How to Encrypt a USB Drive With BitLocker To Go

Quick fix: Plug in USB drive. Open File Explorer. Right-click drive → Turn on BitLocker. Pick password. Save recovery key (printed / Microsoft account / file). Pick encryption type: Used disk space only (faster, new drives) or Entire drive (more secure, used drives). Start. After encryption: drive prompts for password on every plug-in.

BitLocker To Go: encrypt USB drives for portable data security. Requires password to access on any Windows PC. Pro / Enterprise edition only for encryption; Home can read.

What causes this need

USB drives lost / stolen leak data. BitLocker To Go encrypts entire drive. Without password: contents unreadable. Useful for:

• Sensitive documents on travel USB.
• Corporate confidential files.
• Backup drives with personal data.
• External SSDs.

Method 1: Enable BitLocker on USB

The standard route.

1. Plug in USB drive.
2. Open File Explorer. Right-click drive → Turn on BitLocker.
3. BitLocker setup wizard.
4. Pick how to unlock:
   • Use a password: recommended.
   • Use a smart card: corporate environments.
5. Enter password. Confirm.
6. Save recovery key:
   • Print.
   • Save to Microsoft account (uploaded online).
   • Save as file (on different drive!).
7. Pick encryption:
   • Used disk space only: faster, new drives.
   • Entire drive: more secure for used drives (overwrites previously-deleted data).
8. Pick encryption mode:
   • New encryption mode: best for Windows 10+.
   • Compatible mode: works on Windows 7 / 8.
9. Start encryption. Takes 15-60 minutes depending on size.

This is the standard fix.

Method 2: Use BitLocker on subsequent unlocks

For daily use.

1. After encryption: drive shows lock icon in File Explorer.
2. To unlock: double-click drive. Password prompt appears.
3. Enter password. Drive unlocks for current session.
4. For auto-unlock (this PC only): tick Automatically unlock on this PC in unlock dialog. Stores key locally.
5. For non-Windows: BitLocker To Go drives can’t be used on Mac / Linux without third-party tools (Hasleo BitLocker Anywhere for Mac).
6. For sharing: receiver needs Windows + password.
7. For chronic password forget: recovery key is essential. Don’t lose it.

This is the usage route.

Method 3: Disable BitLocker on USB if needed

For removing encryption.

1. Unlock drive first.
2. Open Control Panel → BitLocker Drive Encryption.
3. Find USB drive in list. Click Turn off BitLocker.
4. Confirm. Decryption starts. Takes time similar to encryption.
5. After: drive normal (unencrypted).
6. For chronic switching: don’t encrypt unless you need it. Encryption / decryption cycles wear drive.
7. For changing password: same Control Panel → Change password.
8. For backup recovery key: same path. Re-save key.

This is the disable route.

How to verify the fix worked

• USB drive shows lock icon in File Explorer.
• Plugging into another PC: password prompt.
• Wrong password: drive contents inaccessible.
• Recovery key works as fallback.

If none of these work

If can’t enable: Windows Home: doesn’t support BitLocker encryption (only reading). Upgrade to Pro. For corporate-managed PC: Group Policy may force specific encryption settings. For drive too small / large: BitLocker To Go works on 64MB+. For chronic password issues: keep recovery key safe. For drive used on multiple OS: BitLocker is Windows-only. Use VeraCrypt (cross-platform) instead. For Linux access: Dislocker tool can read BitLocker drives on Linux.

Bottom line: Right-click USB drive → Turn on BitLocker → password → save recovery key → encrypt. Pro / Enterprise edition needed for encrypt. Save recovery key in multiple places.