Microsoft confirms Microsoft Windows 11 24H2 turns on Device Encryption by default

Microsoft Windows Latest beforehand reported about Microsoft’s plan to introduce Device Encryption toggle in Settings of model 24H2 on Pro editions. Device Encryption might be enabled by default once you first arrange a Microsoft Windows 11 PC with Pro and Home editions. In addition, Microsoft will implement an automated Device Encryption setup after resetting your PC.

In our assessments, Microsoft Windows Latest beforehand noticed that Device Encryption is turned on by default. Over the weekend, customers additionally observed that Microsoft has already enabled it in Microsoft Windows 11 24H2 RTM preview builds, suggesting the characteristic is probably going coming this yr when the updates rolls out to everybody.

When we requested Microsoft, the corporate confirmed to Microsoft Windows Latest that it lately adjusted the conditions to allow device encryption.

“We have adjusted (removal of Modern Standby/HSTI validation and untrusted DMA ports check) to enable device encryption so that it is automatically enabled when doing clean installs of Microsoft Windows 11,” Microsoft stated in an announcement.

Also, do not forget that BitLocker is turned on routinely solely once you clear/contemporary set up or reinstall Microsoft Windows 11 24H2. Microsoft advised Microsoft Windows Latest that BitLocker is just not enabled once you improve from any model of Microsoft Windows.

For instance, should you’re on Microsoft Windows 10 or Microsoft Windows 11 23H2 and improve to model 24H2, BitLocker encryption received’t be enabled by default. You’ll not lose any of your recordsdata.

Device Encryption depends on Microsoft account or exterior USB

As Microsoft explains in its documentation, Device Encryption makes use of BitLocker to encrypt the info utilized to all system drives. You should backup your BitLocker key to your Microsoft account or reserve it to an exterior USB disk. Without this, you can’t entry your information.

Microsoft Windows can request the BitLocker recovery key whereas resetting or reinstalling the working system. However, procuring the recovery key could be difficult if the characteristic is enabled with out the person’s approval. If you lose entry to your Microsoft Account, additionally, you will lose entry to the PC.

BitLocker has a checklist of {hardware} necessities, together with a TPM 1.2 or latester chip and UEFI. Since Microsoft Windows 11 checks for these adjustments throughout set up, escaping BitLocker is not possible. However, there are workarounds.

How to show off automated Device Encryption in Microsoft Windows 11

During set up, you possibly can disable Device Encryption using a Registry hack:

1. Press Shift + F10 to open the Command Prompt window. Type regedit and press Enter to launch Registry Editor.
2. Navigate to the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlBitLocker subkey.
3. Right-click the empty facet and choose the New > Dword (32-bit) Value choice from the context menu.
4. Name the worth “PreventDeviceEncryption”.
5. Set the worth date to 1 and click on on the OK button.
6. Close the Registry Editor.

You can even create a bootable USB drive with Rufus. It can put together a modified Microsoft Windows 11 set up media to bypass system necessities and disable BitLocker.

With Rufus, you possibly can work together with the GUI interface, which is more accessible for much less tech-savvy Microsoft Windows customers.