How to Encrypt and Decrypt a USB Drive in Windows

Encrypting a USB flash drive protects your sensitive files and data when moving them between different locations. This tutorial shows you how to encrypt a USB flash drive in Windows 10 and Windows 11 so that no one can read or access the data stored inside without entering the correct password. You can then decrypt the USB drive with a password or recovery key, which is also very easy.

Tip: Did you know you can encrypt PDF files? Find out. How to Encrypt or Protect a PDF File Using Adobe Acrobat DC.

Why You Should Encrypt Your USB Drive

A USB drive is a portable device that provides a convenient way to store and/or transfer your data, although this can come with several security risks. If you don't encrypt your flash drive, anyone could get their hands on it and access your private files on their computer without your knowledge or consent.

Encrypting a USB drive is a reliable way to protect it from data theft or exposure. It also allows you to more securely delete your data before disposing of the drive, as it is nearly impossible to recover deleted data from an encrypted drive.

Use BitLocker to go

Windows 10 and 11 come with BitLocker, a feature that makes it easier to encrypt hard drives when used for USB drives, technically called “BitLocker To Go”. BitLocker is only available in Windows 10 and 11 Pro editions. If you're using Windows 7/8/8.1/10/11 Home, scroll down for other alternatives.

To encrypt a USB drive with BitLocker To Go in supported versions of Windows, follow these steps:

1. Connect the USB drive and open it in File Explorer.

1. Connect the USB drive to your Windows PC and let the computer recognize the drive. If you see "Autoplay" On your screen, click on it to view its options in a pop-up window.
   
2. Locate Open folder to view files.” The USB drive will open in File Explorer.
   

2. Turn on BitLocker

1. Open Control Panel in Windows.
2. Click System and Security -> BitLocker Drive Encryption Enable the feature from there.
   
3. In Windows 11, you can also go to Settings -> System -> Storage -> Advanced storage settings -> Disks and storage. The same can be accessed in Windows 10 from Settings -> Storage -> Disk and storage management.
4. Locate USB your and click Turn on BitLocker at the bottom of the screen.
   
5. You will be taken directly to Control Panel.
   

3. Use BitLocker to encrypt your USB drive

1. Wait a few seconds while BitLocker formats the drive. Do not remove the USB drive during this setup.
   
2. check box “Use a password to unlock the drive.”
   
3. Type a password you can remember inside the box. Enter your password Repeat it in a square. “Re-enter your password” , then tap "the following". If you have a physical smart card, you can use it to unlock your USB drive with a PIN.
   
4. You'll be prompted to back up your recovery key. This key allows you to access your USB drive if you lose your encryption password. Save or print this key, but remember to store it securely.
   
5. Select how much of the USB drive you want to encrypt: select the entire drive or just the used space. Then click "the following".
   
6. Choose either a new encryption mode or a compatible mode for the BitLocker drive. If you'll be using the USB drive on the same computer, choose the new encryption mode. However, if you want to use it on other computers running older versions of Windows, select "Compatible mode".
   
7. Wait a few minutes for encryption to complete. You can pause it mid-process.
   
8. After encryption is complete, you will see options like: BitLocker Management و Change your BitLocker password (After pressing Show more options In Windows 11, right-click the USB drive. In Windows 10, you'll see both options together, as it doesn't use context menus.
   
9. Windows 10 provides another option to turn on BitLocker in File Explorer itself. Click BitLocker In the ribbon menu followed by Turn on BitLocker To activate the encryption wizard.
   
10. Once the device is encrypted and you attempt to open the USB drive in Windows File Explorer, you'll see a lock button indicating that it's securely encrypted. To access the drive now, you'll be prompted to enter the password you created initially.
    
11. There are other options such as a smart card that will automatically unlock the drive on your computer or a recovery key if you forget your password.

Good to know: Learn how to enable quick removal of USB drives in Windows.

Use USB drive encryption software

If you're using a Windows Home edition, you won't be able to access BitLocker to Go. Consider using an encryption manager to encrypt your USB drive in Windows. We've got two of the best recommendations below.

