Get secure by encrypting your PC with Microsoft BitLocker for Windows 8 Pro

Encrypt Your PC

While the release of Windows Vista was plagued with burden and its legacy was remembered as such, one first-class feature to ascent out of the wreckage has served its way through Windows 7 upwardly to current mean solar day Windows viii operating systems. The characteristic that we are referring to is, of grade, Microsoft'due south BitLocker Drive Encryption – full disk encryption at the click of a push button.

Alert: Disk Encryption is a delicate process, please be sure to fill-in your data earlier kickoff. WPCentral, Mobile Nations, Smartphone Experts are not responsible for any information loss acquired by a failure to read instructions carefully or ignoring our recommendation to backup ALL of your data before offset. Delight be sure to read the unabridged article earlier beginning your encryption journeying. If you lot have doubts nearly anything, please enquire in the comments below earlier proceeding.

BitLocker Bulldoze Encryption

The encryption software was originally simply included inside Ultimate and Enterprise editions of previous operating systems can now be found in the more affordable Windows eight Pro variation. The system itself has the power to full encrypt a disk with an AES algorithm.

The Avant-garde Encryption Standard (AES for short) was published by the The states National Institute of Standards and Technology in 2001. As of a 2022 cryptanalysis of the cipher, information technology was plant that at that place are possibilities other than using a brute strength attack to pause into an AES encrypted arrangement, but none of them are currently possible with present day computer systems.

The Pros and Cons

If you are looking to encrypt your Windows 8 Pro PC, you should probably consider a few notions before proceeding. To offset, you lot should be aware that in the event of disk or operating system corruption, you are more probable to lose your data if the drive is encrypted. While a usually corrupted PC can be booted upwardly into a Linux variant and the information recovered with software – encryption makes this job ever more difficult and sometimes incommunicable (despite having a recovery key, as we will talk over).

BackTrack is ane of many Linux distros that tin be used to intermission into a Windows file arrangement

Another factor that makes encrypting your disk a bit less invaluable is cloud storage; the files that you are trying and so much to protect on your PC are hovering in space, in an unencrypted system. Certain, many online data services vary and the one you use might exist using encryption, but for the most part – they are not. If you are using Microsoft's OneDrive service to keep your files updated and backed up, so you are storing your files in an unencrypted cloud. An excellent wiki article on OneDrive and data encryption (or the lack of it) can be found on Microsoft's support site by clicking here.

Let the states be realistic though, unless you are trying to protect your data from the government (which might be a reality these days), then you probably will non have to worry nearly someone hacking into Microsoft's servers to steal your tax information. So permit us leave that notion aside and note that you about likely merely want to protect your data from being accessed if your laptop or tablet is stolen.

Deejay encryption is an excellent solution for preventing thieves from booting up your organization with a side-loaded operating system to access your files. Encryption can provide a reliable and potent shield confronting the hacker looking to sniff your personal data.

Here, an offline registry editor is used to remove a user'due south password from their Windows account

If you have decided that you wish to give BitLocker encryption a go, and then we are ready to proceed. Nosotros, of form, recommend that y'all starting time backup all of your data in the event disk corruption occurring during the procedure (in fact, you should be backing up your information anyhow).

If your data is backed upwards and you are prepare to begin, then simply follow the steps below to a happier and more encrypted system.

How to Encrypt Systems with TPM Chips

Microsoft's BitLocker organisation was designed for utilize in conjunction with machines that have Trusted Platform Module chips installed within them. To simplify what the TPM chip does, it holds the keys needed to kick up and unlock the operating system.

If your PC now has a giant lock on it, then information technology merely makes sense that a key will be needed to unlock it. A TPM chip holds an encryption system's keys, so the system can exist easily booted. If the bulldoze is removed from the system (and thus separated from the TPM fleck), it cannot be booted. In add-on, if the arrangement is booted with a side-loaded operating system, the TPM fleck will not requite the keys up for use.

Many business machines accept TPM fries including Lenovo's ThinkPad series, Dell's Latitude serial, Microsoft'south Surface Pro, and HP'southward EliteBook series. If you do take a business machine with a TPM bit, then you tin can follow the instructions below; otherwise, skip to the next section to see how to encrypt a system without a TPM flake. If you are unsure whether or not your organization has a TPM chip, then follow the steps beneath and run across if you are addressed with an error.

Click on the in a higher place image to enlarge it.

