Learn how to turn off BitLocker, decrypt a protected drive, disable Device Encryption, and use Control Panel, Settings, Command Prompt, or PowerShell safely.
BitLocker protects a disk by encrypting its contents. When you disable BitLocker, Windows starts decrypting the selected drive. After decryption finishes, files on that drive are no longer protected by BitLocker encryption.
Before you begin, check the following:
Many users say “disable BitLocker” when they actually need to suspend it temporarily. These actions are different:
| Action | What It Does | Best For |
|---|---|---|
| Suspend BitLocker | Temporarily pauses BitLocker protection without decrypting the drive. | BIOS/UEFI updates, firmware updates, hardware maintenance, boot configuration changes. |
| Disable BitLocker | Decrypts the drive and removes BitLocker protection. | Selling a PC after wiping it, changing encryption strategy, troubleshooting, or removing encryption permanently. |
If you only need to update BIOS, change Secure Boot settings, or modify TPM-related options, use Suspend protection instead of turning BitLocker off completely.
Before disabling anything, check which drives are encrypted.
Open Command Prompt as administrator and run:
manage-bde -statusLook at Conversion Status and Protection Status. If you see Fully Encrypted and Protection On, BitLocker is active on that drive.
On many Windows 11 PCs, BitLocker management is available from Settings and Control Panel. The exact path can vary by edition and device configuration.
Windows will begin decrypting the drive in the background. You can continue using the PC, but performance may be reduced until the process is complete.
The classic Control Panel method works in both Windows 10 and Windows 11 Pro, Enterprise, and Education editions.
Windows Home usually does not include the full BitLocker management interface, but some devices support Device Encryption. It provides automatic disk encryption on compatible hardware.
If the Device encryption page is missing, your PC may not support this feature, encryption may already be disabled, or the system may use a different management policy.
Command Prompt is useful when the graphical interface is missing, blocked, or not working correctly.
manage-bde -off C:To check decryption progress, run:
manage-bde -status C:When decryption is complete, the drive should show Conversion Status: Fully Decrypted.
PowerShell gives you another reliable way to disable BitLocker, especially on managed or professional systems.
Get-BitLockerVolumeDisable BitLocker on the system drive:
Disable-BitLocker -MountPoint "C:"To monitor progress, run:
Get-BitLockerVolume -MountPoint "C:"BitLocker can also protect removable storage through BitLocker To Go. To decrypt an external drive, connect it first and unlock it with the password or recovery key.
If the external drive uses the letter E:, run:
manage-bde -off E:This usually means you are not using an administrator account, the Windows edition does not include the full BitLocker interface, or encryption is managed by an organization. Try opening Control Panel as described above, then use manage-bde -status to confirm the actual encryption state.
On work, school, or domain-joined computers, BitLocker may be enforced by Group Policy, Microsoft Intune, Active Directory, or another management system. In that case, Windows may turn protection back on or block changes. Contact the administrator before decrypting the device.
If Windows requests a BitLocker recovery key, enter the correct 48-digit key. For personal Microsoft accounts, recovery keys are often saved online in the account used to set up the device. For work or school devices, the key may be stored by the organization.
Large drives can take hours to decrypt. Keep the computer plugged in, avoid restarting unnecessarily, and check progress with:
manage-bde -statusIf the process appears frozen, check disk health, free space, and Event Viewer for storage or BitLocker-related errors.
Make sure the drive is unlocked, Windows is running normally, and you opened the tool with administrator rights. If the system is unstable, first back up important files. Then try disabling BitLocker from Command Prompt or PowerShell.
No. Turning off BitLocker decrypts the drive. It should not delete files. However, you should still create a backup before changing disk encryption settings.
Yes. Windows can decrypt in the background, but performance may be slower. Avoid shutting down the PC repeatedly while decryption is in progress.
It depends on the drive size, drive speed, used space, and system load. A small SSD may finish quickly, while a large hard drive can take several hours.
It is technically safe if you have a backup and the drive is healthy, but it reduces protection. Without encryption, someone with physical access to the drive may be able to read data more easily.
If you plan to wipe the drive completely, you usually do not need to decrypt it first. If you want to keep files, resize partitions, clone the disk, or repair the installation, disabling or suspending BitLocker may be useful depending on the task.