If you want to set or configure how you would like to use passwords for BitLocker removable drives, you need to follow this guide. This tutorial explains everything about using the passwords for BitLocker removable drives in Windows 11 and Windows 10 computers using Local Group Policy Editor and Registry Editor.
How to configure use of passwords for BitLocker removable drives
To configure the use of passwords for BitLocker removable drives in Windows 11/10 using Group Policy Editor, follow these steps:
- Search for gpedit in the Taskbar search box.
- Click on the search result.
- Navigate to Removable Data Drives in Computer Configuration.
- Double-click on the Configure use of passwords for removable data drives setting.
- Choose the Enabled option.
- Set the password requirements.
- Click the OK button.
Let’s find out more about these steps in detail.
First, you need to open the Local Group Policy Editor on your PC. For that, search for gpedit or gpedit.msc in the Taskbar search box and click on the search result.
Then, navigate to this path:
Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Removable Data Drives
Then, find out the setting called Configure use of passwrods for removable data drives on the right side and double-click on it.
Choose the Enabled option. After that, set things up as per your requirements. For example, you can enable or disable the requirements for the password for removable data drives, configure the complexity, and minimum password length for removable data drives.
After setting all these up, click the OK button to save the change.
How to configure use of passwords for BitLocker removable drives using Registry
To configure the use of passwords for BitLocker removable drives using Registry, follow these steps:
- Press Win+R to open the Run prompt.
- Type regedit > click the OK button > click the Yes button.
- Go to Microsoft in HKLM.
- Right-click on Microsoft > New > Key and name it as FVE.
- Right-click on FVE > New > DWORD (32-bit) Value.
- Set the name as RDVPassphrase.
- Double-click on it to set the value data as 1.
- Repeat the same steps to create RDVEnforcePassphrase, RDVPassphraseComplexity, and RDVPassphraseLength.
- Set the Value data accordingly and click the OK button.
- Restart your computer.
To know more about these aforementioned steps, continue reading.
To get started, press Win+R to open the Run prompt, type regedit, click the OK button and click the Yes button to open the Registry Editor. Then, go to this path:
HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoft
Right-click on Microsoft > New > Key and set the name as FVE.
Right-click on FVE > New > DWORD (32-bit) Value and name it as RDVPassphrase.
Double-click on it to set the Value data as 1.
Following that, you need to create three more REG_DWORD values. Do that and name them:
- RDVEnforcePassphrase
- RDVPassphraseComplexity
- RDVPassphraseLength
For your information, RDVEnforcePassphrase is to enable or disable password requirements for removable data drives. That said, you can set the value data as 1 to enable this setting.
RDVEnforcePassphrase REG_DWORD value denotes the activation of password complexity level. You can set the Value data as 0, 1, or 2.
The last one is RDVPassphraseLength. By default, it is set to 8. However, you can choose any value from 6 to 20.
Finally, click the OK button and restart your computer.
How do I put a password on my BitLocker?
To put a password on your BitLocker-protected data drives, you can use the Command Prompt or Windows PowerShell. First, open the Command Prompt or PowerShell with administrator permission and enter this command: manage-bde -protectors -add c: -TPMAndPIN. Then, you need to enter the PIN twice for confirmation.
How do I change BitLocker settings?
To change BitLocker settings in Windows 11 or Windows 10, you have three options. You can use Control Panel, Local Group Policy Editor, and Registry Editor. Control Panel comes with the least number of options, whereas you can find the most options in the Local Group Policy Editor and Registry Editor.