If you store personal documents, work files, or other important information on a USB flash drive, protecting it with a password can help prevent unauthorized access if the device is lost or stolen.
Windows 10 and Windows 11 let you password protect a USB drive using BitLocker To Go, a built-in encryption feature available in supported Windows editions. You don’t need additional software, and the same method works with USB flash drives and external storage devices.
In this guide, we’ll show you how to enable BitLocker, unlock your encrypted USB drive, and remove password protection when you no longer need it.
Before You Start: BitLocker Requirements
BitLocker To Go encrypts removable storage devices and protects their contents with a password. To enable it, you’ll need:
- Windows 10 Pro, Enterprise, or Education, or Windows 11 Pro, Enterprise, or Education.
- A USB flash drive connected to and recognized by your computer.
Before encrypting the drive, back up any important files, especially if they cannot be easily replaced.
Important: Windows Home does not let you enable BitLocker To Go directly. However, there are other ways to protect your files, which we’ll cover later in this guide.
How to Password Protect a USB Drive Using BitLocker
The process is nearly identical in Windows 10 and Windows 11. Follow these seven steps to encrypt your flash drive and protect it with a password.
Step 1. Connect Your USB Drive
Insert your flash drive or external USB drive into your computer. Open File Explorer and go to This PC to make sure Windows recognizes the drive.
Step 2. Turn On BitLocker for the USB Drive
Right-click your USB drive and select Turn on BitLocker. In Windows 11, you may first need to select Show more options to access the classic context menu.
Alternatively, search for Manage BitLocker in the Start menu, open the Control Panel utility, and locate your USB drive under Removable data drives – BitLocker To Go.
Step 3. Set a Password
When the BitLocker setup wizard opens, select Use a password to unlock the drive. Enter your password, confirm it in the second field, and click Next.
Choose a long, difficult-to-guess password or passphrase that you don’t use for other accounts.
Step 4. Save Your Recovery Key
BitLocker will ask you to back up a recovery key, which can help you regain access to your USB drive if you forget the password.
Depending on your Windows configuration, you may be able to save the key to a file, print it, or use another available backup option.
Keep your recovery key in a safe place, separate from the USB drive. If you lose both the password and the recovery key, you may permanently lose access to your encrypted files.
Step 5. Choose How Much of the Drive to Encrypt
BitLocker provides two options:
- Encrypt used disk space only: Faster and generally suitable for a new or empty USB drive.
- Encrypt entire drive: Encrypts both used and free space and is recommended if the drive has previously stored files.
Choose the option that best fits your situation and click Next.
Step 6. Select the Encryption Mode
When prompted to choose an encryption mode, select Compatible mode if you plan to use the USB drive on different Windows computers.
This option is recommended for removable drives and provides broader compatibility with supported Windows versions.
Step 7. Start Encrypting the USB Drive
Click Start encrypting and wait for BitLocker to complete the process. Do not disconnect the USB drive while encryption is running.
Once the process finishes, your USB drive will be encrypted and protected by the password you configured.
How to Unlock a Password-Protected USB Drive
After enabling BitLocker, you can access your encrypted files by entering the password whenever you connect the drive to a compatible Windows computer.
Follow these steps:
- Connect the USB drive and open File Explorer.
- Go to This PC and double-click the protected drive.
- Enter your password and click Unlock.
If the password is correct, you can open, copy, and modify your files normally.
You can also enable automatic unlocking on a trusted computer, although this is not recommended on shared or public devices.
Note: A USB drive encrypted with BitLocker on a supported Windows edition can also be unlocked on compatible Windows Home systems, even though Home cannot enable BitLocker To Go encryption.
How to Remove Password Protection from a USB Drive
If you no longer need to protect your USB drive, you can turn off BitLocker and remove the encryption.
- Connect the USB drive and unlock it with your password.
- Search for Manage BitLocker in the Start menu.
- Find your USB drive under the removable drives section and select Turn off BitLocker.
- Confirm your choice and wait for Windows to finish decrypting the drive.
This removes the encryption without formatting the drive or deleting its files. However, do not disconnect the drive until decryption is complete.
Keep in mind that changing your BitLocker password is different from turning off encryption. If you only want a new password, you can change it through BitLocker management without decrypting the drive.
How to Protect a USB Drive in Windows Home
Windows 10 Home and Windows 11 Home do not include the option to enable BitLocker To Go.
Although some Windows Home devices support Device Encryption, this feature is intended for operating system and fixed drives, not for manually encrypting USB flash drives with BitLocker To Go.
If you’re using Windows Home, consider these alternatives:
- 7-Zip: Create password-protected encrypted archives and store them on your USB drive.
- VeraCrypt: Create encrypted containers or encrypt an entire removable drive using third-party software.
- Use another Windows Pro computer: Encrypt the USB drive with BitLocker To Go on a supported Windows edition, then unlock it on compatible Windows systems.
If you only need to protect a few documents, 7-Zip may be enough. See our guide on how to password protect a folder in Windows 10 and 11 for instructions.
For full-drive encryption on Windows Home, VeraCrypt offers a more comprehensive alternative, although it requires installing additional software and configuring the encryption properly.
Can You Use a BitLocker USB Drive on Another Computer?
Yes. A USB drive encrypted with BitLocker To Go can be unlocked on other compatible Windows computers as long as you know the password or have the recovery key. However, macOS and other operating systems do not provide full native support for BitLocker-encrypted drives. Additional software may be required.
For more technical information about supported removable drives, you can also refer to Microsoft’s BitLocker documentation.
BitLocker protects the files stored on your USB drive, but it doesn’t turn the drive into a Windows login key. If that’s what you’re looking for, you can also use a USB flash drive to lock and unlock your PC with tools like USB Raptor or Rohos Logon Key.
Conclusion
BitLocker To Go provides a convenient way to protect files stored on a USB flash drive without installing additional software on supported Windows editions.
Once encryption is enabled, remember to keep your recovery key in a safe place and maintain a backup of your important files.
