How to Encrypt & Decrypt a USB Drive on Windows

This guide shows you how to protect the files on a USB flash drive by encrypting it with BitLocker To Go, a built-in Windows tool. You’ll learn the step-by-step process to lock the drive with a password, and how to unlock it on any Windows PC. You’ll need a Windows 10 or 11 Pro, Enterprise, or Education edition, because BitLocker is not available on Home editions.

What You’ll Need

A USB flash drive (any capacity; note that encryption will erase all existing data on it).
A Windows PC running Pro, Enterprise, or Education edition (Windows 10 or 11).
A strong password you can remember, or a place to store a recovery key.
Administrator rights on the PC (you’ll need to approve the BitLocker setup).

Step-by-Step

Plug in the USB drive – Insert the USB flash drive into a USB port on your Windows computer. Wait for Windows to recognize it and assign a drive letter (e.g., E:).
Open File Explorer – Press Win + E to open File Explorer. You should see your USB drive listed under “This PC” or “Devices and drives.”
Right-click the USB drive – In File Explorer, right-click on the USB drive’s icon. From the context menu, select “Turn on BitLocker”. If this option is grayed out, your Windows edition doesn’t support BitLocker (see Troubleshooting).
Choose how to unlock the drive – In the BitLocker To Go window, check the box “Use a password to unlock the drive.” Enter a password (at least 8 characters, mix of letters, numbers, and symbols) and type it again to confirm. Click Next.
Save your recovery key – BitLocker will ask how you want to back up your recovery key. This key can unlock the drive if you forget your password. Choose one of the options:
- Save to your Microsoft account – easiest if you have one.
- Save to a file – store the .txt file somewhere safe (not on the same USB drive).
- Print the recovery key – keep the printed copy in a secure place.
Click Next after choosing.
Choose how much to encrypt – You’ll see two options: “Encrypt used disk space only” (faster, only encrypts files already on the drive) or “Encrypt entire drive” (slower but more secure, encrypts all free space). For a new or empty USB drive, choose “Encrypt used disk space only.” For a drive with existing data you want to keep, choose “Encrypt entire drive” to ensure deleted files are also protected. Click Next.
Select encryption mode – Choose “Compatible mode” for USB drives that might be used on older Windows versions (Windows 7, 8, 10) or other devices. Choose “New encryption mode” if you’ll only use the drive on this PC with Windows 10/11. For maximum compatibility, select Compatible mode. Click Next.
Start encryption – Review your settings, then click “Start encrypting.” A progress bar will show the process. This can take a few minutes to an hour depending on drive size and encryption mode. Do not unplug the drive during this time.
Finish – When the progress reaches 100%, you’ll see a confirmation. Click Close. Your USB drive is now encrypted.
To decrypt (unlock) the drive – When you plug the encrypted USB drive into a Windows PC, a dialog will appear asking for the password. Enter your password and click Unlock. The drive will appear in File Explorer with a lock icon. To remove the password (decrypt permanently), right-click the drive, select “Manage BitLocker,” then choose “Turn off BitLocker” and confirm. This will decrypt the drive and remove the password.

Common Mistakes

Using a Home edition of Windows – BitLocker is not available on Windows 10/11 Home. You’ll need to upgrade to Pro or use a third-party tool like VeraCrypt.
Forgetting the password or recovery key – Without either, your data is permanently locked. Always save the recovery key to a safe place, not on the same USB drive.
Unplugging during encryption – This can corrupt the drive. Always wait for the encryption to finish.
Encrypting a drive with important data without backup – Although encryption shouldn’t erase data, it’s safer to back up files before starting.
Choosing the wrong encryption mode – If you plan to use the drive on older devices, selecting “New encryption mode” will make it unreadable there.

Tips

Use a strong password – At least 12 characters, including uppercase, lowercase, numbers, and symbols. Avoid common words or personal info.
Keep the recovery key in a password manager – If you save it as a file, store it in an encrypted vault or a secure cloud service.
Test the unlock on another PC – After encrypting, try plugging the drive into a different Windows computer to ensure it works.
Use “Compatible mode” for maximum flexibility – This ensures the drive works on Windows 7, 8, 10, and 11, and on Xbox or other devices that support BitLocker.
Encrypt a new drive first – If you buy a new USB drive, encrypt it before adding files. That way you can use “Encrypt used disk space only” for speed.

Troubleshooting

“Turn on BitLocker” is grayed out – Your Windows edition doesn’t support BitLocker. Check your edition by going to Settings > System > About. If it’s Home, you’ll need to upgrade or use a third-party tool.
Drive not recognized after encryption – Make sure the PC is running Windows 10/11 Pro or later. Some older devices may not support BitLocker To Go. Try plugging into a different USB port.
Forgot the password – Use the recovery key. When the password prompt appears, click “I forgot my password” and enter the 48-digit recovery key.
Encryption stuck at a percentage – Wait longer; large drives can take time. If it’s stuck for hours, try restarting the PC (the encryption will resume). Do not unplug the drive.
Drive asks for password on every computer – That’s normal. To stop it, you must turn off BitLocker (decrypt) on that drive.
Cannot open drive on a Mac or Linux – BitLocker To Go is Windows-only. Use a cross-platform tool like VeraCrypt for multi-OS use.

Frequently Asked Questions

Q: Can I encrypt a USB drive on Windows Home?
A: No, BitLocker is not available on Windows Home. You can use a free tool like VeraCrypt instead.

Q: Will encryption erase my files?
A: No, encryption doesn’t delete your files. However, it’s always wise to back up before starting, just in case.

Q: Can I use the encrypted USB drive on a Mac?
A: No, BitLocker To Go is not supported on macOS. You would need to use a cross-platform encryption tool.

Q: What happens if I forget the password?
A: You can use the recovery key to unlock the drive. Without the recovery key, your data is unrecoverable.

Q: Can I remove encryption later?
A: Yes, you can turn off BitLocker to decrypt the drive. This will remove the password protection.

Q: Is BitLocker encryption secure?
A: Yes, BitLocker uses AES encryption with 128-bit or 256-bit keys, which is considered strong for consumer use.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →