Skip to main content
Secure ConfigHigh priority

Enable full-disk encryption on your laptop

Turn on BitLocker (Windows) or FileVault (Mac) to encrypt everything on your laptop's hard drive.

Why this matters

If your laptop is lost or stolen, encryption means the thief cannot read your files even if they remove the drive.

How to do it

  1. Windows: 1. Search for 'Manage BitLocker' in Start
  2. Click 'Turn on BitLocker' next to your main drive
  3. Save your recovery key to your Microsoft account or a USB drive
  4. Choose to encrypt the whole drive
  5. Mac: 1. Open System Settings → Privacy & Security
  6. Click 'FileVault' and turn it on
  7. Store the recovery key safely

Cyber Essentials framework

This task falls under the Secure Configcontrol — one of five areas assessed in the UK's Cyber Essentials scheme. Completing it counts toward your Cyber Essentials alignment.

Track your full security score — free

Create a free account to check off tasks, see your Security Score, and build toward Cyber Essentials alignment.

Start your free security check