How to block Windows 11 from encrypting drives during installation

[harlan4096]

A clean installation of Windows 10 or Windows 11 may enable Bitlocker drive encryption automatically. The main system partition and all fixed drives will be encrypted in this case after the out-of-box experience.

Bitlocker protects data on the PC against unauthorized access by encrypting partitions and drives.

Microsoft calls this specific BitLocker feature device encryption: "Device encryption is a Windows feature that provides a simple way for some devices to enable BitLocker encryption automatically".

Problem is, since the encryption process happens automatically in this case, users may not be aware of it. This can lead to issues, for instance when reinstalling the operating system without saving the Bitlocker recovery key or using a Microsoft account. Access to files is lost in the worst case.
Thankfully, there are ways to block Windows from enabling the automatic encryption of drives during clean installs.

Option 1: during installation

New PCs come with a preinstallation of Windows. This speeds up the setup process, but it also gives users less control.

Step 1: It begins on the country or region selection screen.



Step 2: Open the Registry Editor


 

1. Use the keyboard shortcut Shift-F10 to open a command prompt window.
   
2. Type regedit and press the Enter-key.
   

This opens the Registry Editor.

Step 3: Disable automatic encryption using BitLocker

1. Use the structure on the left to go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker
   
2. Right-click on BitLocker and select New > Dword (32-bit) Value.
   
3. Name it PreventDeviceEncryption.
   
4. Double-click on it and change its value to 1.
   
5. Close the Registry Editor.
   
6. Close the Command Prompt window.
   

Continue with the installation.
...

Continue Reading