Securing Your Data: A Step-by-Step Guide to Encrypting a USB Drive on Windows 10/11

Quick Links

Key Takeaways

Windows 10 and 11 Pro users can easily encrypt and decrypt flash drives using the built-in BitLocker feature, providing a convenient way to protect sensitive information.
BitLocker uses powerful encryption technology (AES-128) that is virtually impossible to crack, ensuring the security of your data.
While BitLocker is suitable for protecting sensitive information on portable computers, there are third-party encryption options available for Windows Home users.

Flash drives are convenient, but they’re also easy to lose and often contain sensitive information you don’t want in the wrong hands. Luckily, Windows 10 and 11 Pro users can easily encrypt and decrypt flash drives with no additional software.

What Is BitLocker (And Why Use It)?

BitLocker is a powerful encryption feature in Windows 10 and 11 Pro that protects the data on your drives so that no one can read their contents without the encryption key. The default level of encryption is AES-128, which would take millions or even billions of years to crack using current supercomputers.

To use BitLocker, in addition to having the right version of Windows, your computer must be equipped with a TPM (Trusted Platform Module) of at least version 1.2. If your computer doesn’t have one, you’ll need to create a startup USB key . However, this is only relevant to internal system drives, and here we’re discussing removable media. Likewise, encrypting the drive that contains Windows has special requirements regarding how the drive must be partitioned, but these requirements don’t apply to secondary internal drives or removable, non-bootable drives.

Full disk encryption isn’t something everyone needs to do, but if your computer has sensitive information on it that could harm you if the drive were stolen, BitLocker is a good way to protect yourself. It’s particularly useful for portable computers, since these have a much higher chance of being lost or stolen than a desktop system.

How to Encrypt a USB Flash Drive in Windows 10 or 11

If you’ve decided that BitLocker is the right solution for your removable drive, here’s how to set it up:

1. Plug in your USB drive.

2. Open File Explorer. You can use Windows+E to do this quickly.

3. Right-click on the flash drive in Explorer and select “Turn on BitLocker”. In Windows 11, you’ll have to click on “Show more details” first.

4. Wait for BitLocker to initialize the drive.

5. Choose a password.

6. Choose where and how to save your recovery key, which will let you decrypt the drive if you forget your password.

7. Choose whether to encrypt the whole drive or only used space. If the drive is empty and formatted, choose “Used Space”; otherwise, choose “Entire Drive.”

8. Choose the encryption type, which in almost all cases should be “Compatibility Mode.” This ensures that older versions of Windows can read the drive. Since we’re encrypting a portable drive, this is presumably something you want. However, if you’re only going to use this drive with one computer, feel free to select the newer encryption option instead.

9. Click “Start Encrypting” and wait for the process to finish.

If the process was successful, your drive is now protected by strong encryption and can only be accessed using its password.

How to Decrypt a USB Flash Drive in Windows 10 or 11

So what if you don’t want to have an encrypted flash drive anymore? One option is simply to format the drive, which will get rid of the encryption, but also all the data on the drive! If you don’t need the data anymore, this is the fastest and easiest way to get the drive back to its factory condition.

If you still need the data, you should simply copy it to another drive that’s not encrypted before formatting the encrypted drive. This is just a fast workaround, however. The proper way to decrypt the drive and preserve all the data on it is as follows:

Right-click on the drive in File Explorer and select “Manage BitLocker.” On Windows 11, you’ll have to click “Show more options” first.

In the BitLocker management Windows, choose “Turn off BitLocker” for the drive in question.

Then simply confirm as you did when first encrypting the drive.

Third-Party Encryption Options

As mentioned earlier, BitLocker isn’t included in Home versions of Windows. That doesn’t mean you have to be left in the lurch when it comes to keeping your data safe.

If you’re using a Home version of Windows, third-party apps like VeraCrypt (a free, open-source tool known for its robust security features) and AxCrypt (a user-friendly app with a subscription model) are great alternatives.

VeraCrypt is best for those who need high-level security without cost concerns, while AxCrypt offers a balance of ease of use and security for a modest fee.

Securing your data, especially on portable media that’s easily lost or stolen, is more important than ever. If you must carry sensitive information on-the-go, BitLocker is an excellent and easy solution.

Tech Haven

Securing Your Data: A Step-by-Step Guide to Encrypting a USB Drive on Windows 10/11