BitLocker is the disk encryption built into Windows Pro and Enterprise. Most people don't know if it's on or off. Worth checking because if you ever need to wipe the drive, move it to another PC, or recover data, BitLocker's status matters a lot.
Here are four ways to check, ranked from easiest to most technical.
Check from File Explorer
Open This PC. Look at your drives. If BitLocker is on, you'll see a small padlock icon over the drive's icon.
A closed padlock means BitLocker is on and the drive is locked (requires recovery key). An open padlock means BitLocker is on but the drive is unlocked because you're logged in. No padlock at all means BitLocker is off.
Check from BitLocker management
Open Control Panel (search for it in Start). Click System and Security. Click BitLocker Drive Encryption. You'll see a list of every drive on the PC and the status of each.
For each drive, the text shows either BitLocker on or BitLocker off. If on, there's also a Suspend, Resume, or Turn off option below.
Use Command Prompt to check status
For a quick technical check, open Command Prompt as admin (search for cmd, right-click, Run as administrator). Type:
manage-bde -status
Hit Enter. The output lists every drive and shows protection status, encryption method, and percentage complete if encryption is mid-process. Look for Protection Status: Protection On or Protection Off.
Check via PowerShell
PowerShell gives you a cleaner output. Open it as admin and run:
Get-BitLockerVolume
The result shows MountPoint, VolumeStatus, EncryptionPercentage, and ProtectionStatus for every drive. ProtectionStatus is the key column – On or Off tells you the answer immediately.
BitLocker in Windows Home edition
Windows Home doesn't have BitLocker. It has a similar feature called Device Encryption, which is auto-enabled on most newer devices. To check:
- Open Settings
- Click Privacy & security
- Click Device encryption
- The page shows on or off plus a toggle
If you don't see Device encryption in Settings, your PC doesn't support it (usually older hardware or systems without TPM 2.0).
What if BitLocker is on but I don't remember enabling it?
Windows 11 automatically enables BitLocker on most modern PCs during setup, especially business or work-enrolled devices. If you signed in with a Microsoft account, the recovery key is saved to your account.
Find your recovery key at account.microsoft.com/devices/recoverykey. Sign in and you'll see all BitLocker recovery keys tied to your account. Save these somewhere safe – if you ever can't boot Windows, you'll need them.
Turn BitLocker off if you don't need it
If you check the status and don't want encryption (maybe for a home PC that doesn't leave the house), you can disable it. In the Control Panel BitLocker page, click Turn off BitLocker next to the drive.
The decryption process takes anywhere from 30 minutes to a few hours depending on drive size. The PC stays usable during this. Don't shut down mid-decryption or you risk data corruption.
Why are you checking? Tell me what you're trying to do (move drive, recover data, etc.) and I'll point to the next steps.