Device encryption helps protect your Windows 8.1 PC by encrypting your data—or "scrambling" it —to help keep it secure. Only someone with the right encryption key (like a password) can unscramble and read it. Device encryption helps block hackers from getting the files they need to steal your password. If your PC itself is lost or stolen, device encryption also helps keep other people from accessing your data by physically installing your locked drive in a different PC. Even if your PC is encrypted, you can still sign in to Windows and use your files as you normally would.
Device encryption is available in all Windows RT 8.1 PCs, and in Windows 8.1 PCs that support InstantGo. InstantGo allows your PC to wake up instantly from sleep with your apps and data up to date. For more details about whether you can use device encryption with your PC, check the info that came with your PC or go to the manufacturer's website.
You need to sign in to your PC with a Microsoft account with administrator permissions to use device encryption. For more info about administrator permissions, see Standard accounts versus administrator accounts. If you didn't sign in with a Microsoft account, or if you don't have a Microsoft account and want to get one, follow these steps.
Swipe in from the right edge of the screen, tap Settings, and then tap Change PC settings.(If you're using a mouse, point to the lower-right corner of the screen, move the mouse pointer up, click Settings, and then click Change PC settings.)
Tap or click Accounts, and then tap or click Switch to a Microsoft account.
If you're using a new PC with a fresh install of Windows RT 8.1, device encryption is turned on automatically when you sign in. Windows helps protect data on your PC and automatically uploads a recovery key to your Microsoft account online. This recovery key lets you sign in to your PC in case you're locked out.
However, if you've upgraded to Windows RT 8.1 from a previous version of Windows, you'll need to turn on device encryption manually.
Swipe in from the right edge of the screen, and then tap Search.(If you're using a mouse, point to the lower-right corner of the screen, move the mouse pointer up, and then click Search.)
In the Search box, enter encryption.
Tap or click Change device encryption settings, and follow the instructions.
You need a recovery key when your PC goes into recovery mode. There are a few reasons this might happen. For example, your organization might have a password security policy that locks your PC after a certain number of failed attempts to sign in. Your PC can also enter recovery mode if it encounters a hardware malfunction, or an unexpected configuration change that affects security. Requiring a recovery key helps make sure that only an authorized person can unlock your PC and restore access to your encrypted data.
For more info about the recovery key and how to get it, see Recovery keys: Frequently asked questions.
If you've signed in with a Microsoft account, protection is turned on for your PC and your recovery key is automatically backed up to your Microsoft account online. If you want to store another copy of the recovery key, you can print it or save it as a file.
In the Search box, enter device encryption.
Choose Back up your recovery key and follow the instructions.
Tap or click PC and devices, and then tap or click PC info.
The Device encryption section appears at the bottom of the PC info page.
Not all PCs are set up to let you change device encryption settings. To determine whether you can turn device encryption off on your PC, follow these steps.
See all support pages for security, privacy, & accounts.
Ask a question in the