HomeOS
Learn · Windows PC

Turn on encryption and save your recovery key

10 min · recommended · HomeOS can check this for you
Why this matters. Encryption scrambles everything on the drive so it can only be read after you sign in. Without it, a thief can pull the drive out and read your files. Windows 11 Home calls it Device encryption; Pro calls it BitLocker. Either way, the recovery key is what saves you if the PC ever asks for it, so it must be stored somewhere safe.
1

Check Device encryption

Open Settings, then Privacy & security, then Device encryption, and switch it On. On Windows Pro you may see BitLocker drive encryption instead; turn it on for the C: drive.

Settings › Privacy & security › Device encryption — ☐ ✕
Device encryption
Helps protect your data by encrypting it.
On
BitLocker drive encryption
›
Illustration. Your screen may look a little different.
No Device encryption option? Some PCs lack the required hardware. Windows Pro users can use BitLocker instead.
2

Find your recovery key

On another device, go to aka.ms/myrecoverykey and sign in with the same Microsoft account. You should see this PC listed with a 48-digit key. If it's there, you're set.

account.microsoft.com › BitLocker recovery keys
Device name
FAMILY-LAPTOP›
Key ID
1A2B3C4D›
Recovery key
123456-…-654321›
Your PC should be listed here
Illustration. Your screen may look a little different.
Microsoft Support cannot recover a lost key, so check it's there before you need it.

Check your understanding

Where is your Windows recovery key usually saved?

In your Microsoft account. You can see it at aka.ms/myrecoverykey.

Want a checklist that tracks this for your whole family? Sign in to HomeOS.