Bitlocker 256 Encryption for Windows 10, Bitlocker 256 Encryption for Windows 11.
BitLocker uses Advanced Encryption Standard (AES) as its encryption algorithm with configurable key lengths of 128 bits or 256 bits. The default encryption setting is AES-128.
How to make BitLocker use AES 256-bit encryption. This tutorial will show you how to make BitLocker use AES 256-bit encryption instead of AES 128-bit encryption in Windows. We will also show you how to put a PIN on BitLocker which will prompt the user to enter a BitLocker PIN, This Bitlocker PIN may consist of both numbers and letters.
To enable AES 256-bitlocker encryption
- Run Regedit
-
Go to Computer Configuration > Administrative Templates > Windows Components.
-
Bitlocker Drive Encryption > Choose drive encryption method and cipher strength. Toggle on Enabled.
-
Click the drop-down boxs and select: XTS-AES 256 Bit, XTS-AES 256 Bit for the first two and CBC 256-bit for the last oneand finally select OK.
-
Select Bitlocker Drive Encryption > Operating System Drives > Require Additional Authentication at Startup. Toggle on Enabled and select OK.
-
Select Allow Enhanced PINs for startup. Toggle on Enabled and select OK.
- Close Regedit
To Enable Botlocker: In the search box on the taskbar, type Manage BitLocker and then select it from the list of results. Or, select Start > Settings > Privacy & security > Device encryption > BitLocker drive encryption
Bitlocker will prompt you for a PIN/Password