A lost or stolen USB drive without encryption immediately exposes all stored data. Without access protection, anyone who finds it can open the files — documents, photos, passwords, confidential business data.
Encryption makes the data on the drive unreadable — an access password is required.
Method 1: BitLocker To Go (Windows)
BitLocker To Go is Microsoft's built-in encryption solution for external drives — free in Windows Pro, Enterprise, and Education.
- Insert the USB drive → open File Explorer
- Right-click on the USB drive → \"Turn on BitLocker\"
- Enter a password (recommended: at least 16 characters, use the Password Generator)
- Save the recovery key (essential backup!)
- Choose encryption scope → "Start encrypting"
Duration: 5–30 minutes depending on the drive size
Note: BitLocker To Go is only available in Windows Pro. Windows Home can open encrypted drives but cannot create them.
Method 2: VeraCrypt (Free, Cross-Platform)
VeraCrypt is the leading open-source encryption tool — free, independently audited, and available for Windows, macOS, and Linux.
Advantage over BitLocker: Works on all operating systems, open source, no Microsoft account required.
- Download VeraCrypt from veracrypt.fr
- "Create Volume" → "Create an encrypted file container"
- Save on the USB drive as a file (e.g.,
data.vc) - Encryption: AES (standard), Hash: SHA-512
- Set a password: at least 20 characters, use the Password Generator
- Format the volume → Done
To open: Launch VeraCrypt on the target computer → mount the container file → enter password → open as a drive
Method 3: macOS – Finder Encryption
On macOS, drives can be encrypted directly via Finder:
- Finder → select the drive → right-click → \"Encrypt [Name]...\"
- Set a password
- Drive is encrypted in APFS format with AES-256
Limitation: Only readable on macOS devices (APFS format).
Hardware-Encrypted USB Drives
For maximum security, there are USB drives with a built-in encryption chip — no software needed, PIN entered directly on the device.
- Kingston IronKey S1000 (FIPS 140-2 Level 3 certified)
- Apricorn Aegis Secure Key
- Verbatim Store 'n' Go Secure
Price: approx. €60–200 depending on capacity
Choosing the Right Password for Your Encrypted USB Drive
The encryption password is the only key to your data. Recommendations:
- At least 16 characters (VeraCrypt: 20+ recommended)
- Generate with the Password Generator
- Store securely in a password manager
- Keep the recovery key (BitLocker) in a safe place