How to Encrypt Your Laptop: BitLocker and FileVault
A lost laptop is more than lost hardware. Without encryption, anyone with the machine can pull the drive and read your files. Full-disk encryption makes the data unreadable without your login. It takes a few minutes to turn on.
Why it matters
Your laptop likely contains documents, saved sessions, photos and cached passwords. Encryption protects them if the device is stolen, and it is built into modern systems.
Windows: BitLocker or device encryption
- Open Settings and search for “device encryption” or “BitLocker”. Availability depends on your Windows edition and hardware.
- Turn it on and sign in with your Microsoft account or save the recovery key.
- Store the recovery key somewhere safe, away from the laptop.
Mac: FileVault
- Open System Settings, then Privacy and Security, then FileVault.
- Turn it on and choose how to recover your account, either with your Apple account or a recovery key.
- Keep the recovery information secure.
Linux
Most distributions offer full-disk encryption using LUKS during installation. It is best enabled when you first set up the system.
Best practices
- Use a strong login password, since it protects the encryption.
- Keep your recovery key off the laptop.
- Keep the system updated.
- Enable remote-find and remote-wipe features.
Key takeaway: Turn on BitLocker or FileVault today, and keep the recovery key safe in a separate place. It is free and protects your data if the laptop is lost.
