how to create a security code for a usb memory stick on mac

Create A Security Code For A Usb Memory Stick On Windows 10 Or 8
Create A Security Code For A Usb Memory Stick On Free To Format

Since we launched in 2006, our articles have been read more than 1 billion times.

But you can set up any USB flash drive as a startup key that must be present at boot before your computer can decrypt its drive and start Windows.

Whenever you start your computer, youll need to provide the USB key before it will be decrypted.

This would be particularly useful with a small USB drive you carry with you on a keychain.

Before you can follow any of the steps below, youll need to enable BitLocker encryption on your system drive from the Control Panel.

The below steps are only necessary when enabling BitLocker on computers with TPMs, which most modern computers have.

You may have the Device Encryption feature instead, but this works differently from BitLocker and doesnt allow you to provide a startup key.

To open the Group Policy Editor, press WindowsR on your keyboard, type gpedit.msc into the Run dialog, and press Enter.

Then, click the box under Configure TPM Startup Key and select the Require Startup Key With TPM option.

Note the drive letter of the USB driveD: in the screenshot below.

Create A Security Code For A Usb Memory Stick On Windows 10 Or 8

On Windows 10 or 8, right-click the Start button and select Command Prompt (Admin).

On Windows 7, find the Command Prompt shortcut in the Start menu, right-click it, and select Run as Administrator.

The below command works on your C: drive, so if you want to require a startup key for another drive, enter its drive letter instead of c.

Youll also need to enter the drive letter of the connected USB drive you want to use as a startup key instead of x.

Be careful with the keysomeone that copies the key from your USB drive can use that copy to unlock your BitLocker-encrypted drive.

First, head back to the Group Policy editor and change the option back to Allow Startup Key With TPM.

You cant leave the option set to Require Startup Key With TPM or Windows wont allow you to remove the startup key requirement from the drive.

Your BitLocker drive will automatically unlock via your computers TPM when you boot.

Create A Security Code For A Usb Memory Stick On Free To Format

If everything works properly and your computer doesnt require the USB drive to boot, youre free to format the drive or just delete the BEK file.

You can also just leave it on your drivethat file wont actually do anything anymore.

You should have saved somewhere safe when you enabled BitLocker for your system drive.

Hes written about technology for nearly a decade and was a PCWorld columnist for two years.

Chris has written for The New York Times, been interviewed as a technology expert on TV stations like Miamis NBC 6, and had his work covered by news outlets like the BBC.

Since 2011, Chris has written over 2,000 articles that have been read more than 500 million times---and thats just here at How-To Geek.

How To Create A Security Code For A Usb Memory Stick On Mac