BitLocker

BitLocker encrypts Windows volumes to address offline data exposure from a lost, stolen or decommissioned device. The management overview lists supported Pro, Enterprise and Education editions, so verify the actual Windows entitlement before setup. Keep the recovery key accessible independently of the protected drive. Microsoft's recovery guide uses the key ID to find a matching key in the Microsoft account, an organization account, a printout or saved USB file, depending on how protection was enabled. Support cannot recreate a lost recovery key. Volume encryption protects stored data; it does not replace application permissions after the machine is unlocked.