How to encrypt a flash drive (Infosec Approved Use Cases Only)

For scenarios where encryption such as Bitlocker cannot be utilized, specialized USB drives with embedded hardware that allows for PIN authentication will be advised for use. Contact the Asset or Information Security teams for recommendations.

Contact Infosec or Workstation for getting the Encryption Key stored in a safe location

The steps one must take to encrypt a flash drive will vary depending on what operating system your computer uses. Here’s how to make it happen when you’re using Windows:

  1. Plug your flash drive into a USB port of your Windows computer.
  2. Select File Explorer. If you can’t find it, select the Windows logo key+E.
  3. Right-click your flash drive and select BitLocker, turn BitLocker on, and wait for BitLocker to start.
  4. Choose a password that you’ll use to unlock your flash drive. It’s important that you choose a strong password that others wouldn’t be able to guess. Never reuse passwords across devices — your password for your flash drive should be completely new.
  5. Choose how to save your recovery key. The recovery key will let you recover the information on your flash drive in case you forget the password.
  6. Select what data you want to encrypt. You can select the entire drive or the used disk space only.
  7. Choose Start Encrypting. Keep your flash drive plugged in for this entire process.
  8. You’ll receive a notification when the encryption process is complete. Once you receive this notification, it is safe to remove your flash drive from the computer.

After the data has been transferred or printed, the data should be deleted from the flash drive.