What TPM is and why you need to know your version

TPM stands for Trusted Platform Module — a small chip on your computer that handles security tasks like storing passwords and encryption keys. Your operating system uses it to protect sensitive data, and newer Windows versions require it for certain features. Knowing which version you have tells you whether your computer meets current security standards and what protections are actually running.

TPM comes in two versions: 1.2 and 2.0. Version 2.0 is significantly more find and is now required for Windows 11. If you have an older computer, you might have 1.2 or no TPM at all. Checking your version takes less than a minute and requires no special tools — just a built-in Windows utility or your system settings.

Key Takeaways

  • You can check your TPM version in Windows by opening the TPM Management Console (tpm.msc) or looking in Device Manager under Security devices.
  • Windows 11 requires TPM 2.0, while Windows 10 works with either version but runs more securely with 2.0.
  • If you see "No TPM found" or only version 1.2, your computer may not meet Windows 11 requirements or may be missing security protections.
  • Some computers have TPM disabled in BIOS settings even though the hardware exists, so checking BIOS is the next step if Windows shows nothing.

Check TPM version through Windows settings

The fastest way is through the TPM Management Console. Press the Windows key, type tpm.msc, and press Enter. A window will open showing your TPM version at the top — it will say either "1.2" or "2.0". If nothing opens, your computer either has no TPM or it is disabled in BIOS.

If tpm.msc does not work, try Device Manager instead. Press Windows key + X, select Device Manager, then look for a section called Security devices. Expand it and look for "Trusted Platform Module" or "TPM". Right-click it, select Properties, and check the Driver tab for version information. Some computers label it differently — you might see "Infineon TPM" or "Intel PTT" instead of a generic name.

Check TPM version through system information

Another route is Windows System Information. Press Windows key + Pause/Break, or right-click This PC and select Properties, then scroll down and click "Advanced system settings". In the System Properties window, click the Hardware tab, then Device Manager. Follow the same steps as above — look for Security devices and expand it.

You can also use PowerShell if you are comfortable with command line tools. Right-click the Start menu, select Windows PowerShell (Admin), then type Get-WmiObject -Namespace "root\cimv2\security\microsofttpm" -Class Win32_Tpm and press Enter. The output will show your TPM version in the SpecVersion field.

What to do if TPM is disabled or missing

If Windows shows no TPM but your computer is relatively new (built after 2016), the hardware likely exists but is turned off in BIOS. Restart your computer and enter BIOS setup — usually by pressing Delete, F2, or F12 during startup, depending on your manufacturer. Look for a setting called TPM, PTT (Platform Trust Technology), or Security Chip, and enable it. The exact location varies by manufacturer, so check your computer maker's support page if you cannot find it.

If you enable TPM in BIOS and Windows still shows nothing, restart again and check Device Manager a second time — it can take a reboot for Windows to recognize the change. If you still see nothing after two restarts, your computer may not have TPM hardware at all, which is common on older machines or budget models.

Understanding what your TPM version means for Windows 11

Windows 11 officially requires TPM 2.0. If you have version 1.2 or no TPM, Windows 11 will not install, and you cannot use features like Windows Hello facial recognition or BitLocker encryption at full strength. Windows 10 will continue to work with either version, but Microsoft has signaled that future updates may require 2.0 as well.

If you have an older computer with only TPM 1.2 and want to upgrade to Windows 11, you have limited options. Some manufacturers released BIOS updates that enable TPM 2.0 on older hardware, so check your computer maker's support page. If no update exists, upgrading the TPM chip itself is possible but requires opening the computer and is not practical for most people.

What TPM protects and why the version matters

TPM stores encryption keys for BitLocker (Windows' full-disk encryption), Windows Hello passwords, and other sensitive data. Version 2.0 uses stronger encryption algorithms and is harder to attack than 1.2. It also supports more security features and is designed to resist modern hacking techniques.

If you do not use BitLocker or Windows Hello, the difference may feel invisible — your computer will run normally either way. But if you store sensitive files, use a work computer, or handle financial information, TPM 2.0 provides real protection that 1.2 does not. Checking your version now tells you whether your computer is meeting current security standards or falling behind.

Frequently Asked Questions

Can I upgrade TPM from version 1.2 to 2.0?

On most computers, no — TPM is built into the motherboard and cannot be upgraded like RAM or a hard drive. Some manufacturers released BIOS updates that enable TPM 2.0 on older hardware, so check your computer maker's support page. If no update exists, upgrading the chip itself requires opening the computer and is not practical for most users.

What if tpm.msc opens but shows no version number?

This usually means TPM is present but not fully initialized. Restart your computer and check again. If it still shows nothing, try enabling TPM in BIOS (restart, enter BIOS setup, look for TPM or Security Chip, enable it, then restart). If you still see no version after two restarts, contact your computer maker's support to confirm whether your model includes TPM hardware.

Do I need TPM 2.0 to use Windows 10?

No. Windows 10 works with TPM 1.2, no TPM, or TPM 2.0. However, some security features like BitLocker run more securely with 2.0. Windows 11 requires 2.0, so if you plan to upgrade in the future, checking now tells you whether your computer will be compatible.

Is it safe to enable TPM in BIOS?

Yes. Enabling TPM in BIOS does not harm your computer — it straightforward activates a security feature that was already built in. Windows will recognize it and use it for encryption and password storage. There is no downside to enabling it.

What if my computer is very old and has no TPM at all?

Older computers (before 2016) often lack TPM hardware entirely. You can still use Windows 10 and most security features, but you cannot use BitLocker encryption or upgrade to Windows 11. If security is important for your work, consider whether a newer computer would be worth the investment.