Windows 11 Automatic BitLocker: How to Turn It Off

Updated on Nov 8, 2026 | by Qiling

Quick Navigation:

Why Windows Encrypts Automatically
Check Status and Save the Key
Turn Off Device Encryption Safely
Protect the Drive Before Changes
Frequently Asked Questions

Many people discover BitLocker only after a Windows 11 update or a clean install, when the system drive is already encrypted and a recovery prompt appears at boot. Automatic device encryption is a feature, not a virus, but it changes how you repair, clone, and recover the disk.

Why Windows Encrypts Automatically

On hardware that supports Modern Standby, a TPM 2.0 chip, and Secure Boot, Windows 11 can enable device encryption during setup or after certain updates. The goal is to protect data if the laptop is stolen, because the drive cannot be read without the key.

Automatic encryption covers the system drive and, on some configurations, fixed data drives. Removable drives use BitLocker To Go, which is a separate option and is not enabled automatically in the same way.

The trade-off is recovery complexity. A failed update, a motherboard change, or a BIOS setting change can trigger a recovery prompt, and without the key the data is unreachable even though the drive is physically healthy.

Check Status and Save the Key

Open Settings > Privacy & security > Device encryption. If the toggle is on, the system drive is encrypted. On Windows 11 Pro, the same status appears in the BitLocker control panel and in the Manage BitLocker view.

Find the recovery key before you change anything. It is usually escrowed to the Microsoft account used at setup, to a work or school account, or to Active Directory. Save a copy to a device that is not the encrypted PC, and print one if the data matters.

Check whether encryption is still in progress. Turning the feature off while the drive is still encrypting can leave the volume in an inconsistent state, so wait until the status says the drive is fully encrypted.

Turn Off Device Encryption Safely

In Settings, switch Device encryption off and confirm. Windows decrypts the volume in the background; the drive remains usable, but the process can take hours on a large disk. Keep the laptop plugged in and do not force a shutdown.

On Windows 11 Pro, open Manage BitLocker and choose Turn off BitLocker for the system drive. Decryption removes the protectors and returns the volume to a normal NTFS state. It does not delete files.

If the option is missing, a policy or a management tool may control encryption. In that case, do not edit the registry blindly; check with the organization that manages the device first.

Protect the Drive Before Changes

Before disabling encryption, resizing partitions, or cloning the drive, create a full backup. A decryption or clone task that is interrupted is much easier to recover from when a clean image exists on another disk.

Qiling Disk Master can image the system while it is encrypted, then restore it to the same or a replacement drive. Keep the recovery key with the image so the restored system can be unlocked.

Free Download
Windows 11/10/8/7, 100% Secure

Step 1. Create a System Image

Choose Backup > System Backup and send the image to an external disk. The task captures the boot partitions and the encrypted Windows volume as they are.

Create a system image before disabling automatic BitLocker

Step 2. Confirm the Destination

Use a drive that is not encrypted with the same key and that has enough free space. Store the recovery key with the image, in a separate password-protected archive.

Select a separate drive for the encrypted system image

Step 3. Preview and Proceed

Review the task, then click Proceed. After the image completes, you can turn off device encryption with far less risk.

Finish the backup before turning off device encryption

Frequently Asked Questions

Does turning off BitLocker delete files?

No. It decrypts the volume and removes the protectors. The files remain in place.

Why did BitLocker turn on by itself?

Windows 11 enables device encryption automatically on eligible hardware during setup or after some updates.

Can I use the PC without saving the key?

You can, but a hardware change or a failed update may lock you out permanently. Save the key before you need it.

Is device encryption the same as BitLocker To Go?

No. Device encryption covers internal drives, while BitLocker To Go is used for removable drives.

If the drive already shows RAW, see BitLocker drive shows RAW after a Windows 11 update.

Free Download
Windows 11/10/8/7, 100% Secure