how to detect the volume is encrypted or not ?

Question

Windows supports BitLocker encryption.

I want to detect third-party encryption as well. Using PowerShell commands we can detect BitLocker encryption, but there is no direct way to detect third-party encryption.

Answer 1

Hi swetha s,

Welcome to Microsoft Q&A!

This is an interesting question. Unfortunately, it’s true that Windows can reliably detect BitLocker only. This is currently by design, not a tooling gap. The only way to check for third-party encryption requires its vendor‑specific solutions.

Let’s see it this way: BitLocker is a native feature in the operating system, so its status can be queried directly to Windows. Logically, only the third-party own utilities can accurately report its encryption status.

The reason is that external encryption solutions are also assigned as data. From Windows’ perspective, the contents simply appear as information. It cannot distinguish whether a volume is encrypted or just filled with arbitrary data.

You’ve raised an interesting idea, though. Consider sharing it through the Feedback Hub (press Win + F) so the team can review it and possibly develop a way to track all encryptions on your system!

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Windows provides built-in ways to detect BitLocker status, but there is no supported, generic method to reliably detect all possible third‑party disk encryption products.

For BitLocker volumes, use the BitLocker tools to determine whether a volume is encrypted and protected:

1. PowerShell

      Get-BitLockerVolume
   

   This returns, per volume:
   • VolumeStatus (for example: whether some/all/none of the data is protected)
   • ProtectionStatus (whether a key protector is in use)
   • EncryptionMethod
2. Command line

      manage-bde.exe -status
   

   This shows, for each volume:
   • Current encryption status
   • Encryption method
   • Volume type (operating system or data)
3. Control Panel / Explorer
   • Open BitLocker Drive Encryption (Control Panel → “Manage BitLocker”) or right‑click a drive in Explorer → Turn on BitLocker / Manage BitLocker.
   • The status for each volume is shown as On, Off, Suspended, or Waiting for Activation.

These methods only report BitLocker; they do not enumerate or validate third‑party full‑disk encryption drivers. The Intune BitLocker documentation explicitly warns that enabling BitLocker on top of third‑party encryption can render a device unusable and cause data loss, which is why the BitLocker setup wizard only shows a generic warning prompt rather than attempting to auto‑detect all third‑party products.

Therefore:

• BitLocker status can be detected programmatically and via UI using the tools above.
• Detection of arbitrary third‑party disk encryption is not provided by a single supported API or PowerShell cmdlet; each third‑party product would have to be detected using its own mechanisms (drivers, services, registry keys, or vendor tools), which is outside what the BitLocker/Windows tools guarantee.

---

References:

• BitLocker operations guide
• Get-BitLockerVolume
• Disk encryption policy settings for endpoint security in Intune