Device Encryption feature has been part of the Windows operating system for over a decade now. It was originally introduced with Windows 8.1 (launched in 2013) and has been part of all versions of the Windows operating system since then.
In all versions of the Windows operating system until Windows 11 24H2, encryption was turned off by default. Users had to manually turn it on to start using it.
However, starting with Windows 11 24H2, Device Encryption is turned on automatically for the operating system drive and other fixed drives. When you install or reinstall Windows 11 24H2 on supported hardware and use a Microsoft/work/school account to sign in, the Device Encryption is turned on.
Windows 11 automatically encrypts drive(s) when you first sign in to Windows 11 with a Microsoft/work/school account and attaches the recovery key to the Microsoft/school/work account that you used to sign in. Yes, encryption is not automatically turned on when you use a local user account.
While the Device Encryption feature helps keep your data safe if your Windows 11 device gets stolen, you should turn it off if you are not happy with the default encryption or would like to encrypt your data with some other software.
NOTE: Device Encryption is different from the popular BitLocker Drive Encryption. While the Device Encryption feature is offered in all editions of Windows 11, the BitLocker Drive Encryption is exclusive to Pro, Enterprise, and Education editions. Needless to say, the BitLocker Drive Encryption offers advanced security compared to Device Encryption.
How to check if the Device Encryption is turned on your Windows 11 PC
Step 1: Open File Explorer using the search or by simultaneously pressing the Windows logo + E hotkey. Click on This PC in the left navigation pane to open This PC.
Step 2: If the Device Encryption is turned for an installed drive, you will see a padlock icon right on the Windows 11 installed drive icon (refer to the picture below).
Turn off Device Encryption in Windows 11
Follow the directions below to turn off the Device Encryption on Windows 11 PC.
Step 1: Open the Windows 11 Settings app by right-clicking the Windows logo icon on the taskbar and then clicking the Settings option.
Step 2: On the left pane of the Settings app, click Privacy & security. On the right side, click Device Encryption.
NOTE: If the Device Encryption does not appear, it’s likely because you have signed in to your Windows 11 PC with a standard user account. Please sign in with the Microsoft account and try again.
Step 3: The Device Encryption page displays the Drive Encryption’s status.
Step 4: Toggle off the Device Encryption option to turn off drive encryption.
Step 5: When asked for the confirmation, click the Yes button. That’s it! Windows 11 will start decrypting your files. Depending on the data size, Windows 11 might take a few minutes to hours to finish decrypting files.
Leave a Reply