How to Set up BitLocker to Automatically Unlock PC via TPM at Startup in Windows 11

This article describes steps one can take to set up BitLocker automatically unlock a PC at startup via TPM in Windows 11.

BitLocker helps protect your data on your computer so only authorized users have access to it. New files created on a BitLocker-enabled drive will automatically be protected as well.

BitLocker will automatically check the PC at startup to make sure that the computer has not been tampered with, including BIOS changes and other security risks.

By default, a PC with a TPM chip which is recognized by BitLocker will automatically unlock the PC during startup. Users can add additional security measures to be used at startup to provide added protection for encrypted data.

If you have set up BitLocker to require users to insert a USB drive that contains a startup key as well as a PIN at startup before the computer starts, the steps below show you how to revert to the default behavior.

Disable BitLocker requirements for USB and PIN at startup on a PC with Windows 11

As described above, If you have set up BitLocker to require users to insert a USB drive that contains a startup key as well as a PIN at startup before the computer starts, here’s how to disable that.

With BitLocker enabled on your OS drive, open the Control Panel and browse to the BitLocker page.

Control Panel\System and Security\BitLocker Drive Encryption

Then click on the link that reads “Change how drive is unlocked at startup“.

windows 11 change how dirve is unlocked at startup
Windows 11 changes how the drive is unlocked at the startup

Next, select the “Let BitLocker automatically unlock my drive” link to continue.

windows 11 let bitlocker automatically unlock my drive link
Windows 11 let BitLocker automatically unlock my drive link

Click Finish on the next page.

windows 11 let bitlocker automatically unlock my drive finish
Windows 11 let BitLocker automatically unlock my drive finish

BitLocker’s default behavior of automatically unlocking the PC OS via TPM will begin when you restart your computer.

That’s it.

Conclusion:

This post showed you how to disable BitLocker requiring a PIN and USB flash drive with a BitLocker key at startup on Windows 11.

If you find any error above or have something to add, please use the comment form below.