To begin, please make certain that you are logged in as an administrator on your local automobile.
Next, open up "This PC" (recently known as "My PC" in previous versions of Windows.
With the "This PC" Explorer window open up, y'all should be able to encounter a consummate list of your devices and drives. Right click the drive y'all wish to encrypt (unremarkably the 'C' drive).
At present select the "Plow on BitLocker Pick". If you take a system with a TPM chip, it may now prompt y'all to active the chip via a simple "TPM Security Hardware" sorcerer. If you exercise not have a TPM bit, you will now be presented with an error message stating that – if so, skip to the next section of this article.
Later y'all have initialized your TPM flake (which may require a reboot), you can go ahead and brainstorm to active BitLocker. During the process you will be given a recovery countersign to use in emergencies; you tin cull to "relieve to your Microsoft account", "save the countersign on a USB bulldoze", "save the password in a folder", or "print the password". Nosotros propose choosing the Microsoft account selection, so you volition never exist at hazard of losing your recovery central. Ane your fundamental has been saved, click "Next" to continue.
The next screen will ask if you wish "Encrypt used disk space only" or if you wish to "Encrypt unabridged bulldoze" – we suggest going with the latter.
In one case yous have selected your recovery method and disk encryption amount you will be given one last take a chance to plough back. Ensure that the right drive is select, cheque the "Run BitLocker System Check" box and click go along to proceed. Annotation: Your PC may reboot during this process.
That is it! You should at present see an "Encryption in Progress" status bar showing the competition status of the disk you are encryption. While the disk is encrypting itself, yous will see a Drive Encryption icon in your taskbar – if any problems arise, y'all volition exist notified.
In one case the encryption has completely finished, you can use your reckoner equally normal – the system is at present safe!

How to Encrypt Systems without TPM Chips

Unfortunately, not all PCs manufactured include built in TPM chips. If y'all are running a consumer notebook or Microsoft's Surface ii – and then you will detect an error bulletin notifying you of the scenario; the mistake message may announced every bit follows:

"This device can't use a Trusted Platform Module. Your system administrator must set the "Allow BitLocker without a uniform TPM" selection in the "Crave additional hallmark at startup" policy for Os volumes"

For many people who are their own system administrators, this message can seem a bit daunting, but do not worry – if y'all really wish to encrypt your system with Microsoft'southward BitLocker solution, nosotros will assistance you out!

Click on the above image to enlarge it.

Nosotros will begin by irresolute a setting within the Group Policy Object Editor that will allow you to encrypt the organization despite non having the (quite wonderful) TPM chip.

To begin, become to your First Screen and type in "gpedit.msc", and hit enter. Alternatively, you can press "WINDOWS Central + R" to bring up a Run dialog and type in the control from there.
After typing the command, y'all will meet the Local Group Policy Editor pop upward in front of you. The editor is separate into ii parts, on the left hand side you will see a list of folders (much similar you would meet in Windows explorer) and on the right side, you will see a Window that will display options bachelor within the folder nosotros take selected. Notation: Please exist sure to follow all instructions as making the wrong change can seriously touch on your system. If you lot are unsure of something, please enquire in the comments below.
On the right hand side of the editor, start by selecting the "Administrative Templates" pick under "Computer Configuration".
On the right hand side of the editor, you should at present see a option of folders – double click "Windows Components", so double click "BitLocker Bulldoze Encryption", and finally double click "Operating Arrangement Drives".
You will at present see a list of items that appear to be files – these files are in fact settings that can be contradistinct by a system administrator. Double click the item entitled "Require additional authentication at startup". Note: There are 2 of these settings – practise Not click the one that includes "(Windows Server 2008 and Windows Vista)".
A dialog box will at present popup entitled, "Require boosted authentication at startup". Begin past selecting the chimera entitled "Enabled" (by default, "Not Configured" will exist selected).
The options that were in one case grayed below should become available. Bank check the box that says "Let BitLocker without a uniform TPM (requires a password or a startup key on a USB flash drive)". Get out all other options as they are and hitting "Utilise" followed by "OK". You can now shut the policy editor window.

Okay, at present that yous have enabled Microsoft'due south BitLocker inside Windows 8 Pro, information technology is fourth dimension to start encrypting that system! Follow the steps below to keep and encrypt the organisation.

