You can turn off BitLocker on Windows 11 from either the Settings app or the classic Control Panel, as long as you’re signed in with an administrator account. The process decrypts the drive in the background, so it can take a while depending on how much data is stored on it. Here’s exactly how to do it, plus what to check beforehand so you don’t lock yourself out of your own files.
Quick steps
- Open Control Panel and go to System and Security > BitLocker Drive Encryption.
- Find the drive you want to decrypt and select Turn off BitLocker.
- Confirm the action, then let Windows finish decrypting the drive in the background.
Before you start
A few things to check before you switch off BitLocker:
- You need to be signed in with an account that belongs to the local Administrators group. Standard user accounts can turn BitLocker on in some cases, but turning it off or changing its configuration needs admin rights.
- Decryption isn’t instant. It runs in the background and the time it takes depends on the size and speed of the drive, so don’t shut down or unplug a laptop mid-process if you can avoid it.
- Turning off BitLocker is different from suspending it. Suspending pauses protection temporarily (useful before firmware updates or an offline malware scan) without decrypting the drive, while turning it off fully decrypts the data and removes protection.
- If your organization manages your device with Intune, Group Policy, or Azure AD/Microsoft Entra, BitLocker may be enforced centrally. In that case the option to turn it off might be greyed out or it could turn itself back on after a policy refresh.
- It’s a good idea to know where your recovery key is saved (Microsoft account, a printed copy, a USB drive, or your organization’s records) in case anything interrupts the decryption process.
Turn off BitLocker from Settings (Windows 11 Home and Pro)
On devices that use Device Encryption (common on Windows 11 Home), you can manage it from the Settings app:
- Open Settings.
- Go to Privacy & security.
- Select Device encryption.
- Turn the toggle to Off to disable device encryption.
Not every PC shows this option. Device Encryption only appears on hardware that meets Microsoft’s requirements for it, and it behaves slightly differently from full BitLocker Drive Encryption found on Pro, Enterprise, and Education editions.
Turn off BitLocker from Control Panel (Windows 11 Pro, Enterprise, Education)
This is the main method for PCs running BitLocker Drive Encryption rather than basic Device Encryption:
- Click Start, type Control Panel, and open it.
- Select System and Security.
- Select BitLocker Drive Encryption.
- Next to the drive you want to decrypt, select Turn off BitLocker.
- Confirm when prompted. Windows will start decrypting the drive, and you’ll see a progress indicator in the BitLocker Drive Encryption window.
- Leave the PC plugged in and powered on until the decryption finishes.
Once decryption completes, the drive status will change from encrypted to BitLocker off, and you won’t be prompted for a recovery key or PIN anymore when you start the PC.
Suspend BitLocker instead of turning it off
Sometimes you don’t actually need to fully decrypt the drive, you just need to pause protection temporarily, for example before running a firmware update, a BIOS change, or an offline security scan. In that case, use Suspend protection from the same BitLocker Drive Encryption screen in Control Panel instead of Turn off BitLocker. Suspending keeps the drive encrypted but stops BitLocker from asking for a recovery key after the next restart, and you can resume protection afterward without re-encrypting anything.
If it doesn’t work
Turn off BitLocker is greyed out
This usually means your device is managed by an organization’s IT policy through Microsoft Intune, Group Policy, or Microsoft Entra ID. BitLocker enforcement set at that level overrides local changes, so you’ll need your IT admin to adjust or remove the policy before you can disable it yourself.
You’re not signed in as an administrator
Check that your account is a member of the local Administrators group. If you’re on a shared or work PC, sign in with an admin account or ask whoever manages the device to make the change for you.
Decryption seems stuck or very slow
Large drives with a lot of data can take a long time to decrypt, especially on older or slower disks. Make sure the PC stays powered on and plugged into mains power rather than running on battery, since interrupting the process partway through can leave the drive in an inconsistent state.
You’re being asked for a recovery key you don’t have
If BitLocker prompts for a recovery key before you can proceed, check your Microsoft account’s device recovery page, any printed copy you saved, or your organization’s IT records if the device is managed. Without the correct key you won’t be able to unlock or decrypt the drive.
Frequently asked questions
What’s the difference between turning off and suspending BitLocker?
Turning off BitLocker fully decrypts the drive and removes protection entirely. Suspending it pauses the protection and recovery key prompts temporarily while keeping the drive encrypted, which is handy for tasks like firmware updates where you plan to turn protection back on afterward.
Do I need admin rights to disable BitLocker on Windows 11?
Yes. Turning off, turning on, or changing BitLocker settings on operating system and fixed data drives requires membership in the local Administrators group on that device.
How long does it take to turn off BitLocker?
There’s no fixed time. Decryption runs in the background and the duration depends on the amount of data on the drive, the drive’s speed, and how much other activity the PC is handling at the same time.
Will I lose my files if I turn off BitLocker?
No, turning off BitLocker decrypts the drive but doesn’t delete your files. That said, it’s still sensible to have a backup of anything important before making changes to disk encryption, just in case the process is interrupted.
Why is the BitLocker option missing on my PC?
Full BitLocker Drive Encryption management through Control Panel is available on Windows 11 Pro, Enterprise, and Education editions. On Windows 11 Home, you may see a simpler Device encryption toggle in Settings instead, and it only appears on hardware that supports it.
Leave a Reply