How to Disable BitLocker on Windows 11 (4 Easy Methods)

BitLocker protects your drive by encrypting its contents, but there are valid reasons to turn it off. Maybe you are troubleshooting a boot issue. Maybe you are selling your PC. Maybe you just want to stop seeing recovery key prompts. This guide covers every method to disable BitLocker on Windows 11, from the graphical interface to PowerShell, Command Prompt, and Group Policy.

What Causes BitLocker Issues

BitLocker does not always behave the way you expect. Knowing why helps you decide which disable method fits your situation.

• Hardware changes, BIOS updates, or motherboard repairs can trigger repeated recovery key prompts. This happens because your PC has a small security chip called a TPM, and it no longer recognizes the new hardware setup.
• Running two operating systems on one PC, such as Windows and Linux, can sometimes conflict with BitLocker’s startup process.
• Encryption and decryption use up your PC’s processing power, which can slow down older hardware noticeably.
• Company policy or a preference for alternative encryption tools like VeraCrypt can make BitLocker unnecessary.

Check BitLocker Status Before You Start

Before disabling BitLocker, confirm which drives are encrypted and note their drive letters.

1. Press Win + R to open the Run box.
2. Type cmd and press Ctrl + Shift + Enter. (opens in Administrator)
3. Click Yes if Windows asks for confirmation.
4. Type manage-bde -status and press Enter.
5. Review the list of drives and their encryption percentage.

Decryption time depends on drive size and speed. Small SSDs may finish in under 20 minutes, while large or heavily fragmented drives can take a couple of hours. Keep the laptop plugged in and avoid restarting or sleeping the PC until decryption completes, since interruptions can pause the process.

1. Disable BitLocker Using Settings (GUI)

This method works best for a single drive on your own PC.

1. Click Start and type Manage BitLocker, then open it from the search results.
2. Alternatively, go to Settings > Privacy & Security.
3. Search for BitLocker.
4. Select Device encryption.
5. Find the drive you want to decrypt and select Turn off BitLocker.
6. Confirm the action when Windows prompts you.
7. Wait for decryption to finish. You can close the window and check progress later through the same Manage BitLocker screen.

2. Disable BitLocker Using PowerShell

PowerShell works well if you need to disable BitLocker on multiple drives or want to script the process across several PCs.

1. Open the Start menu and type PowerShell.
2. Right-click it and select Run as Administrator.
3. Check which volumes are encrypted:

Get-BitLockerVolume

4. Note the drive letter of the volume you want to decrypt, then run:

Disable-BitLocker -MountPoint "C:"

5. To disable BitLocker on every encrypted volume at once, run this command first:

$BLV = Get-BitLockerVolume

6. Then run this command to disable BitLocker on all of them:

Disable-BitLocker -MountPoint $BLV

7. Confirm decryption started by running Get-BitLockerVolume again and checking the volume status.

If Windows will not let you disable BitLocker on the system drive, it likely has an automatic unlock key set up. This is a setting that lets your PC unlock the drive on its own without asking for a password. Run Clear-BitLockerAutoUnlock first, then retry the Disable-BitLocker command.

3. Disable BitLocker Using Command Prompt

Command Prompt offers a quick alternative if you prefer manage-bde over PowerShell.

1. Open Command Prompt as Administrator.
2. Run this command to turn off BitLocker on a specific drive:

manage-bde -off C:

3. Check decryption progress at any time with:

manage-bde -status

This method works the same way for external hard drives connected to the PC. Just replace C: with the correct drive letter.

4. Disable BitLocker Using Group Policy

Group Policy is a tool that lets you control settings on many Windows PCs at once, instead of changing each one by hand. It is the most efficient option when you need to disable BitLocker across many machines on a network. There are three types of drives you can target:

• Operating system drive: the main drive where Windows is installed, usually C:.
• Fixed drives: extra internal drives inside the same PC, if any.
• Removable drives: USB drives or external hard drives you plug in.

For the operating system drive:

1. Press Win + R to open the Run box.
2. Type gpedit.msc and press Enter.
3. Navigate to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.
4. Disable these two policies:
   • Require additional authentication at startup
   • Enforce drive encryption type on operating system drives

For fixed and removable data drives:

Follow the same steps under Fixed Data Drives or Removable Data Drives, disabling the equivalent Enforce drive encryption type policy for each. You do not need to touch the startup authentication policy for these.

5. Apply the updated policies immediately by running:

gpupdate /force

Turning off BitLocker through Group Policy stops new encryption from being enforced, but it does not decrypt drives that are already encrypted. You still need to manually decrypt those drives using the PowerShell, Command Prompt, or Settings method above.

Suspend BitLocker Instead of Disabling It

If you only need to pause protection temporarily, such as during a BIOS update, suspending BitLocker is safer than disabling it. Suspending keeps your drive encrypted, but it skips the usual security check the next time you restart. This means you do not have to decrypt and then re-encrypt the whole drive just for a quick maintenance task. Open Manage BitLocker, select Suspend Protection for the relevant drive, and resume it once your maintenance task is complete.

Things to Know Before You Disable BitLocker

• Once disabled, your data is no longer encrypted, so anyone with physical access to the drive can read it if the device is lost or stolen.
• Save your recovery key somewhere safe before starting, in case decryption is interrupted and Windows asks for it again.
• If you plan to sell or dispose of the PC, disabling BitLocker alone does not erase your data. Wipe the drive separately after decryption finishes.

Settings works fine for a single drive on your own PC, PowerShell and Command Prompt suit automation and multiple drives, and Group Policy is the right call for managing BitLocker across a network. Whichever method you pick, give the decryption process time to finish and keep your recovery key handy until it does.

Frequently Asked Questions

Related Guides

• How to Turn Off BitLocker in Windows 11 (5 Methods That Work)
• KB5083769 BitLocker Fix & Reboot Issues on Windows 11
• How to Find Your BitLocker Recovery Key in Windows (4 Working Methods)