Open "This PC" (recently known as "My PC" in previous versions of Windows).
With the "This PC" Explorer window open, you should be able to see a consummate list of your devices and drives. Right click the bulldoze yous wish to encrypt (usually the 'C' drive).
Now select the "Turn on BitLocker Option". If you were previously met with an fault before – that error should be gone now.
You will be prompted how you lot wish to unlock your drive upon booting it upwardly. Every bit the car cannot store its key on a secure TPM bit, yous will have to select another way to shop it. Either y'all tin can use a USB flash bulldoze by selecting "Insert a USB flash drive" or yous tin can enter a password at boot past selecting "Enter a countersign". In this example, we are going to select "Enter a countersign". Note: If you lot cull the option to require a USB wink drive, you must have it on you at all times when you wish to boot the PC.
The organization volition now prompt yous to enter a password to unlock the drive. Utilise a password that contains capital and lowercase letters, numbers, symbols, and spaces for the highest level of security. While you do non accept to adhere to the suggestion, nosotros suggest creating the strongest password you tin can come with for BitLocker. Note: Be sure to think your password – if y'all practice not, so you volition be unable to kicking the system.
After you have entered your super secure password you will exist given a recovery countersign to use in emergencies; you can choose to "salve to your Microsoft business relationship", "salve the password on a USB drive", "save the password in a binder", or "print the countersign". We suggest choosing the Microsoft account pick, so yous will never exist at hazard of losing your recovery cardinal. One your central has been saved, click "Next" to continue.
The next screen will ask if you wish "Encrypt used deejay space only" or if you wish to "Encrypt entire drive" – we suggest going with the latter.
In one case you accept selected your recovery method and disk encryption corporeality you will be given one last chance to turn dorsum. Ensure that the right drive is select, bank check the "Run BitLocker System Cheque" box and click continue to proceed. Note: Your PC may reboot during this process.
That is it! You should now see an "Encryption in Progress" status bar showing the competition status of the disk you are encryption. While the disk is encrypting itself, yous will come across a Drive Encryption icon in your taskbar – if whatever problems ascend, yous will be notified.
Once the encryption has completely finished, you can use your figurer as normal – the system is now safe! Simply enter your countersign at startup (or plug in your flash drive) to kicking the system.

Some Questions You lot May Take

How do I disable BitLocker? Simple, right click on the encrypted drive in the "This PC" explorer window and select "Plow off BitLocker Drive Encryption", so select "Disable BitLocker Drive Encryption" from the dialog box that appears.
I forgot my password, how can I admission my auto? Kicking upward your encrypted automobile and the "BitLocker Drive encryption Recovery Panel" will appear. From hither, use the method that you selected above to access your recovery key and access the arrangement.
If I am using an external backup drive, should I continue using it? If y'all fill-in your data to the unencrypted drive, then yous might as well never have encrypted your drive. We propose either keeping the fill-in drive in a safe unless it is needed or using BitLocker to encrypt your external bulldoze.
How do I modify the encryption type of BitLocker? Utilise the Grouping Policy Editor as earlier, simply this time select the "Choose drive encryption method and cipher forcefulness". From there you tin can select exact blazon of encryption yous wish to use.
What virtually TrueCrypt? The encryption solution, TrueCrypt, is a great alternative to Microsoft's Bitlocker, and you tin can bank check it out by visiting their site here. Nosotros choose to use BitLocker every bit our encryption method for 2 reasons: It is the official solution provided by Microsoft and it is hands integrated into the Windows operating organisation.
I have add-on questions, what can I do? You lot tin offset by performing a Bing search to encounter if your question has already been been answered. Alternatively, yous can comment below, ask in our Windows viii forum, or send me a personal question via Twitter (@Marcham93).

Nosotros promise y'all enjoyed this article on encrypting your personal data. Securing your drive and data is the first stride towards a more secure hereafter. Call up though, if you accept your files exterior of the system by placing them on an unencrypted backup, unsecured cloud service, or unencrypted USB flash bulldoze – you are non safe.

DISCLAIMER: Like all security systems - if there is a volition, at that place is a way to break in. While BitLocker is an extremely secure method of protecting your data, there are possible exploits (every bit with all systems) that might allow an experienced hacker to access the system; you tin can read more about those exploits by clicking hither.

Do you lot encrypt your personal drive – practice you lot utilise Microsoft's BitLocker solution?

App folders in Start, new gestures, and more are coming to Windows 11 soon

More new features

App folders in First, new gestures, and more are coming to Windows 11 shortly

Microsoft is gearing upwards to release a handful of new features for Insiders in the Dev Channel on Windows 11, many of which will re-introduce functionality that was missing in the original shipping build of the OS. It'due south been ii weeks since the final Dev Aqueduct build was released, which got me wondering if annihilation is going on internally to warrant this pause in build releases.