Encrypt and Decrypt a USB Drive in Windows 11

This guide shows you how to lock a USB drive with BitLocker To Go, Windows 11’s built-in encryption tool, so your files stay safe if the drive is lost or stolen. You’ll also learn how to unlock (decrypt) the drive again, either temporarily for one session or permanently to remove encryption.

What You’ll Need

• A USB flash drive or external hard drive with at least a few GB of free space (the drive will be formatted, so back up any data first).
• Windows 11 Pro, Enterprise, or Education edition. BitLocker To Go is not available on Windows 11 Home.
• Administrator rights on the PC (you’ll be prompted for permission).
• A strong password or a smart card (optional) to unlock the drive.

Step-by-Step

Encrypt a USB Drive

1. Plug in the USB drive and make sure it is detected by Windows. If the drive has files you want to keep, copy them elsewhere first because encryption will wipe the drive.
2. Open File Explorer (Win + E) and right-click your USB drive in the left sidebar or under “This PC�.
3. Select “Turn on BitLocker� from the context menu. If the option is grayed out, your Windows edition doesn’t support it (see Troubleshooting).
4. In the BitLocker To Go window, check “Use a password to unlock the drive� and enter a password twice. The password must be at least 8 characters and should include upper/lowercase letters, numbers, and symbols.
5. Click Next. You’ll be asked how you want to back up your recovery key. This key can unlock the drive if you forget your password. Choose one of the following:
   • Save to your Microsoft account – easiest, stored online.
   • Save to a file – store it somewhere safe (not on the same USB drive).
   • Print the recovery key – keep it in a secure place.
6. Click Next, then choose “Encrypt entire drive� (recommended) or “Used space only�. Encrypting the entire drive is slower but more secure.
7. Select the encryption mode: “Compatible mode� is best for drives that may be used with older Windows versions; “New encryption mode� is more secure but only works on Windows 10/11.
8. Click Start encrypting. The process can take from a few minutes to several hours depending on drive size and speed. You can keep using the PC, but don’t unplug the drive until it finishes.
9. When done, the drive will show a padlock icon in File Explorer. It is now encrypted.

Decrypt a USB Drive (Unlock for Use)

1. Plug in the encrypted USB drive. Windows will show a notification that the drive is BitLocker-protected.
2. Open File Explorer and double-click the drive. A dialog will appear asking for the password.
3. Enter your password and click Unlock. The drive will now be accessible like a normal drive.
4. To automatically unlock the drive on this PC in the future, check “Automatically unlock on this PC� before entering the password (if you want that convenience).
5. If you forget the password, click “More options� → “Enter recovery key� and type the 48-digit recovery key you saved earlier.

Permanently Remove Encryption (Full Decrypt)

1. Unlock the drive as described above.
2. Right-click the drive in File Explorer and select “Manage BitLocker�.
3. In the BitLocker Drive Encryption control panel, find your USB drive and click “Turn off BitLocker�.
4. Confirm that you want to decrypt the drive. Windows will decrypt all files, which may take a while.
5. When finished, the drive is no longer protected. You can now use it normally on any PC.

Common Mistakes

• Using Windows 11 Home – BitLocker To Go is not available in Home edition. You’ll need to upgrade or use third-party software.
• Not backing up the recovery key – If you forget your password and lose the key, your data is permanently inaccessible.
• Unplugging during encryption – This can corrupt the drive. Always wait for the encryption to complete.
• Encrypting a drive with existing data – The process may fail if the drive has errors. Back up and format first if needed.
• Choosing “Used space only� – This leaves previously deleted data recoverable, so it’s less secure.

Tips

• Use a password manager to store your recovery key and password.
• For drives you use across different PCs, choose “Compatible mode� for maximum compatibility.
• Encrypting a large drive can take hours; do it overnight or when you don’t need the drive.
• If you need to share the drive with others, consider creating a separate non-encrypted partition for public files.
• Keep the drive plugged in and avoid putting the PC to sleep during encryption.

Troubleshooting

“Turn on BitLocker� is grayed out – Your Windows edition is likely Home. Check by going to Settings > System > About. If it’s Home, you cannot use BitLocker To Go; you’ll need to upgrade to Pro or use a third-party tool like VeraCrypt.

Encryption fails or stops midway – Right-click the drive, select “Manage BitLocker�, and click “Suspend protection� if it’s stuck. Then try again after checking the drive for errors (right-click drive > Properties > Tools > Check). If the drive is faulty, replace it.

Forgot password and lost recovery key – Unfortunately, there is no way to recover the data. This is by design. Always store the recovery key in a safe place.

Drive not recognized after encryption – Try plugging into a different USB port. If it still doesn’t appear, open Disk Management (right-click Start > Disk Management) and see if the drive shows as “BitLocker Encrypted�. If it does, you can unlock it from there.

“Access denied� when unlocking – Ensure you are entering the correct password. If you’re using a recovery key, type it without spaces. If the drive was encrypted on another PC, make sure you have the right key.

Frequently Asked Questions

Can I use BitLocker on Windows 11 Home?
No, BitLocker To Go is only available in Pro, Enterprise, and Education editions. Home users can use third-party encryption software.

Will encryption slow down my USB drive?
Yes, there is a slight performance overhead, especially on older drives. The impact is usually minimal for everyday file transfers.

Can I encrypt a USB drive that already has files on it?
Yes, but it’s safer to back up the files first. The encryption process may fail if the drive has errors, and you risk data loss.

What happens if I unplug the drive during encryption?
It can corrupt the drive. Always wait until encryption is complete. If it happens, you may need to reformat the drive.

Can I use the encrypted USB drive on a Mac or Linux computer?
Windows can read it, but macOS and Linux cannot natively. You can install third-party drivers or use a cross-platform encryption tool like VeraCrypt.

How do I change the password on an encrypted USB drive?
Right-click the drive, select “Manage BitLocker�, then click “Change password�. You’ll need to enter the current password first.

Related

• Windows 10 Settings to Customize First
• Venmo Payments: How to Pay & Protect Your Purchase
• Copy Contacts from iPhone to Samsung S8 Plus