Encrypt Your Devices

What is device encryption?

Device encryption helps protect your data, and it's available on a wide range of Windows devices. If you turn on device encryption, the data on your device can only be accessed by people who've been authorized. If device encryption isn't available on your device, you may be able to turn on standard BitLocker encryption instead.

How to encrypt your Mac

1. Go to System Preferences> Security & Privacy > FileVault.
2. Click “Turn On FileVault…”
3. IMPORTANT: Make a note of the recovery key that is displayed and store it away from your Mac.
4. Wait for encryption to complete, but it’s OK to continue using the computer.

How to encrypt your Windows device

Note: BitLocker is not available on Windows 10 Home edition. Is it available on my device? Device encryption is available on supported devices running any Windows 10 edition. If you want to use standard BitLocker encryption instead, it's available on supported devices running Windows 10 Pro, Enterprise, or Education. Some devices have both types of encryption. For example, a Surface Pro which runs Windows 10 Pro has both the simplified device encryption experience, and the full BitLocker management controls. Not sure which version of Windows you have? See Which Windows operating system am I running? To see if you can use device encryption

1. In the search box on the taskbar, type System Information, right-click System Information in the list of results, then select Run as administrator. Or you can select the Start  button, and then under Windows Administrative Tools, select System Information.
2. At the bottom of the System Information window, find Device Encryption Support. If the value says Meets prerequisites, then device encryption is available on your device. If it isn't available, you may be able to use standard BitLocker encryption instead.

Turn on device encryption

1. Sign in to Windows with an administrator account (you may have to sign out and back in to switch accounts).
2. Select the Start  button, then select Settings  > Update & Security > Device encryption. If Device encryption doesn't appear, it isn't available. You may be able to turn on standard BitLocker encryption instead.
3. If device encryption is turned off, select Turn on.

Turn on BitLocker

1. Go to Control Panel> BitLocker Drive Encryption.
2. Click “Turn on BitLocker” next to the drive you want to encrypt.
3. Enter a long and varied alphanumeric password or passphrase.
4. IMPORTANT: Make a backup of the recovery key using one of the displayed methods.
5. Choose whether to encrypt used disk space only (faster) and start the encryption process.

How to encrypt your iPhone

1. Go to Settings> Touch ID & Passcode [or Face ID & Passcode].
2. Press “Turn Passcode On” if not enabled already.
3. Press “Passcode options” to choose a custom numeric or alphanumeric code (recommended).
4. Confirm your device is encrypted by scrolling to the bottom of the Settings> Touch ID & Passcode. You should see the “Data protection is enabled” message.

How to encrypt your Android device

1. Plug in the device to charge the battery (required).
2. Make sure a password or PIN is set in Security> Screen lock.
3. Go to Settings> Security.
4. Press the “Encrypt phone” option.
5. Read the notice and press “Encrypt phone” to start the encryption process.
6. Remember to keep the phone plugged in until complete.