How to encrypt your PC’s disk without giving the keys to Microsoft

If you want to encrypt your Windows PC’s disk but don’t want to store your recovery key with Microsoft, you have options. We’ll summarize the requirements, as well as the steps you’ll need to take.

You will need Windows 11 Pro for this

Before we begin: Disk encryption is one of the few differences between the Home and Pro versions of Windows.

Both the Home and Pro versions of Windows support disk encryption, but only the Pro versions give users full control over the process. Windows Home only supports disk encryption when you are signed in with a Microsoft account and will only offer to store your encryption key on Microsoft’s servers.

To access the full version of BitLocker and save your own recovery key, you will need to upgrade to the Pro version of Windows. Microsoft offers its own proprietary upgrade option through the Microsoft Store for a one-time fee of $99, but it’s also possible to bring your own product key and upgrade yourself. This Macworld-affiliated listing from StackCommerce claims to be an official Microsoft partner and offers a Windows 11 Pro key for just $10, although your mileage with third-party key resellers may vary.

Regardless of how you get it, once you have a valid key, open SettingsSO SystemSO Activationclick upgrade your edition of Windowsclick change product keythen enter your Windows 11 Pro key (Windows 10 Pro keys should also work, if you already have one). Fortunately, changing Windows editions doesn’t require anything more disruptive than a system reboot. You won’t need to reinstall Windows and you shouldn’t lose any of your installed apps or data.

And once you’ve upgraded a PC to Windows 11 Pro once, you should be able to reinstall and reactivate Windows 11 Pro on that system at any time without having to re-enter your product key. However, keep the product key somewhere, just in case you need to use it for a reinstallation or if you need to reactivate Windows after a hardware upgrade.