High level · Windows track

BitLocker Literacy

Disk encryption in plain language, recovery keys, and calm habits.

Encryption without a recovery key plan is a future locked door.

BitLocker encrypts a drive so a stolen disk is mostly useless without your key. On many modern PCs it is tied to TPM hardware. The literacy goal is simple: know if it is on, and know where the recovery key lives.

Open Settings → Privacy and security → Device encryption (wording varies) or search BitLocker.
Confirm the system drive shows encrypted / on.
Save the recovery key to a place that is not only on that same drive (print, password manager, Microsoft account if you use that path).
Do not turn BitLocker off to “go faster.”

manage-bde -status C:
Get-BitLockerVolume -MountPoint C: -ErrorAction SilentlyContinue |
  Select-Object MountPoint, VolumeStatus, ProtectionStatus

Some editions and OEM setups differ. If Device encryption is missing, that can be edition or hardware limits, not a personal failure.

General Windows literacy from Phyllux Tech Field House. Not remote support. Do not run scripts you do not understand. Never disable Defender for speed.

Back to Windows lab Previous