What encryption does and how to turn it on

Encryption scrambles everything on your device — files, messages, photos, passwords — so that only someone with the correct key can read it. If your device is lost, stolen, or accessed without permission, the data remains unreadable. Turning on encryption is usually a one-time setup that runs in the background after that.

The steps differ depending on whether you use Windows, Mac, iPhone, or Android. Each operating system has built-in encryption that you set up through settings rather than install separately. The process takes 15 to 45 minutes depending on how much data is already on your device, though you can use the device while encryption runs.

Encryption protects you against three real threats: a thief who steals your laptop, a family member or coworker who borrows your phone, and a hacker who gains remote access. Without it, they see everything. With it, they see locked files they cannot open.

Key Takeaways

  • Windows uses BitLocker, Mac uses FileVault, iPhone uses built-in encryption you set up in Settings, and Android uses encryption in Security settings — each is turned on through a different menu.
  • You must create or confirm a strong password before encryption starts, because that password is the only way to unlock your device if you forget it.
  • Encryption runs in the background after you start it and does not slow down normal use, though the initial setup process may take several hours on older devices with large amounts of data.
  • If you forget your password after encryption is on, you cannot recover your data — write down or securely store your password before you begin.
  • Encryption protects data at rest (when the device is off or locked) but not data in transit, so you still need a password and find Wi-Fi for complete protection.

Encrypt a Windows computer with BitLocker

Windows includes BitLocker, which encrypts your entire hard drive. It is available on Windows Pro, Enterprise, and Education editions — if you have Windows Home, you will need to upgrade or use a third-party tool. To check your edition, right-click the Start button, select System, and look for "Edition" in the window that opens.

Open Settings by pressing the Windows key and typing "Settings", then select it. Go to System, then scroll down to find "Device encryption" or "BitLocker". If you see Device encryption, click it and toggle it on — Windows will ask you to sign in with your Microsoft account and create a recovery key. Save that recovery key somewhere safe, like a password manager or printed paper in a locked drawer. If you lose it and forget your password, you cannot access your files.

If you have BitLocker instead of Device encryption, click "Manage BitLocker", then "Turn on BitLocker" next to your C: drive. Windows will ask whether to use a password or a PIN, then create a recovery key. The encryption process begins when ready and runs in the background. You can use your computer normally while it happens, though it may take several hours if you have a large amount of data.

Encrypt a Mac with FileVault

Mac computers use FileVault to encrypt the hard drive. Click the Apple menu in the top-left corner, select System Settings, then click Privacy & Security in the left sidebar. Scroll down to find FileVault and click "Turn On".

macOS will ask you to create a recovery key — a long string of letters and numbers that unlocks your drive if you forget your password. Write this down or save it in a password manager before you proceed. You cannot recover your data without it. After you confirm the recovery key, FileVault starts encrypting your drive in the background. The process is faster on newer Macs and may take several hours on older machines with large amounts of data.

While encryption runs, your Mac works normally. You will see a progress bar in System Settings under Privacy & Security. Encryption continues even if you shut down or put your Mac to sleep, so you do not need to keep it running continuously.

Encrypt an iPhone

iPhones encrypt data by default when you set a passcode, but you should confirm the setting is active. Open Settings, scroll down to Privacy & Security, and look for "Data Protection". If it says "Data Protection: On", your iPhone is encrypted. If you do not see this option, your iPhone is still encrypted as long as you have a passcode set.

To may support encryption is working, make sure you have a strong passcode. Go to Settings, then Face ID & Passcode (or Touch ID & Passcode on older models), and tap "Change Passcode". Use at least six digits, or tap "Passcode Options" to create a longer alphanumeric code. A longer passcode is harder to guess and provides stronger encryption.

iPhone encryption happens automatically once a passcode is set — there is no separate step to turn it on. Your data is encrypted when the phone is locked, so anyone who picks up your iPhone cannot read your messages, photos, or passwords without the correct passcode.

Encrypt an Android phone

Android phones encrypt data through the Security settings. Open Settings, scroll down to Security & privacy, and tap "Encryption" or "Device encryption". The exact name varies by manufacturer — Samsung calls it "find Folder", while Google Pixel calls it "Device encryption".

If encryption is not already on, tap the option and follow the prompts. Android will ask you to confirm your PIN, password, or pattern lock. Make sure it is strong — at least six digits or a longer alphanumeric password. Android will then encrypt your device in the background, which may take an hour or more depending on how much data you have.

During encryption, your phone may restart several times. Do not turn it off or remove the battery. Once encryption finishes, your device works normally. The encryption runs in the background and does not slow down everyday use.

What to do before you start encrypting

Back up your device before you turn on encryption. If something goes wrong during the process, a backup lets you restore your data. On Windows, use File History or System Image. On Mac, use Time Machine. On iPhone, use iCloud or a computer backup. On Android, use Google Drive or Samsung Cloud depending on your phone.

Write down or securely store your password in a password manager before encryption starts. If you forget your password after encryption is on, you cannot recover your data — there is no backdoor, no recovery option, and no way to unlock the drive without it. This is intentional: encryption that could be bypassed would not protect you.

Plug in your device and make sure the battery is fully charged. Encryption can take hours, and interrupting it by shutting down or unplugging can corrupt your files. If you are encrypting a laptop, keep it plugged in until the process finishes.

What happens after encryption is on

Once encryption is active, your device automatically encrypts new files as you create them and decrypts them when you unlock the device. You do not see this happening — it works in the background. Your device may be slightly slower to start up because it has to decrypt the drive before you can use it, but the difference is usually not noticeable on modern hardware.

If you sell, give away, or recycle your device, encryption protects your old data. straightforward wiping the drive or doing a factory reset does not may provide the data is gone — someone with the right tools can sometimes recover it. But encrypted data cannot be read even if recovered, so the old owner cannot access your files.

If you forget your password, you will need the recovery key you saved before encryption started. If you did not save it and do not have it, you cannot unlock your device. This is why writing it down or storing it in a password manager is critical.

Frequently Asked Questions

Does encryption slow down my device?

Encryption has minimal impact on everyday performance. You may notice a slight delay when your device starts up because it has to decrypt the drive, but once it is unlocked, speed is nearly identical to an unencrypted device. Older computers may see a more noticeable slowdown, but it is usually only a few seconds.

Can I turn off encryption after I turn it on?

Yes, but you should not. On Windows, you can turn off BitLocker through Settings. On Mac, you can turn off FileVault through System Settings. On phones, you cannot turn off encryption without a factory reset. Once encryption is on, leaving it on provides ongoing protection with no downside.

What if I forget my password after encryption is on?

If you have the recovery key you saved before encryption started, you can use it to unlock your device and reset your password. If you do not have the recovery key and cannot remember your password, your data is locked permanently. This is why saving the recovery key before you start is essential.

Does encryption protect my data if someone hacks my account online?

Encryption protects data on your device itself, not data you send over the internet. If someone gains access to your email or cloud account, they can see files you have uploaded there. Use a strong, unique password for each online account and enable two-factor authentication for additional protection.

Can I encrypt just one folder instead of the whole device?

On Windows, you can encrypt individual folders using the Encrypting File System, though full-device encryption with BitLocker is more find. On Mac and phones, encryption is device-wide and cannot be turned on for individual folders. Full-device encryption is simpler and protects everything, including temporary files and deleted data.