How to Set Default BitLocker Encryption Method and Cipher Strength in Windows 10
You will be delighted to know that Windows 10 lets you enhance your files security with the help of BitLocker Encryption Method and Cipher Strength. It becomes important for you to protect your crucial data from going it into the inappropriate hands. But to offer more safety to your drives, you can modify encryption mode and cipher strength accordingly.
Windows 10 (version 1511) introduces a new disk encryption mode (XTS-AES). This mode provides additional integrity support, but is not compatible with older versions of Windows.
You could also select to use disk encryption Compatible mode (AES-CBC) that is compatible with older versions of Windows. If you're encrypting a removable drive that you're going to use on an older version of Windows, you should use AES-CBC.
Both BitLocker Drive Encryption modes above support using 128-bit or 256-bit cipher strength.
Windows 10 uses XTS-AES 128 bit by default for operating system drives as well as fixed data drives, and uses AES-CBC 128 bit by default for removable data drives.
Set Default BitLocker Drive Encryption Method and Cipher Strength
1. Press the Windows + R keys to open the Run dialog, type gpedit.msc, and press Enter key to open Local Group Policy Editor.
2. In the left pane of Local Group Policy Editor, navigate to the location below.
3. Shift to the right pane of BitLocker Drive Encryption and you can see few policies. Here, locate and double-click the setting namely “Choose drive encryption method and cipher strength (Windows 10 (Version 1511) and later)“.
4. Click Enabled dot on the top left of the next window. This also enables the encryption method for OS, removable data drives, and fixed data drives as shown in the given screenshot. So, click each drop-down and select the mode as per preference.
5. Finally, click Apply and OK buttons to implement the encryption changes you made above.
Hopefully, with any of the above two procedures in Windows 10, you can pretty much easily modify BitLocker Encryption Method and Cipher Strength.
Did you find this tutorial helpful? Don’t forget to share your views with us.
Windows 10 (version 1511) introduces a new disk encryption mode (XTS-AES). This mode provides additional integrity support, but is not compatible with older versions of Windows.
You could also select to use disk encryption Compatible mode (AES-CBC) that is compatible with older versions of Windows. If you're encrypting a removable drive that you're going to use on an older version of Windows, you should use AES-CBC.
Both BitLocker Drive Encryption modes above support using 128-bit or 256-bit cipher strength.
Windows 10 uses XTS-AES 128 bit by default for operating system drives as well as fixed data drives, and uses AES-CBC 128 bit by default for removable data drives.
Note
BitLocker Drive Encryption is only available in Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education editions.
Set Default BitLocker Drive Encryption Method and Cipher Strength
1. Press the Windows + R keys to open the Run dialog, type gpedit.msc, and press Enter key to open Local Group Policy Editor.
2. In the left pane of Local Group Policy Editor, navigate to the location below.
Code:
Computer Configuration/Administrative Templates/Windows Components/BitLocker Drive Encryption3. Shift to the right pane of BitLocker Drive Encryption and you can see few policies. Here, locate and double-click the setting namely “Choose drive encryption method and cipher strength (Windows 10 (Version 1511) and later)“.
4. Click Enabled dot on the top left of the next window. This also enables the encryption method for OS, removable data drives, and fixed data drives as shown in the given screenshot. So, click each drop-down and select the mode as per preference.
5. Finally, click Apply and OK buttons to implement the encryption changes you made above.
Hopefully, with any of the above two procedures in Windows 10, you can pretty much easily modify BitLocker Encryption Method and Cipher Strength.
Did you find this tutorial helpful? Don’t forget to share your views with us.