How to securely encrypt a USB flash drive

Summary

Securing encryption on a USB flash drive

Body

Encrypting a portable USB flash drive is a great way to prevent sensitive data falling into the wrong hands, preventing data breaches and security incidents. This guide will demonstrate how to securely encrypt a USB flash drive within macOS so that the data stored on it cannot be read nor accessed without entering a secure password.

Windows

This section applies to encrypting a flash drive on Windows 7 Enterprise, Windows 7 Ultimate, Windows 10 Enterprise, and Windows 10 Pro using the built-in encryption tool BitLocker.

Windows 10 can unlock a flash drive encrypted on Windows 7, and vice versa. USB flash drives encrypted with BitLocker cannot be opened with macOS

 Step 1

Insert your USB flash drive into your Windows PC. Open File Explorer.

Step 2

Right-click on the flash drive and select Turn on BitLocker.

Step 3

When prompted, select Use a password to unlock this drive.

Step 4

Enter and confirm a password. You can change this password later if you remember the original. When asked how to store your recovery key, select Save the recovery key to a file and store it somewhere only you can access. This file does not contain your password.

Step 5

If available, select Encrypt used space onlyWindows will encrypt your USB flash drive. This may take a few minutes, and you will be notified once it is complete.


Using your encrypted USB flash drive

Plug your encrypted USB drive into a computer. You'll be prompted to enter the password you created.

  • You can choose to automatically unlock the drive on particular PCs (use this option cautiously).
  • Windows will manage encryption and decryption while the drive is plugged in.
  • When finished, simply unplug the drive.


How to change your BitLocker password

Step 1

Right-click the encrypted flash drive in File Explorer.

Step 2

Select Change BitLocker passwordEnter your current password and then your new password when prompted.


How to disable encryption

If you no longer wish to utilize encryption on your USB flash drive, you can permanently disable it. This action will remove the encryption and allow you to use the drive on computers that do not support Bitlocker, and will permanently stop securing the data on your USB Flash Drive.

Step 1

Right-click the encrypted flash drive in File Explorer. Select Manage BitLocker.

Step 2

On the following screen, click Turn off BitLocker.

Confirm the action. Windows will decrypt the drive; this may take time. Once complete, you can use the flash drive without restrictions.

macOS

This section applies to encrypting a flash drive on macOS using the built-in encryption tool FileVault.

Drives encrypted with FileVault cannot be opened by Windows. The password chosen to encrypt the drive cannot be changed after configuration.

  1. Insert your USB flash drive into your Mac.
  2. When the icon appears on your desktop, right click on it and select Encrypt.
  3. You will then need to enter and confirm a password (as well as a password hint). This password cannot be changed.
  4. Encryption should only take a few minutes; once complete, you USB flash drive will be fully protected.

Using your encrypted USB flash drive

Plug the encrypted drive into your Mac. Enter the password you created when prompted.

  • macOS will manage encryption and decryption automatically.
  • When finished, unplug the drive to remove it securely.

How to disable encryption

Step 1

Right-click the encrypted drive in Finder. Select Decrypt.

Step 2

Enter your password to confirm.

macOS will decrypt the drive; this may take some time. Once decryption is complete, the drive will be usable without restrictions.

Details

Details

Article ID: 20342
Created
Thu 7/31/25 10:54 AM
Modified
Wed 11/19/25 1:33 PM