Does BitLocker encrypt the entire drive? It depends on the encryption option. Encrypt Used Disk Space Only protects existing data, while Encrypt Entire Drive also encrypts unused space. This article from MiniTool Partition Wizard explains the differences and how to enable BitLocker encryption.

Does BitLocker encrypt the whole drive?

Yes, BitLocker can encrypt an entire drive, but the result depends on whether you choose Encrypt Used Disk Space Only or Encrypt Entire Drive.

Used Space Only is faster and encrypts data currently stored on the drive, while Full Drive Encryption also protects unused space.

This guide explains the difference between the two options and how to enable BitLocker encryption.

Guide to BitLocker Drive Encryption: Features, Setup, and Usage
Guide to BitLocker Drive Encryption: Features, Setup, and Usage

This guide introduces BitLocker drive encryption, including its key benefits, how to enable or disable it, and practical steps to manage encrypted drives.

Read More

How the Two Options Work

BitLocker offers two encryption options. The main difference is how much of the drive is encrypted during the initial encryption process.

Encryption optionWhat it encryptsSpeedBest for
Encrypt Used Disk Space OnlyCurrently used spaceFasterNew PCs or drives
Encrypt Entire DriveUsed and unused spaceSlowerPreviously used drives

Encrypt Used Disk Space Only

“BitLocker used space only” is a BitLocker option in Windows that encrypts only the data currently stored on the drive, while leaving unused space unencrypted.

Because it processes less data, the initial encryption is much faster and can often be completed in minutes rather than hours.

Here’s a quick look at the advantages and drawbacks.

  • Faster setup: It reduces the time needed to complete the initial encryption.
  • Ideal for new drives: For a brand-new PC or empty drive, it provides adequate protection because there is no previously stored data to recover.
  • Potential risk on used drives: If the drive previously contained deleted personal or sensitive files, remnants of that data may still be recoverable using specialized recovery tools.
  • Key dependency: Forgetting your password or losing your recovery key could result in permanent loss of access to your data.

Encrypt Entire Drive

BitLocker full disk encryption, also known as full disk encryption (FDE), encrypts all data on a drive, including system files, personal files, and unused space.

Although it takes longer, it offers stronger protection for previously used drives, especially those containing sensitive data.

The following are its advantages and risks.

  • Theft protection: Keeps your files unreadable if your laptop or drive is lost or stolen.
  • Secure disposal: Helps prevent sensitive data from being recovered from retired or discarded drives.
  • Key dependency: Losing your password or recovery key can permanently lock you out of your data.

Now that you understand how the two BitLocker encryption options work, let’s see how to enable BitLocker and choose the appropriate encryption option for your drive.

5 Easy Methods to Check If BitLocker Is Enabled in Windows 11/10
5 Easy Methods to Check If BitLocker Is Enabled in Windows 11/10

Learn how to check if BitLocker is enabled using File Explorer, Control Panel, Command Prompt, PowerShell, and MiniTool Partition Wizard.

Read More

How to Enable BitLocker Encryption

If you want to protect the data on your Windows drive, you can enable BitLocker using Windows’ built-in tools or a third-party disk management tool.

Here are two common methods.

Method 1: Via MiniTool Partition Wizard

If you prefer a simpler way to manage drive encryption, you can use MiniTool Partition Wizard. It provides an alternative solution for encrypting and managing your drives.

MiniTool Partition Wizard FreeClick to Download100%Clean & Safe

Step 1: Open MiniTool Partition Wizard.

Step 2: Right-click the drive you want to encrypt and select BitLocker Manager.

MiniTool Partition Wizard interface with BitLocker Manager from the right click menu selected for the highlighted drive.

Step 3: In the pop-up window, click Turn on BitLocker.

MiniTool Partition Wizard interface with BitLocker Manager window opened, and the Turn on BitLocker button highlighted.

Step 4: Select an unlock method, set your password, and click Next.

The BitLocker Drive Encryption window where to choose a method to unlock the drive.

Step 5: Select where you want to save the recovery key. In this example, choose Save to a file.

Step 6: Select a location to save the recovery key and click Save. Then click Next.

Step 7: Select how much of the drive you want to encrypt, then click Next.

  • Encrypt used disk space only: Encrypts only the space currently occupied by data. This option is recommended for new or freshly formatted drives.
  • Encrypt entire drive: Encrypts the entire drive, including existing data and potentially recoverable deleted data. This option is best for drives that have already been used.
The BitLocker Drive Encryption window where to choose how much of the drive to encrypt.

Step 8: Choose your preferred encryption mode, then click Next.

Step 9: Click Start encrypting to begin the encryption process.

The BitLocker Drive Encryption window where the Start encrypting button is highlighted.

Method 2: Via Control Panel

You can enable BitLocker directly through Control Panel:

  1. Open Control Panel and go to System and Security.
  2. Click BitLocker Drive Encryption.
  3. Select the drive you want to encrypt and click Turn on BitLocker.
  4. Follow the on-screen instructions to set up BitLocker and save your recovery key.
  5. Click Start encrypting and wait for it to complete.
The BitLocker Drive Encryption interface with the selected Turn on BitLocker option.
How to Turn on BitLocker Without TPM on Windows 10
How to Turn on BitLocker Without TPM on Windows 10

This post shows you how to turn on or off BitLocker without TPM on Windows 10.

Read More

Does BitLocker Encrypt the Entire Drive FAQ

1. Does BitLocker encrypt free space?
Not always. With Encrypt used disk space only, unused space is not encrypted initially. With Encrypt entire drive, BitLocker encrypts the entire volume, including free space.
2. Does BitLocker encrypt deleted files?
With Encrypt used disk space only, remnants of deleted files may remain in unencrypted space and could potentially be recovered. Encrypting the entire drive provides broader protection by encrypting the entire volume, including free space.
3. Can I change BitLocker from used space only to full drive encryption?
Not directly. To change from Encrypt used disk space only to Encrypt entire drive, you generally need to decrypt the drive and re-enable BitLocker with Encrypt entire drive selected.
4. What does XTS-AES 128 or XTS-AES 256 mean in BitLocker?
XTS-AES 128 and XTS-AES 256 are both encryption algorithms used for data encryption. AES is a technology used for data encryption, while XTS is an encryption mode used with AES that is suitable for protecting data on hard drives and other storage devices.
The numbers 128 and 256 indicate the length of the encryption key, which is 128 bits and 256 bits, respectively. A 256-bit key is longer and provides a higher level of security.

Bottom Line

BitLocker can encrypt an entire drive, but the coverage depends on the encryption option you choose. Encrypt used disk space only protects the space currently in use, while Encrypt entire drive secures the whole volume.

If you have any questions or feedback about MiniTool Partition Wizard, feel free to contact our support team at [email protected] for additional help.

  • linkedin
  • reddit