Fix Encryption Not Working on Windows 11

If encryption is not working on Windows 11, the fix usually involves checking that BitLocker or Device Encryption is properly enabled in Settings, verifying your TPM and Secure Boot are active, and running the relevant troubleshooting commands. This article walks through the most common causes and step-by-step solutions for both BitLocker and standard device encryption.

What Encryption Does Windows 11 Use?

Windows 11 offers two main encryption technologies: Device Encryption and BitLocker. Device Encryption is a streamlined version that is automatically enabled on many modern laptops and tablets that support InstantGo (Modern Standby). It uses the hardware TPM (Trusted Platform Module) to store encryption keys and is managed through the Settings app. BitLocker is the full-featured encryption tool available on Windows 11 Pro, Enterprise, and Education editions. It provides additional options like encrypting removable drives, using a startup PIN, or saving a recovery key to your Microsoft account.

Both technologies rely on the same underlying encryption engine (AES) but differ in how they are configured and managed. If encryption is not working, the first step is to determine which one you are trying to use and whether your hardware meets the requirements.

Why Encryption Might Not Work: Common Causes

Several issues can prevent encryption from starting or completing on Windows 11:

• TPM not enabled or not detected – BitLocker and Device Encryption require a TPM (version 2.0 for Windows 11). If the TPM is disabled in the BIOS/UEFI, encryption will not work.
• Secure Boot disabled – Windows 11 requires Secure Boot, and encryption often fails if it is off.
• Insufficient system partition – The EFI system partition (ESP) must be large enough (typically 100 MB or more) for BitLocker to store boot files.
• Outdated drivers or firmware – Old storage drivers or BIOS versions can interfere with encryption.
• Group Policy restrictions – On managed devices, IT policies may block encryption.
• Corrupted system files – Windows component corruption can prevent encryption features from functioning.

Step-by-Step Fixes to Try

1. Check if Device Encryption Is Supported and Enabled

1. Open Settings > Privacy & security > Device encryption.
2. If you see “Device encryption is turned off,” click Turn on.
3. If you see “Device encryption is not supported on this device,” your hardware lacks the required TPM or Modern Standby support. You may still use BitLocker if you have a Pro edition.

2. Verify TPM and Secure Boot Status

1. Press Win + R, type tpm.msc, and press Enter. The TPM Management window should say “The TPM is ready for use.”
2. If not, restart your PC, enter the BIOS/UEFI (usually by pressing F2, F10, Del, or Esc during startup), and enable TPM (often labeled as “Intel PTT” or “AMD fTPM”).
3. Also ensure Secure Boot is enabled in the BIOS under Boot options.

3. Run the BitLocker Troubleshooter

Windows 11 includes a built-in troubleshooter for encryption issues:

1. Go to Settings > System > Troubleshoot > Other troubleshooters.
2. Click Run next to BitLocker.
3. Follow the on-screen instructions. The tool may automatically fix problems like missing recovery keys or corrupted metadata.

4. Use Command Prompt to Enable BitLocker

If the Settings interface is not responding, use an elevated Command Prompt:

1. Right-click the Start button and select Terminal (Admin).
2. Type manage-bde -status to see the current encryption status of all drives.
3. If BitLocker is not enabled, type manage-bde -on C: and press Enter. Replace C: with your system drive letter if needed.
4. If you get an error about TPM, run manage-bde -protectors -get C: to check if a TPM protector exists. If not, add one with manage-bde -protectors -add C: -TPM.

5. Check Group Policy (Pro/Enterprise)

If you are on Windows 11 Pro or higher, a group policy might be blocking encryption. Open the Group Policy Editor (gpedit.msc) and navigate to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption. Look for policies that say “Do not allow” or “Disable.” If any are set, change them to “Not Configured” or “Enabled” as appropriate.

6. Repair System Files

Corrupted system files can break encryption. Run the System File Checker and DISM:

1. Open Terminal (Admin).
2. Type sfc /scannow and press Enter. Wait for it to finish.
3. Then type DISM /Online /Cleanup-Image /RestoreHealth and press Enter.
4. Restart your PC and try encryption again.

BitLocker vs. Device Encryption: Which One Should You Use?

Device Encryption is automatic and requires no user interaction, but it only works on devices that support Modern Standby and have a TPM. It encrypts the system drive and fixed drives, but not removable drives. BitLocker is more flexible: you can encrypt USB drives, choose the encryption strength (AES-128 vs AES-256), and use advanced features like a startup PIN or a USB key. However, BitLocker is only available on Pro, Enterprise, or Education editions of Windows 11. If you have Windows 11 Home, you are limited to Device Encryption (unless your device manufacturer pre-enabled BitLocker, which some do).

What to Do If Encryption Is Stuck at a Percentage

Sometimes encryption starts but never finishes, often stuck at 99.9% or showing “Encryption paused.” This usually happens because the system is running low on disk space or the encryption process is being interrupted by background tasks. Try these steps:

• Free up at least 10% of your drive space.
• Pause any large file transfers or disk-heavy operations.
• Run manage-bde -status to see if the process is still active. If it is paused, run manage-bde -resume C:.
• If it remains stuck, restart the PC and try again. The process should resume automatically.

Safety and Backup Considerations

Before enabling encryption, always back up your data and ensure you have a recovery key. If you lose the recovery key and forget your password, your data becomes permanently inaccessible. Windows 11 usually prompts you to save the recovery key to your Microsoft account, a USB drive, or a file. Store it in a safe place separate from your PC. Also note that encryption can slightly reduce performance, especially on older hardware, but the security benefit usually outweighs the cost.

Frequently Asked Questions

Why is Device Encryption missing from Settings?

Device Encryption is only available on devices that support Modern Standby and have a TPM. If your PC is older or lacks these features, the option will not appear. You can check by running msinfo32 and looking for “Device Encryption Support” under System Summary. If it says “Not supported,” you cannot use Device Encryption, but you may still use BitLocker if you have a Pro edition.

Can I use BitLocker on Windows 11 Home?

Officially, BitLocker is not included in Windows 11 Home. However, some devices have BitLocker pre-enabled by the manufacturer. You can check by going to Control Panel > System and Security > BitLocker Drive Encryption. If you see options to manage BitLocker, it is available. Otherwise, you would need to upgrade to Pro to use it.

How do I know if my drive is already encrypted?

Open an elevated Command Prompt and run manage-bde -status. The output shows the conversion status for each drive. If it says “Fully Encrypted,” then encryption is already active. You can also check in Settings under Privacy & security > Device encryption.

What is the difference between TPM and BitLocker?

TPM is a hardware chip on your motherboard that stores encryption keys securely. BitLocker is the software that uses the TPM to encrypt your drives. Without a TPM, BitLocker can still work but requires a USB startup key, which is less convenient. Windows 11 requires TPM 2.0 for the OS itself, so most modern PCs have it.

Does encryption slow down my PC?

Encryption adds a small overhead when reading and writing data, but on modern CPUs with AES-NI instructions, the impact is usually negligible, often less than 1-2% in real-world tasks. For SSDs, the performance hit is minimal because the encryption is handled in hardware. If you notice slowdowns, it may be due to other factors like low disk space or background processes.

Related

• Kodi: What It Is and How the TV Streaming App Works
• iPhone 11 Keeps Restarting? Fix It Now
• Loans vs Advances: Key Differences in Banking