Device Encryption has been available since Windows 10. Having said that, although Microsoft has made a great effort to enhance security and ensure compatibility, there are still some issues that arise from time to time, such as when Device Encryption doesn’t function properly. What causes this issue, and how do we fix it? Let’s check out.
What Is Device Encryption?
Encrypting a device means scrambling data into unreadable code, so anyone can’t access it without a password or a recovery key. Data (called “plaintext”) gets encoded into a non-readable format using an encryption algorithm (called “ciphertext”). To decode this gibberish data, a user must have access to the recovery key or password.
The Device Encryption feature in Windows 11 protects the data on their devices.
Why Is Device Encryption Not Working on Windows 11?
To get to the bottom of why Device Encryption might not work on your Windows 11 Home PC, we need to understand the two features it’s connected to — Sleep and Modern Standby.
In Sleep mode, the computer stops all its operations to save energy. All open documents and applications are copied to the Random Access Memory (RAM), and the computer enters a low-power state. Your computer in this state is locked and encrypted, and Microsoft uses BitLocker to do so. The version of BitLocker on Windows 11 Home does not include advanced features as it does for Windows 11 Pro, which can lead to issues like longer wake times.
Read more: A Quick and Dirty Guide to RAM: What You Need to Know
Microsoft introduced Modern Standby to combat this problem, which enables Windows PCs to transition between on and off states faster. This feature allows certain programs to run in the background when your PC enters the encrypted sleep mode. However, to decrypt the data encrypted in the sleep mode, Modern Standby needs to access Device Encryption.
When writing this article, the Modern Standby feature is unavailable on some Windows 11 Home PCs. Unfortunately, this results in the Device Encryption option being missing as well, since both the features work synchronously. In essence, a bug in Windows 11 Home PC prevents data from being encrypted when the computer goes in any low power modes.
How to Check if Device Encryption Is Missing on Windows 11 Home
Here is how you can check if Device Encryption is missing on your Windows 11 Home edition:
Launch File Explorer and head over to This PC. Now check if there is an unlock icon next to the C drive. If you locate one, then it implies that your device is encrypted. Alternatively, you can also open Windows Settings by pressing Windows + I keys simultaneously. Inside the Settings window, click on Privacy & security from the left pane and find Device encryption in the right section. If you cannot locate Device encryption as shown below, it is missing on your Windows 11 Home edition.
Enable Device Encryption on Windows 11 Home
If you have the Device Encryption feature on your Windows 11, follow the methods mentioned below to enable it. However, it is important to note that before you can use encryption, you must meet certain conditions including:
TPM Module 2. 0 (Trusted Platform Module) with support for Modern Standby TPM must be enabled UEFI (Unified Extensible Firmware Interface) firmware
Modify Windows Settings
Windows Settings contains a dedicated Privacy & security section that allows you to customize the relevant settings easily. Log in to Windows with an administrator account.
Then, follow these steps to enable Device encryption if it isn’t enabled by default.
Press Windows + I keys simultaneously on your keyboard to open Windows Settings. Select Privacy & security from the right pane in the Settings window and click on Device encryption in the right pane. Turn the toggle for Device encryption on and close the Settings window.
Other Options to Encrypt Data on Windows 11 Home
If you cannot locate the Device Encryption option in Windows Settings, then here are some other options that you can try to encrypt data on Windows 11 Home:
Use OneDrive
Microsoft OneDrive offers a Personal Vault that lets you protect sensitive content with robust authentication methods, such as your fingerprint, face, PIN, a code sent to you via email or SMS, or a code put into the Microsoft Authenticator app.
Here is how you can use Personal Vault on Microsoft Drove to encrypt your data:
Launch File Explorer and select OneDrive from the left pane. Now double-click on the Personal Vault folder in the right pane. OneDrive will ask for authorization from User Account Control the first time you open it. You can now transfer the files that you want to this folder.
The Vault will lock automatically after 20 minutes of your inactivity. To lock it immediately, right-click anywhere inside the folder and select Lock Personal Vault. You can access this vault on all devices logged into the same OneDrive account.
Use a Third-Party Application
Another easy way to encrypt your Windows 11 device is by using a third-party application.
There are several open-source, free encryption applications that can help you do so, including:
VeraCrypt Boxcryptor DiskCryptor
Install your preferred application and select encryption options like a PIN code or a password.
Encrypt Your Windows 11 With Device Encryption
We hope that by now, you have managed to enable Device Encryption on Windows 11.
The use of encryption is essential in protecting private information and sensitive data and enhancing communications between clients and servers. It is crucial if you leave your computer unattended for an extended period, and you don’t want anyone snooping around.
