Device encryption protects stored information using keys, so access depends on the device's supported unlocking and recovery process. It is especially relevant when a laptop or removable drive could be lost or stolen. The practical challenge is arranging protection without making legitimate recovery depend on information stored only inside the locked device.
Identify the supported protection
Check your operating system's official documentation and the settings on the actual device. Different devices and editions provide different encryption and recovery arrangements. A setting described in a guide for another computer may not exist on yours. If the device belongs to an organisation, ask its support team about the required configuration before changing it.
Apple's FileVault guidance, for example, explains supported protection for a Mac and the choices involved in recovering access. It warns that losing the necessary password and recovery information can make files inaccessible. The exact instructions change with the system, so use the current guide for your version rather than copying an old sequence of menu clicks.
Understand which risk it addresses
Encryption helps protect data stored on a device when someone does not have the required unlocking information. It does not make every action on an unlocked computer safe. A person using your already signed-in session may still access files you can access. A deceptive website may still persuade you to disclose information you voluntarily enter.
Keep normal account protections alongside encryption: a supported screen lock, updates, appropriate sharing and careful sign-in habits. Lock the screen when leaving the device unattended. For travel, follow your organisation's instructions on shutdown, transport and storage. Avoid treating one enabled setting as proof that every possible way of accessing information is covered.
Prepare recovery before changing settings
Check that important files have a tested backup. Read the recovery choices before confirming setup. If the system creates a recovery key or code, store it in a protected place accessible through an independent route. A document saved only on the encrypted laptop will not help if that laptop is the thing you cannot unlock.
Think through a realistic situation: you lose your laptop and need to use another device to retrieve files. Can you sign into the backup service? Can you access the required recovery information? Is it tied to a phone that was in the same bag? A brief rehearsal reveals dependencies that are easy to miss during routine setup.
Keep recovery ownership clear
For personal equipment, know which account or key arrangement you chose and how to retrieve it through official instructions. For work equipment, the organisation may manage recovery information. Record the support route and device identifier in the place your policy requires. Do not copy centrally managed recovery secrets into an ordinary personal notebook or shared chat.
Review recovery when changing passwords, replacing devices or changing account ownership. Not every system uses the same relationship between a login password and encryption recovery. Follow provider guidance before assuming that a familiar password change updates every relevant key. If the process is unclear, ask the appropriate support provider before making irreversible changes.
Check external storage separately
A protected internal drive does not automatically mean an external drive or exported archive has equivalent protection. Review those items on their own terms. If you encrypt removable storage, make sure the devices you need can read it and that its recovery information is also protected and available. Test with a harmless file before storing the only copy of important work.
Keep backups independent and test restoration into an appropriate protected location. The desired result is both confidentiality and recoverability: a lost device should not casually reveal its contents, and an authorised owner should have a documented, working route to the information they need.
Sources and further reading
This original guide was prepared with AI assistance. Examples are illustrative. The edition date is an assigned date in this 2026 catalogue. See our editorial policy and report a correction.