BitLocker helps mitigate unauthorized data access on lost or stolen computers before the authorized operating system is started by encrypting volumes on your device. Windows uses technologies including Trusted Platform Module (TPM), Secure Boot, and Measured Boot to help protect BitLocker encryption keys against attacks. See the following guide on how to enable FileVault disk encryption on a Mac device and how to fix your device cannot use a Trusted Platform Module: Allow BitLocker without a compatible TPM”.
BitLocker is part of a strategic approach to securing data against offline attacks through encryption technology. Data on a lost or stolen computer is vulnerable. For example, there could be unauthorized access, either by running a software attack tool against it or by transferring the computer’s hard disk to a different computer. BitLocker blocks hackers from accessing the system files or from accessing your drive by physically removing it from your PC and installing it on a different device. See the following guide on how to enable Bitlocker via the Local Group Policy Editor and the Group Policy Management Console.
Part A – How to view BitLocker disk encryption status: While setting up BitLocker and encrypting your disk you probably want to check and view the progress and see the current status, as it can take quite a long time depending on the size and speed of your disk. In this guide, I will discuss how to use the following commands in Windows 10. Administrative rights are required to perform these actions. For more related BitLockers commands, see this link.
manage-bde -status or Get-BitLockerVolume
1: To Check Status of BitLocker in Command Prompt: Run the following commands below with elevated command prompt as shown below.
manage-bde -status C:
2: To Check Status of BitLocker in PowerShell: We can use PowerShell to view the status of BitLocker running the below command below.
– Administrative privilege is also required.
Get-BitLockerVolume -MountPoint "C:"
There are numerous commands you can run with BitLocker Drive Encryption Configuration Tool, run this command for possible options.
Part B – Determine if BitLocker is enabled: You can easily determine if BitLocker Drive Encryption is enabled via the Graphical User interface (GUI) through Control Panel, Windows Settings, and from the File Explorer.
Control Panel\System and Security\BitLocker Drive Encryption
Also, You can also see if BitLocker is enabled by launching Windows Settings and search for BitLocker as shown below.
– Click on Manage BitLocker, this will automatically open the Control Panel BitLocker Drive Encryption window.
You can also determine if BitLocker is enabled via File Explorer in the following way.
– Right-click on the Drive and select “Manage BitLocker”. This will automatically open the Control Panel BitLocker Drive Encryption window.
Lastly, you can also determine if BitLocker is enabled via the Disk Management interface (diskmgmt.msc). To open Disk Management, run diskmgmt.msc from the Windows Search button or from the the run command as shown below.
When Disk Management opens, you should be able to see the drives that are BitLocker Encrypted by reading their descriptions (as shown in the following figure).
If you would like to view the BitLocker Recovery information, see this guide “fix missing BitLocker Recovery Tab.
I hope you found this blog post helpful. If you have any questions, please let me know in the comment session.