Secure Boot

    Using BitLocker Without TPM on Windows 11: Complete Guide

    Enable BitLocker encryption on Windows 11 without TPM using Group Policy. Learn password-based BitLocker setup and alternative encryption options.

    Published: 3/15/20257 min readUpdated: 2/1/2026

    BitLocker can protect your Windows 11 system even without TPM hardware. This guide shows how to enable password-based BitLocker encryption.

    Can BitLocker Work Without TPM?

    Yes, BitLocker can work without TPM using password or USB key authentication instead of TPM-based automatic unlock. Enable this mode through Group Policy settings, then configure BitLocker normally.

    BitLocker offers non-TPM modes that provide encryption protection with different authentication methods.

    Enabling Non-TPM BitLocker

    1. Press Windows + R, type "gpedit.msc"
    2. Navigate to: Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
    3. Enable "Require additional authentication at startup"
    4. Check "Allow BitLocker without a compatible TPM"
    5. Apply and close

    After Policy Change

    1. Open Control Panel > BitLocker Drive Encryption
    2. Click "Turn on BitLocker" for system drive
    3. Choose password or USB key option
    4. Create recovery key (save to USB, cloud, or print)
    5. Begin encryption

    Závěr

    BitLocker without TPM provides meaningful encryption protection using password authentication. While less convenient than TPM-based automatic unlock, it's a valid security option.

    Často kladené otázky

    Jste připraveni nainstalovat Windows 11 na váš PC?

    Stáhněte FlyOOBE a postupujte podle našich návodů.

    Download FlyOOBE Free

    Související články