Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Compatible Windows 11 Home PCs can encrypt their internal drives with Device Encryption. Check Settings → Privacy & security → Device encryption to see whether it is available and on. Windows 11 Home does not include the full BitLocker Drive Encryption management interface found in Pro, Enterprise, and Education, but it is not accurate to say Home has no built-in encryption.
Before changing firmware or hardware—or relying on encryption to protect your files—make sure you can access the recovery key. If Windows cannot unlock an encrypted drive automatically and you do not have the key, your files may be inaccessible.
Check whether Device Encryption is already on
- Open Settings.
- Select Privacy & security.
- Select Device encryption.
The page shows whether encryption is on or off. If it is already on, do not turn it off and back on just to test it. Instead, verify the recovery key and keep a separate backup of your important files.
On a supported device, Windows may turn Device Encryption on automatically during setup when you use a Microsoft account or work or school account. The recovery key may be attached to that account. A local account does not trigger automatic activation, but account setup and device eligibility should not be treated as the same thing: availability depends on the PC’s hardware and configuration.
#1 Best Overall
- 【Versatile Storage Expansion – For Gaming, Work & Everyday Use】 Running out of space on your PS5 or Xbox Series X/S? This external hard drive lets you store and play PS4 / Xbox One games directly, instantly freeing up your console’s internal storage for next‑gen titles. At the same time, it handles work file backups, media libraries, and cross‑device data transfers with ease. One drive, all your needs. *（Note: PS5 / Xbox Series X|S games cannot be run or stored directly from the external hard drive. However, by offloading your PS4 / Xbox One games, you can free up valuable space for newer titles.）*
- 【Patented Silicone Sleeve – Data Protection You Can Count On】 Worried about drops? We’ve got you covered. The patented built‑in silicone sleeve acts like a shock‑absorbing armor, cushioning your drive against bumps and falls. Whether it’s important work documents, precious family photos, or hard‑earned game saves, your data deserves this level of protection.
- 【Plug & Play, Compatible with Computers & Consoles】 No complicated setup—just plug in and go. Works seamlessly with Windows, Mac, and Linux computers, as well as PS4, PS5, Xbox One, and Xbox Series X/S. Process files at the office, back up data at home, or enjoy gaming in your downtime—one drive handles all your devices, simply and hassle‑free.
- 【USB 3.0 Ultra‑Fast Transfer – No More Waiting】 Tired of watching progress bars crawl? With USB 3.0 speeds up to 5Gbps, large files transfer in seconds. Whether you’re moving work documents, transferring hundreds of gigs of games, or backing up a year’s worth of photos, you get more done in less time.
- 【Sleek, Lightweight, and Ready to Go】 Weighing just 0.16 kg—lighter than a can of soda—this compact drive features a stylish mirror‑and‑frosted finish. Toss it in your bag and go, whether you’re heading to the office, visiting a friend for a gaming session, or giving a presentation on the road.
Before you turn it on
- Use an administrator account. The Settings option requires administrator access.
- Check your recovery key. Visit Microsoft’s recovery-key page and confirm you can sign in to the account used to set up or encrypt the PC. If the device is managed by work or school, the organization may control the key.
- Keep a normal backup. Encryption protects data at rest; it does not preserve files if a drive fails, the PC is damaged, or you delete something.
- Plan around system changes. Some TPM, Secure Boot, firmware, software, or hardware changes can cause Windows to ask for the recovery key. Verify the key before a BIOS update, repair, or drive migration.
A BitLocker recovery key is a unique 48-digit number. If you have several keys, use the recovery screen’s key ID to identify the matching one. Do not store the only copy on the encrypted PC.
Enable Device Encryption
- Sign in to Windows using an administrator account.
- Open Settings → Privacy & security → Device encryption.
- Set Device encryption to On.
- Allow Windows to complete the process. Keep the device powered and avoid interrupting it; completion time varies with the drive and system activity.
- Return to the same Settings page and confirm that the status is on. Then verify that the recovery key is accessible from the appropriate account or another safe location.
Device Encryption uses Windows’ BitLocker technology to protect the operating-system drive and fixed internal drives against offline access—for example, if someone removes a drive from a lost or stolen PC. It does not replace a Windows sign-in password or PIN, protect files from malware while Windows is running, or secure an already-unlocked session.
Verify encryption and recovery-key access
The Settings page is the simplest check. Advanced users can open Terminal or Command Prompt and run:
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteRank #2
- Store and access photos and files with Seagate One Touch, an on-the-go USB drive for Windows and Mac (reformatting may be required for use with Time Machine)
- The perfect compliment to personal aesthetic, this portable external hard drive features a minimalist brushed metal enclosure
- Great as a laptop hard drive or PC hard drive, simply plug in via USB 3.0 to back up with a single click or schedule automatic daily, weekly or monthly backups
- Edit, manage, and share photos with a one-year complimentary subscription to Mylio Create and a four-month membership to Adobe Creative Cloud Photography plan. (Must redeem within one year of drive registration. Not available in all countries.)
