Use two separate safeguards: keep independent copies of your files, and keep the BitLocker recovery key for each encrypted drive somewhere you can reach without that PC. A practical home setup is an external drive for backups that you disconnect when finished, plus a separate off-site or cloud copy if your files warrant it. Encryption protects data on a lost or stolen device; it does not make another copy of your files.
Why an encrypted PC still needs backups
BitLocker encrypts a drive to help prevent someone from reading its contents if the device or drive is lost or stolen. A backup serves a different purpose: it gives you files to restore after accidental deletion, hardware failure, damage, or malware. A recovery key can unlock an encrypted volume, but it cannot restore missing files; a backup can contain your files, but it does not replace the key needed to access the encrypted Windows drive.
As an Amazon Associate I earn from qualifying purchases.
Windows may describe the feature as Device Encryption or BitLocker Drive Encryption. Device Encryption is available on a wider range of devices, including some Windows Home PCs; BitLocker Drive Encryption is available on Pro, Enterprise, and Education editions. Both use BitLocker technology, but availability and management differ. Do not assume encryption is absent just because a PC runs Home.
A practical backup plan for a home PC
- Choose what must be recoverable. Identify the personal files you cannot afford to lose and select a backup method that covers them. Choose storage capacity based on your data and the backup method; no particular product or capacity suits every PC.
- Make an independent copy. Back up to an external hard drive or portable SSD, a cloud service, or both. The copy should remain available if the PC itself fails. If you use a local external drive, disconnect it after the backup finishes. CISA warns that a connected external backup drive may also be reached by ransomware, which can delete or corrupt backup data.
- Consider a second copy in a separate location. A cloud copy or another copy kept away from the PC can help if the computer and nearby external drive are lost or damaged together. Consider restore convenience, internet access, storage limits, and ongoing service costs when choosing. The right mix depends on how much data you have and how quickly you need to recover it.
- Confirm that the backup can be used. Check that the expected files are present and that you know how to restore them. A backup that cannot be located or opened will not help in a recovery.
- Keep a recovery route for the encrypted drive. Confirm that the recovery key for each encrypted drive is saved and accessible from somewhere other than the PC. Microsoft describes the recovery password as a 48-digit number and says it cannot retrieve, provide, or recreate a lost key.
Where to keep the BitLocker recovery key
Microsoft lists saving the key to a Microsoft account, a USB flash drive, a text file, or a printout as options. A text file must not be saved on the encrypted drive it is meant to unlock. Keep any key-bearing USB drive or printout away from the computer: a person who obtains both the PC and its key may be able to unlock the protected volume. Multiple copies can improve availability, but keep them secure and separate from the device.
#1 Best Overall
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
For a personal PC, Microsoft says the key is typically associated with the personal Microsoft account used on the device. Verify that the copy exists and that you can retrieve it before you need it; do not assume it was saved successfully. The key is sensitive access information, not another form of file backup.
How the backup options differ
| Option | What it contributes | Ransomware or location consideration | Restore considerations |
|---|---|---|---|
| External drive, disconnected after backup | A local copy of backed-up files | Disconnecting it when idle reduces the chance that ransomware on the PC can reach it. Store it separately from the PC when practical. | Local access can make file recovery convenient; usable capacity depends on the files and backup method. |
| Cloud or other off-site copy | A copy that is not physically beside the PC | Can provide separation from a local incident. Protection and availability depend on the service and account security. | Recovery depends on the service, internet access, and the amount of data to restore; ongoing storage or service costs may apply. |
| Windows recovery features | Windows repair, reset, or rollback options; some features restore limited system state | These are not a substitute for an independent copy of personal files. | Many recovery options require the BitLocker key. Supported Windows version, retention, and restored content vary by feature. |
The cited guidance supports keeping independent copies and an offline destination; it does not establish one ideal backup schedule, a fixed 3-2-1 arrangement, or a best backup application. Set a cadence that reflects how often important files change and how much recent work you could afford to lose.
Rank #2
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What Windows recovery tools can—and cannot—do
Recovery drive
Microsoft recommends preparing a recovery drive while Windows is working as a last-resort recovery option. Creating one erases the selected USB drive, so use a drive whose contents you do not need and store the finished recovery media safely. A recovery drive helps with Windows recovery; it is not a backup of personal files. Most Windows Recovery Environment recovery options require the BitLocker recovery key.
Windows 11 Point-in-time restore
Microsoft’s current documentation says Point-in-time restore requires Windows 11 version 24H2 or later and keeps restore points for up to 72 hours. If BitLocker is enabled, the recovery key is needed to perform a restore. Files stored in OneDrive or another cloud service are not affected by that particular restore. This short-retention feature is not a durable independent file backup.
Rank #3
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
If this is a work or school computer
Follow your organization’s recovery process rather than creating a separate personal key system or changing encryption settings on your own. Microsoft recommends central recovery-information storage in Microsoft Entra ID for Entra-joined computers and in Active Directory Domain Services (AD DS) for Active Directory-joined computers. Organizational policies can require recovery information to be stored before BitLocker is enabled. Because a recovery password can unlock the protected volume, access to centrally stored keys should be controlled. Ask IT how to retrieve the key and what backup destinations are approved.
Quick Recap
Best Value
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Rank #4
- 【Upgraded version】 - The mirror logo strip is combined with the striped non-slip design. The rounded corners of the shell are more suitable for holding. The strips play a heat dissipation function to ensure a stable and fast transmission process.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
