How to turn on BitLocker drive encryption on Windows 10 without TPM?

Posted by Tim to BitLocker for Windows Home on October 22nd, 2020

Like Windows 8, BitLocker drive encryption is available in Windows 10 Professional and Enterprise edition, but it is still missing in Windows 10 Home.

If you are using Windows 10 Home edition, read our How to enable BitLocker drive encryption on Windows 10 Home article for the detailed instructions.

However, encrypting the boot partition (C: drive) requires your computer has a TPM installed. If your computer doesn't have a TPM chip installed, you need to allow BitLocker without a compatible TPM.

Tutorial to allow BitLocker without a compatble TPM:

Step 1: Use Windows key + R keyboard shortcut to open the Run command, type gpedit.msc and click OK.

Step 2: Under Computer Configuration, expand "Administrative Templates".

Step 3: Expand "Windows Components".

Step 4: Expand "BitLocker Drive Encryption" and "Operating System Drives".

Step 5: On the right side, double-click "Require additional authentication at startup".

Step 6: On "Require additional authentication at startup" window, select "Enabled", make sure to check the "Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive)" option and click OK to complete the settings.

Require additional authentication at startup

Step 7: After the above settings are done, you can turn on BitLocker drive encryption on the boot partition (C: drive), read our article: How to turn on BitLocker drive encryption on the Operating System drive for the detailed instructions.