What encryption does and how to turn it on

Encryption scrambles everything on your device so that only someone with your password can read it. If your phone, computer, or tablet is lost or stolen, encryption makes the data inside unreadable to anyone who finds it. Most modern devices come with encryption built in — you just need to turn it on or make sure it is already running.

The steps differ depending on what device you own. Windows computers, Macs, iPhones, iPads, and Android phones all have different encryption tools, and each one works slightly differently. The good news is that on most devices, encryption is either already on by default or takes just a few clicks to enable.

Before you start, know that encryption slows down your device slightly — usually so little you will not notice. The trade-off is worth it: without encryption, anyone with physical access to your device can pull out your files, photos, passwords, and financial information.

Key Takeaways

  • iPhones and iPads turn on encryption automatically when you set a passcode, so if you have a lock screen, your device is already encrypted.
  • Windows computers use BitLocker, which you turn on in Settings under System > Encryption, though BitLocker is only available on Windows Pro and higher editions.
  • Mac computers use FileVault, which you turn on in System Settings under Privacy & Security, and it encrypts your entire hard drive.
  • Android phones encrypt data by default on most modern devices, but you can verify this in Settings under Security to make sure it is active.
  • Encryption does not slow your device noticeably, but it does mean you cannot recover your data if you forget your password.

Encrypting an iPhone or iPad

iPhones and iPads encrypt automatically the moment you set up a passcode or Face ID. If your device has a lock screen, it is encrypted. You do not need to do anything else — encryption runs in the background without any action from you.

To confirm encryption is on, go to Settings > Face ID & Passcode (or Touch ID & Passcode on older models) and enter your passcode. If you see this screen, encryption is active. If you have never set a passcode, create one now: go to Settings > Face ID & Passcode > Enable Face ID (or Turn On Passcode), then follow the prompts.

One important note: if you forget your passcode, Apple cannot recover your encrypted data. Write your passcode down somewhere safe, or use a password manager to store it. Resetting your device will erase everything on it permanently.

Encrypting a Windows computer

Windows computers use a tool called BitLocker to encrypt your entire hard drive. BitLocker is only available on Windows Pro, Enterprise, and Education editions — if you have Windows Home, you will need to upgrade or use a third-party encryption tool instead.

To turn on BitLocker, open Settings and go to System > Encryption. You should see a BitLocker option. Click "Turn on" next to "Device encryption" or "BitLocker encryption" (the exact wording varies by Windows version). Windows will ask you to sign in with your Microsoft account and may ask you to create a recovery key — save this key somewhere safe, like a password manager or printed document, in case you ever need to recover your data.

Encryption will start immediately and run in the background. On older or slower computers, you may notice a slight slowdown while encryption is working, but once it finishes, performance returns to normal. You can check progress by going back to Settings > System > Encryption and looking at the status bar.

Encrypting a Mac

Macs use FileVault to encrypt your hard drive. FileVault is built into macOS and works on all modern Macs. To turn it on, click the Apple menu in the top-left corner, then go to System Settings > Privacy & Security. Scroll down and look for FileVault on the left side.

Click the lock icon in the bottom-left corner of the window and enter your Mac password to unlock settings. Then click "Turn On" next to FileVault. macOS will ask you to create a recovery key — write this down or save it in a password manager. This key is the only way to recover your data if you forget your Mac password, so do not skip this step.

Encryption will start immediately. Your Mac will remain usable while encryption runs in the background, though you may notice slower performance on older machines. You can check progress by going back to Privacy & Security and looking at the FileVault status.

Encrypting an Android phone

Most Android phones encrypt data by default, but the setting is sometimes hidden or disabled. To check whether encryption is on, open Settings and look for Security or Security & Privacy (the exact name varies by phone brand). Scroll down and look for an option called "Encryption" or "Encrypt device" or "Encrypt phone."

If you see a toggle or button that says "Encrypt," tap it to turn encryption on. Android will warn you that encryption takes time and that your device will restart. Plug your phone into power and tap "Encrypt Phone" to begin. Do not unplug the phone or turn it off during encryption — let it finish completely, which usually takes 30 minutes to an hour.

If you cannot find an encryption option in Settings, your phone is likely already encrypted by default. This is true for most phones running Android 10 or newer. To be certain, contact your phone manufacturer or your mobile carrier — they can confirm whether encryption is active on your specific model.

What to do after encryption is turned on

Once encryption is on, your device works exactly as it did before. You will not see any difference in daily use. The only time encryption matters is if your device is lost, stolen, or someone tries to access it without your permission.

Make sure you remember your password or passcode — this is the key to your encrypted data. If you forget it, you cannot recover anything on your device. Consider using a password manager like Bitwarden, 1Password, or Dashlane to store your device password securely. Write down your recovery key (if your device created one) and store it somewhere safe, like a locked drawer or safe deposit box.

If you sell or give away your device, wipe it completely before handing it over. On iPhones and iPads, go to Settings > General > Reset > Erase All Content and Settings. On Windows, go to Settings > System > Recovery > Reset this PC. On Macs, restart while holding Command-R, then use Disk Utility to erase the drive. On Android, go to Settings > System > Reset Options > Erase All Data. Encryption ensures that even after wiping, the old data cannot be recovered.

Frequently Asked Questions

Does encryption slow down my device?

Encryption may cause a slight slowdown on older devices, but on modern phones and computers, you will not notice any difference. The performance impact is usually less than 5 percent and only happens during heavy file access. The security benefit far outweighs any slowdown.

Can I turn off encryption after I turn it on?

On iPhones and iPads, you cannot turn off encryption without erasing the device. On Windows and Mac, you can disable BitLocker or FileVault, but this is not recommended — it leaves your data unprotected. On Android, encryption cannot be disabled on most modern phones.

What happens if I forget my password?

If you forget your device password, you cannot recover your encrypted data. Your only option is to erase the device completely and start over. This is why storing your password in a password manager or writing it down is so important.

Is encryption the same as a password?

No. A password protects your device from being used by someone else. Encryption protects your data from being read, even if someone removes the hard drive or storage chip from your device. You need both a strong password and encryption for full protection.

Do I need to encrypt external drives and USB sticks?

Yes, if they contain sensitive information. External drives use the same encryption tools as your main device — BitLocker on Windows, FileVault on Mac, and built-in encryption on most external drives. If your external drive does not have encryption built in, consider using a third-party tool like VeraCrypt or storing sensitive files only on your encrypted main device.