Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
Redmond desk2 min

How to Lock a BitLocker-Encrypted Drive in Windows 11

Use manage-bde or PowerShell to lock a BitLocker-protected data drive in Windows 11, and learn what to know before unlocking it again.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To lock a BitLocker-protected data drive in Windows 11, open Command Prompt and run manage-bde -lock D:, replacing D: with the drive letter you want to lock. The drive will require an unlock method before its data can be accessed again.

Lock a data drive from Command Prompt

  1. Open Command Prompt. Use an account with the permissions needed to manage the BitLocker volume.

    As an Amazon Associate I earn from qualifying purchases.

  2. Enter manage-bde -lock D:, substituting the target drive letter and retaining the colon. For example, to lock a drive mounted as F:, run manage-bde -lock F:.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  3. Press Enter. Microsoft documents this command as locking a BitLocker-protected drive so it cannot be accessed unless an unlock key is provided. Microsoft Learn: manage-bde lock

    #1 Best Overall
    Integral 16GB Crypto-197 256-Bit Hardware Encrypted 3.0 USB Secure Flash Memory Drive - Certified to FIPS 197, Brute-Force Password Attack Protection & Rugged Double-Layer Waterproof Design
    • Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
    • Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
    • Rugged Double-Layer Waterproof* Design - Protects the crypto drive against knocks, drops, break-in and submerging in water. The electronics are shielded by a hardended inner case. The rubberised silicone outer casing provides a final layer of protection
    • Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
    • Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password

Use PowerShell instead

In PowerShell, run Lock-BitLocker -MountPoint "E:", replacing E: with the target volume’s mount point. Microsoft documents this cmdlet for locking BitLocker-encrypted volumes. Microsoft Learn: Lock-BitLocker

Lock-BitLocker cannot lock the volume that hosts the operating system. The documented command-line example is for a data drive; do not assume you can lock the currently running Windows system volume. Microsoft’s Windows BitLocker operations guide lists Command Prompt tools, the BitLocker PowerShell module, and Control Panel among management paths, but the sources cited here do not provide a Control Panel-specific lock procedure.

If the volume is in use

PowerShell provides the -ForceDismount option to attempt to lock a volume even when it is in use. For example: Lock-BitLocker -MountPoint "E:" -ForceDismount. Use this only when needed: forcing a dismount can interrupt access to the volume. It is not part of the ordinary locking command. Microsoft Learn: Lock-BitLocker

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Kingston IronKey Vault Privacy 50 16GB Encrypted USB
  • FIPS 197 with XTS-AES 256-bit Encryption: Provides business-grade security with hardware-based encryption to protect your sensitive data
  • Brute Force and BadUSB Attack Protection: Safeguards against unauthorized access attempts and malicious USB attacks with digitally-signed firmware
  • Multi-Password Option with Complex/Passphrase modes: Offers flexible password configuration options to meet various security requirements and user preferences
  • New Passphrase Mode: Enhanced security feature allowing users to create longer, more memorable password phrases for easier access without compromising protection
  • Dual Read-Only (Write-Protect) Settings: Enables write protection functionality to prevent accidental data modification or deletion when needed
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Locking is different from turning BitLocker off

A lock prevents access to a protected volume until it is unlocked. It does not turn off BitLocker, suspend protection, or change the volume’s key protectors; Microsoft documents those as separate management operations. Microsoft BitLocker operations guide and manage-bde command reference

Automatic unlocking is also configured separately. For a data drive, manage-bde -autounlock -disable D: disables automatic unlocking, while the corresponding -enable option enables it. These settings control automatic unlocking; they are not substitutes for the lock command. Microsoft Learn: manage-bde autounlock

Unlock the drive when you need it again

Locking and unlocking are separate operations. Before locking a data drive you will need to reopen, make sure you have an applicable unlock method available. Microsoft documents manage-bde -unlock with either a recovery password or a recovery-key file; follow the command reference for the appropriate syntax and supply your own drive and recovery details. Microsoft Learn: manage-bde unlock

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.