DePaul University Information Services > Services > E-mail > Windows 8.1 Encryption

Windows 8.1 Encryption

DePaul owned Windows 8.1 devices that are using the DePaul Administrative image will already be encrypted.  

Some devices that are designed for consumer purposes do not support device encryption.  These devices will not have these options, nor will they be held to the encryption requirements.

For Windows 8.1 RT devices (Surface RT, Surface 2 (non-Pro), etc), encryption is automatically enabled when someone with a Microsoft account and administrative rights to the device logs in.  When this occurs, a recovery key is stored in your Microsoft account.  

For Windows 8.1 Non-RT devices, Encryption is not automatically enabled.  During the encryption process, make sure you have your device plugged in to power, as this process can take approximately 30 minutes, and can drain a battery charge faster than normal.  

  • To enable encryption on your Windows 8.1 device:
  • From the Desktop, open Windows Explorer
  • Brows to the C:\ drive under Devices and Drives, then right click (or tap and hold on a touch screen)
  • Select "Turn on BitLocker"



  • The BitLocker window will appear.  After it finishes starting, you will be asked where to save your recovery key.  We suggest choosing "Save to your Microsoft Account". 



  • After selecting where to save your recovery key, you will be asked how much of your drive you want to encrypt.  We reccomend choosing "Encrypt Entire Drive", unless you've just started using the device.  


  • The next screen will ask if you are ready to encrypt the drive.  Check the box for "Run BitLocker system check", which will check for any common issues before encrypting.  


  • Now choose "Start encrypting".  Your device may reboot at this time.  After it comes back up, you will see a popup balloon stating that your drive is being encrypted.  Clicking on this will give you a progress window.  

After the process is finished, your C:\ drive will have an icon with a padlock.  This shows that the drive is now encrypted.


BitLocker will request the recovery key if it detects a change or issue with the device.  When this challenge occurs, you will not be able to u​se the device until you provide the recovery key.  For more information on BitLocker recovery keys, please visit Microsoft's BitLocker Key FAQs here​.​​






Changing the Device PIN

PIN complexity requirements w​ill force PINs to be reset if they do not meet minimum security settings.  The requirements are as follows:
  • PINs must be a minimum of 4 characters.
  • PINs cannot be the same character repeated (i.e. '1111' or '2222')
  • PINs cannot contain sequential patterns (i.e. '1234' or '6789')
To reset PINs that do not meet these requirements, follow these steps:
  • Swipe in from the right edge of the screen, and tap 'Settings'
  • Tap or click 'Change PC settings'
  • Tap or click 'Accounts'
  • Tap or click 'Sign-in options'
  • under 'PIN', tap or click 'Change'
  • Confirm your current password
  • Update your PIN
​​​​