Microsoft’s software encryption for SSDs, BitLocker, has been discovered to significantly slow down SSD performance on Windows 11 Pro. BitLocker is automatically enabled when Windows 11 Pro is installed, aiming to enhance the security of SSD-related processes. TomsHardware conducted tests and found that running certain applications could seriously impact SSD speeds. This issue occurs because BitLocker prompts encryption and decryption processes with SSD data while read and write processes are ongoing. Consequently, each file extraction or storage action triggers an automatic encryption or decryption process. A pcwelt.de article accuses Windows 11 developers of including encryption software as part of the installation process without giving users the option to disable it.
The heart of the problem lies in Microsoft’s reluctance to relinquish encryption control to SSD manufacturers. If they were to do so, they would have to rely on these manufacturers to manage a critical feature for Windows 11 Pro users. However, vulnerabilities have been identified in the hardware encryption code developed by SSD manufacturers in recent years. Although these vulnerabilities have been patched, Microsoft appears hesitant to depend on a third-party for guaranteeing SSD security. Notably, this issue does not seem to affect Windows 11 Home because BitLocker encryption is not supported.
To determine if your SSD is affected, you can follow these steps:
1. Open the Windows 11 Pro Command line with administrator rights.
2. Enter the command: manage-bde -status
3. This will open the BitLocker Drive Encryption: Configuration Tool, allowing you to analyze all drives on your computer.
4. By opening Conversion Status, you can assess how your SSD data is encrypted.
5. In Encryption Method, you can see the encryption type used on each drive: software encryption (“XTS-AES”) or hardware encryption (“Hardware Encryption”).
6. “XTS-AES” indicates BitLocker is enabled and running software encryption, while “Fully decrypted” means BitLocker is disabled, and encryption occurs within the SSD.
When using SSD-intensive programs, the additional encryption or decryption processes imposed on each SSD operation increase the load on the device. Microsoft may be working on a software patch to address this issue, but its status is currently unconfirmed.
If you wish to configure BitLocker in Windows 11 Pro to speed up your device, you have to consider your needs for data protection. Disabling BitLocker is an option, but it is recommended for individuals who do not use their computers for work purposes or have highly sensitive files. To disable BitLocker, follow these steps:
1. Open the Windows 11 Pro Command line with administrator rights.
2. Enter the command: manage-bde -off C:
(C: represents the drive you want to remove BitLocker from. Change it accordingly if necessary.)
3. Restart your computer to complete the process of disabling BitLocker.
It is worth noting that you can switch from software encryption to hardware encryption instead of disabling SSD encryption entirely. This process is also detailed by pcwelt.de.
Understanding the inner workings of your computer and digital security is crucial, even if you choose not to disable BitLocker. This information is particularly relevant for individuals using their computers for work purposes or dealing with sensitive data.
I have over 10 years of experience in the cryptocurrency industry and I have been on the list of the top authors on LinkedIn for the past 5 years.