and symbols).
  3. Click Next.

Step 4: Back Up Your Recovery Key

If you forget your password, you will need a 48-digit recovery key to regain access to your data. Choose one or more backup methods: * Save to your Microsoft account (stores the key securely in your cloud profile). * Save to a file (save a .txt file to your PC’s internal storage, not the USB drive). * Print the recovery key (creates a hard copy).

Select your preferred option, verify the save was successful, and click Next.

Step 5: Select the Amount of Space to Encrypt

Choose between two encryption options: * Encrypt used disk space only: Faster and best suited for new or empty USB drives. * Encrypt entire drive: Slower but ensures all existing and previously deleted data is encrypted. Recommended for drives that already contain data.

Make your selection and click Next.

Step 6: Choose the Encryption Mode

Select the encryption mode appropriate for removable media: * Compatible mode: Recommended for removable drives that you intend to use on older versions of Windows (such as Windows 10 or Windows 8.1). * New encryption mode (XTS-AES 128-bit): Best for fixed drives or drives only used on modern Windows 11/10 systems.

Select Compatible mode for maximum portability across different PCs, then click Next.

Step 7: Start the Encryption Process

  1. Review your settings and click Start encrypting.
  2. Keep the USB drive plugged into your computer until the encryption process is 100% complete. Removing the drive during this process may cause data corruption.
  3. Once completed, click Close.

How to Unlock the Encrypted Drive

When you connect the encrypted USB drive to any Windows PC: 1. Open File Explorer and double-click the locked USB drive icon (represented with a gold padlock). 2. Enter the password you configured during setup. 3. Click Unlock to access and manage your files normally.