1. VeraCrypt

Prepare VeraCrypt One of the best USB encryption alternatives for Windows. It also supports macOS and Linux. It uses 256-bit AES encryption, which is very strong and cannot be cracked by brute force. You don't need to install it on your Windows PC; simply download it directly to a USB drive.

1. Download whichever is the latest stable version of the installer. “VeraCrypt.exe” For Windows. In this case, we download the portable version.
   
2. Click Portable Installer and follow the on-screen instructions which include extracting the installer files to the Windows folder.
   
3. Click to run the app from Windows.b folder                                                                                                             
4. Once the home screen appears, select “Create a new storage unit”This will open a new pop-up window of the VeraCrypt Volume Creation Wizard. Choose the option “Encrypt a non-system partition/drive.”
   
5. Select the removable media drive to locate the storage unit.
   
6. Choose a USB drive encryption option that varies from basic AES to advanced encryption standards, such as Serpent و Twofish.
   
7. After entering Storage unit size in megabytes You will need to Enter password For USB drive storage.
   
8. To change your password later, click “Storage units -> Select device”. This allows you to select the USB drive for removable media, which is then displayed on the dashboard.
   
9. Locate Change the storage password For USB drive.
10. Rename password.
    

Advice: You want to format a USB drive We have some tips you might want to try that will help you do that.

2. HasLeo BitLocker Anywhere

HasLeo BitLocker Anywhere is a third-party BitLocker solution similar to Windows Pro BitLocker. Apart from Windows Pro, it also supports all Windows Home editions starting with Windows 7, 8, 8.1, 10, and 11, making it extremely easy to use.

1. Download the trial version of HasLeo BitLocker Anywhere And install it.
2. Go to dashboard And right-click drive letter To show lists procedures.
   
3. You will see an option Turn on BitLocker Once you right click on USB drive.
   
4. Enter passwords yours and confirm it to encrypt the drive. You can also Save advanced settings , Such as 256-bit encryption.
   
5. Wait for it to complete. USB encryption.
   

How to Decrypt a USB Drive in Windows

If you want to make your USB drive usable and shareable again after encrypting it, you will definitely need to decrypt it.

1. If you are using Windows BitLocker Or BitLocker To a third party, such as HasLeo , go to BitLocker Drive Encryption folder.
2. Click Turn off BitLocker In Device Manager.
3. You will receive a warning message as shown below. Click Turn off BitLocker.
   
4. Wait a few minutes for the USB decryption process to complete. You should see a status percentage message.
   
5. Once completed, you will see an alert message stating: “[USB] drive decryption complete”This means that BitLocker has been disabled for the USB drive.
   
6. If you are using VeraCrypt, it has an option Permanently decrypted Which you can access from the top tab. Volumes.
   

Frequently Asked Questions

Q1: What encryption does BitLocker use?
The answer: BitLocker has used the strong 256-bit XTS-AES encryption mode since Windows 1511 version 10, which has continued through the latest Windows 11 releases. This encryption is impossible to break with brute force attacks. With the improved algorithm, it also provides integrity support. Windows versions earlier than 1511 do not have this new encryption mode. You can also use an encryption standard lower than 128-bit with BitLocker.

Q2: Can you enable BitLocker using PowerShell?
The answer: PowerShell can perform many advanced functions, as it Full scripting interfaceTo enable BitLocker using PowerShell, open it in administrator mode (provided you have a Windows Professional edition) and type the following:

$Pin = ConvertTo-SecureString “205020” -AsPlainText -Force
Enable-BitLocker -MountPoint “Drive Letter:” -EncryptionMethod Aes256 -Pin $Pin -TPMandPinProtector -UsedSpaceOnly

After entering the password, the encryption process should start automatically.

Q3: Can QN encrypted USB be hacked?
The answer: An encrypted USB drive created with BitLocker, VeraCrypt, or similar powerful tools cannot be cracked with brute force attacks. However, encryption does not protect your data and files from human error. Revealing your password to unauthorized users could result in data breaches, so you should consider using a similar tool. Password manager.