Enable BitLocker on Windows 11 without a TPM chip

BitLocker is Microsoft’s built-in tool for encrypting your drive and protecting your data. But on Windows 11, the system usually wants a Trusted Platform Module (TPM) chip before it’ll let you turn BitLocker on. What if your PC doesn’t have TPM? Good news: You can still use BitLocker—with a quick tweak.

Here’s how.

Why Doesn’t BitLocker Work Without TPM?

By default, Windows 11 wants BitLocker to use TPM—a hardware security chip—to store encryption keys securely. No TPM, no easy BitLocker. But there’s a workaround. You can tell Windows to allow BitLocker without TPM by changing a local policy. You’ll just need a USB flash drive or a password for unlocking your drive instead.

Step-by-Step: Enable BitLocker Without TPM

1. Open the Local Group Policy Editor

• Press Windows + R, type gpedit.msc, and press Enter.

2. Change the BitLocker Policy

• In the Group Policy Editor, go to:
  Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.
• Double-click Require additional authentication at startup.
• Select Enabled.
• Check Allow BitLocker without a compatible TPM.
• Click OK to save.

3. Enable BitLocker

• Open Control Panel > System and Security > BitLocker Drive Encryption.
• Click Turn on BitLocker for your system drive (C:).
• Follow the prompts. Since there’s no TPM, you’ll need to set a password or insert a USB drive to unlock your PC at startup.

4. Finish Setup and Encrypt

• Choose your preferred unlock method (password or USB).
• Save your recovery key somewhere safe.
• Let BitLocker encrypt your drive (this can take a while).

What to Watch Out For

• No TPM = More Responsibility: Without a TPM, you have to remember your password or keep your USB key safe. If you lose both, you’ll be locked out.
• Performance: Most modern PCs handle BitLocker well, but encryption always adds a little overhead.
• Back Up Your Recovery Key: Store it somewhere offline (not just in your email or cloud storage).

Is This Safe?

Yes, but it’s not quite as foolproof as using TPM. Without hardware protection, a determined attacker with physical access to your computer has more options to try to break in. Still, for most people, BitLocker without TPM is a huge upgrade over no encryption at all.

Bottom Line

Don’t let the lack of a TPM chip stop you from protecting your files. With a few minutes and the steps above, you can turn on BitLocker and keep your data safe—even on older or DIY PCs.

Got questions? Drop them in the comments below!

Mark Vincent

Tech enthusiast and content creator passionate about making technology simple for everyone. I share practical tips, guides, and reviews on the latest in computers, software, and gadgets. Let’s explore the digital world together!