- Enjoy long-term peace of mind with the included two-year limited warranty and two-year Rescue Data Recovery Service plan
manage-bde -statusThis reports encryption status for the drives. To inspect protectors on the operating-system drive, run:
manage-bde -protectors -get C:These are diagnostic commands, not the normal Home-edition setup route. Their output does not prove that a recovery key is safely backed up online. Do not delete or modify protectors simply because they appear in the results.
For a personal Microsoft account, go to aka.ms/myrecoverykey, sign in, and match the key ID with the one shown on Windows’ recovery screen. A work or school device may use an organization-managed key; try aka.ms/aadrecoverykey or contact your IT administrator. Also check the account of the person who originally set up the PC, any printed copy, or a USB drive where the key may have been saved. Not every key will necessarily appear in the account you currently use. Microsoft cannot retrieve or recreate a lost key.
Rank #3
- Ultra fast data transfers: the external hard drive works with USB 3.0 thickened copper cable to provide super fast transfer speeds. Theoretical read speed is as high as 110MB/s-133MB/s and write speed is as high as 103MB/s.
- Ultra-thin and quiet: the motherboard adopts a noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- Compatibility: compatible with PS4/xbox one/Windows/Linux/Mac/Android,Stable and fast downloading on game console no difference from fast transmission when using on PC.
- Plug and Play: no software to install, just plug it in and the drive is ready to use. The hard drive chip is wrapped with aluminum anti-interference layer to increase heat dissipation and protect data
- Package Contents: 1* portable hard drive, 1 *USB 3.0 cable, 1*USB to type C adapter，1 *user manual, shell packaging, three-year manufacturer's warranty and free technical support services
If Device Encryption is missing
The option is not available on every Windows 11 Home PC. Check the edition at Settings → System → About, confirm that you are an administrator, then inspect the device’s eligibility:
- Open Start and search for System Information.
- Right-click it and select Run as administrator.
- In System Summary, locate Automatic Device Encryption Support or Device Encryption Support.
| System Information result | What it may indicate | Next step |
|---|---|---|
| Meets prerequisites | The device should meet the listed requirements. | Confirm you are using an administrator account and check the Settings path again. |
| TPM is not usable | The TPM may be absent, disabled in firmware, or not working correctly. | Check the PC maker’s guidance before changing TPM settings in BIOS/UEFI. |
| WinRE is not configured | Windows Recovery Environment may be unavailable or improperly configured. | Investigate WinRE repair rather than using an unofficial workaround. |
| PCR7 binding is not supported | Secure Boot may be disabled, or boot-time hardware may prevent the required binding. | Check Secure Boot and reassess with unusual boot-time peripherals disconnected, if appropriate. |
After addressing a reported cause, install pending Windows updates and restart. Firmware settings vary by manufacturer, and changing TPM, Secure Boot, or boot configuration can make Windows request the recovery key. Find and verify that key before making such changes. If the device still does not meet the prerequisites, there may be no supported Home-edition switch to force Device Encryption; avoid registry hacks and unofficial scripts.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Device Encryption vs. BitLocker Drive Encryption
| Device Encryption | BitLocker Drive Encryption | |
|---|---|---|
| Where it is available | On eligible devices, including some Windows Home PCs | Windows Pro, Enterprise, and Education |
| Typical setup | A simplified Settings toggle; it may also be enabled automatically during setup | Drive-by-drive management and more advanced configuration |
| Controls | Limited, streamlined management | More extensive recovery and policy controls |
| Where to manage it | Settings → Privacy & security → Device encryption | BitLocker Drive Encryption tools on supported editions |
| Best suited to | Home users who want basic protection against offline access | Advanced users and managed or business environments |
Microsoft describes Device Encryption as available on a wider range of devices, while its full BitLocker Drive Encryption management feature is not available in Windows Home. So the absence of a Manage BitLocker Control Panel link is not the right test for whether a Home PC can encrypt its drive: look for Device Encryption in Settings instead. See Microsoft’s Device Encryption guidance and BitLocker Drive Encryption documentation.
Rank #4
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
If Windows asks for the recovery key
- Do not guess repeatedly. Note the recovery-key ID shown on screen—often its first eight digits are enough to identify the entry.
- Using another device, open Microsoft’s recovery-key page and match the ID to the correct 48-digit key. For a managed work or school PC, check the organization’s recovery-key portal or contact IT.
- Check other likely locations if the key is not there: the Microsoft account of the person who first set up the PC, a printed record, a USB drive, or workplace IT.
- Enter the matching key on the recovery screen. If no copy is available, understand that resetting Windows can remove files, and the lost key cannot be recreated by Microsoft.
Starting with Windows 11 version 24H2, the recovery screen can show a hint of the Microsoft account associated with the key. That hint may help identify the account to check; it is not a replacement for the key.
Should you upgrade to Windows 11 Pro?
Not just to get basic encryption on a compatible Home PC: Device Encryption may already provide that. Pro is the relevant upgrade if you specifically need the full BitLocker Drive Encryption management interface, drive-by-drive controls, or advanced policy options. For most home users with an eligible device, enabling Device Encryption and keeping the recovery key safe is the simpler supported approach.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Whatever edition you use, encryption is only one part of protecting your data. Keep independent backups, secure your Windows sign-in and Microsoft account, and verify recovery access before making system changes.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
