PrivacyTools.io
BitLocker logo
Official website learn.microsoft.com/windows/security/operating-system-security/data-protection/bitlocker
Screenshot of the BitLocker website

BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.

Our take

BitLocker requires no installation and is the lowest-friction path to full-disk encryption for Windows users who already have a supported edition. TPM integration means the drive unlocks transparently at boot without a passphrase, which is convenient but also means physical access to the machine can defeat the protection if TPM pins are not set. It is closed-source and Microsoft holds the encryption design, which is a genuine trust consideration compared to open alternatives. A reasonable baseline for Windows device encryption, particularly in managed enterprise environments, but not the right tool if you need cross-platform access or verifiable open-source code.

Listed in

BitLocker alternatives