Encrypt USB/External HDD/SSD (Windows/macOS) : Step-by-Step

Last Updated : September 25, 2026

This content addresses the critical need for data security on portable storage. It provides a comprehensive set of instructions for encrypting USB sticks and external drives using built-in OS tools (BitLocker, APFS) and trusted third-party applications from Newsoftwares.net (USB Secure, Folder Lock). This ensures privacy and data integrity, offering users convenience with practical, tested methods for cross-platform compatibility and troubleshooting common issues.

External-drive encryption

In this Article:

Toggle

Encrypt the drive in a format its users can actually open

Windows users can protect removable drives with BitLocker To Go, while macOS can create encrypted APFS or Mac OS Extended volumes. A cross-platform encrypted container can help mixed environments, but every recipient needs compatible software and a tested recovery plan.

BitLocker To GoEncrypted APFSVeraCrypt containerRecovery keyFilesystem compatibility

Direct Answer

You can fully encrypt any USB stick or external HDD SSD on Windows and macOS using built in tools or trusted apps like BitLocker, APFS encryption, VeraCrypt, and NewSoftwares tools such as USB Secure and Folder Lock, without losing data when you pick the right method.

Everything below shows you exactly how to do that, how to pick the right option, how to confirm it worked, and how to fix the common errors that usually never get explained.

Gap Statement: What Most Explanations Miss

Most explanations of USB and external drive encryption have three big gaps:

1. They skip Windows Home users and only mention BitLocker, which many people do not have.
2. They gloss over macOS APFS conversion without explaining why “Encrypt” sometimes does not appear in Finder or what to do if the drive is MBR.
3. They rarely show portable options like USB Secure or Folder Lock lockers for people who move drives between shared or unmanaged PCs.

This walkthrough closes those gaps with stepwise instructions, a method chooser, and real troubleshooting examples.

TLDR Outcome

By the time you finish this piece you will be able to:

• Encrypt a USB or external HDD SSD with BitLocker To Go on Windows Pro and confirm status in manage-bde.
• Encrypt the same type of drive on macOS using APFS encrypted volumes from Finder or Disk Utility, including “without formatting” where possible.
• Add an extra layer using NewSoftwares tools like USB Secure and Folder Lock when you need encryption that travels with the drive even on random Windows machines.

1 How To Choose The Right Method In One Look

Method Chooser Table

Use this small chooser to match your situation.

Situation	OS	Best Primary Method	Extra Tools	Notes
You have Windows Pro or Enterprise	Windows	BitLocker To Go	USB Secure or Folder Lock for extra control	Native, strong, simple unlock on other Windows machines
You have Windows Home only	Windows	VeraCrypt container or USB Secure	Folder Lock locker	No BitLocker To Go here, so use container or portable app
You need to move data between many shared PCs	Windows	USB Secure on the drive	Folder Lock wallet for small secret sets	Password prompt travels with the drive itself
You are on Mac most of the time	macOS	APFS encrypted volume via Finder Encrypt	Optional VeraCrypt container	Best fit when all machines are Mac
You move between Mac and Windows often	Both	VeraCrypt container on the drive	Optionally also BitLocker or APFS on top	Needs VeraCrypt on each computer
You only want to stop casual access on one PC	Windows	Folder Lock or Folder Protect	USB Block for port control	Good for family machines or shared desktops

 

NewSoftwares options that matter here:

• USB Secure encrypts and password protects any USB or external drive and runs directly from the drive itself on Windows.
• Folder Lock stores sensitive files in encrypted lockers and also has wallet type storage for credentials and personal data.
• USB Block blocks unauthorized USB storage devices from connecting to your PC which is useful when you care as much about preventing data leaving your machine as you care about encrypting your own drives.

2 Prerequisites And Safety Checks

Do these checks before you encrypt anything.

2.1 Backups First

• Copy anything important from the USB drive or external disk to another safe place.
• Some methods can convert in place without formatting, especially APFS encryption on macOS for GPT drives, but things can still go wrong.

2.2 Check Your Windows Edition

1. Press Windows key.
2. Type winver and press Enter.
3. Check whether the window says Home, Pro, Enterprise, or Education.

• BitLocker To Go is available only on Pro, Enterprise and Education.
• If you see Home you will use VeraCrypt or USB Secure instead.

2.3 On Macos Check The Partition Scheme

1. Open Disk Utility.
2. Select the external drive in the left sidebar.
3. Look at the information line for “Scheme”.

• If you see GUID Partition Map you can use APFS encryption without formatting in many cases.
• If you see Master Boot Record the Finder Encrypt option will be missing and you will need to erase and reformat, or use a container based method.

3 Windows Pro And Enterprise BitLocker To Go For USB And External Drives

This is the cleanest way to encrypt a removable drive on supported Windows.

3.1 Turn On BitLocker To Go

1. Plug in your USB drive or external HDD SSD.
2. Open File Explorer.
3. Right click the removable drive.
4. Select Turn on BitLocker.

If you do not see this line:

• Confirm the edition is Pro or higher.
• Check that the drive is formatted as NTFS or exFAT.
• If the option is still missing, see the troubleshooting section later.

3.2 Choose Unlock Method

1. On the BitLocker wizard screen pick Use a password to unlock the drive.
2. Create a strong passphrase of at least 16 characters.
3. Avoid only lowercase and common phrases.

You can also add a smart card option in corporate setups but password is enough for most cases.

3.3 Save Your Recovery Key

Windows now asks where to save the recovery key. Pick at least two options:

• Save to your Microsoft account if allowed.
• Save to a file on another drive that is not the one you are encrypting.
• Print it and store it safely offline.

Never keep the recovery key inside the same encrypted drive.

3.4 Choose How Much Of The Drive To Encrypt

You will see two main options.

• Encrypt used space only
• Encrypt entire drive

For new or mostly empty drives, encrypt used space only. For drives that have held sensitive data in the past, encrypt the entire drive to avoid traces in free space.

3.5 Choose Compatibility Mode

You will see two modes:

• New encryption mode for fixed drives that stay on this device.
• Compatible mode for removable drives to use on older versions of Windows.

Choose compatible mode for USB drives or anything you may plug into other computers.

Then start encryption. A progress bar appears in the system tray. You can keep working while it runs.

3.6 Verify BitLocker Worked

Once the process finishes:

• In File Explorer the drive icon shows a small padlock.
• When you unplug and plug in again Windows prompts for the BitLocker password.

For deeper verification use the command line:

12 2 FAQPage Schema

12 3 ItemList Schema For Method Comparison