Windows 10: encrypt hard drive - so it'll work

Under Windows 10, you can completely encrypt your hard drive with the security tool "BitLocker". This program is already integrated in Windows and easy to use - at least if your mainborad has a TPM chip. This guide shows you how to encrypt your drive and how to use "BitLocker" even without a TPM chip.

Encrypt hard disk in Windows 10 with BitLocker

If you have installed a TPM chip in the mainboard, the encryption of your hard drive is very easy under Windows 10.

1. Type "BitLocker" under "Search Web and Windows" at the bottom of the taskbar.
2. In the result list, select the entry "Manage BitLocker".
3. The hard drives that you can encrypt with "BitLocker" are listed here.
4. As soon as you click "Activate BitLocker" next to the hard drive, you can set up encryption.
5. However, if the error message appears that you have to "Allow BitLocker without a compatible TPM", your mainboard does not have a TPM chip and you have to take a detour.

Encrypt drive under Windows 10 without TPM chip

1. Go back to the "Search Web and Windows" field and enter "Group Policy".
2. Then click on the "Edit Group Policy" entry.
3. A new window is opening up.
4. Here go to the sub-directory "Administrative Templates"> "Windows Components"> "BitLocker Drive Encryption"> "Operating System Drives".
5. In the right window you have to select the entry "Request additional authentication at startup".
6. Clicking on the "Edit guidelines" link will now take you to other configurations.
7. Check "Enabled" and set the value "Do not allow TPM" after the "Configure TPM start" option.
8. Close the window with "Apply" and "OK" and click again on "Activate BitLocker".
9. Then your computer will be checked briefly.
10. When the verification is complete, you will be asked whether you want to lock your computer with a USB stick or a password.
11. Finally, you have to choose whether "BitLocker" should encrypt the remaining free memory or the entire hard disk. If you have freshly installed Windows 10, the first choice is recommended. Otherwise you should use full encryption.
12. "BitLocker" now works in the background on the encryption of your hard drive. You can continue to work normally.
13. From now on, your system will only boot if you enter the correct password or connect the correct USB stick.