This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 53%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHA%3C/text%3E%3C/svg%3E)
Hello,
How to know if my bitlocker HDD is using the new encryption (XTS) or old encryption(AES)?
And can I convert the encryption from:
a- AES to XTS?
b- 128bit to 256 bit?
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 32%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Try using Powershell and see if that gives you the data you want.
Get-BitLockerVolume
@Michael Taylor No, this dont show the encryption type and strength
Please use the Comment link to respond to answers so we can more easily track who you are responding to. Thanks.
It doesn't show encryption method which is the algorithm and key size? Please post a screenshot of what you're seeing.
As you see there is nothing showing AES or XTs and 128bit or 256 bit
The outputted list, like many Powershell commands, only shows the most common properties. The property you want is EncryptionMethod. Try this
Get-BitLockerVolume | Select-Object -Property MountPoint, EncryptionMethod, VolumeStatus, EncryptionPercentage
Perfect, it shows now "XtsAes128"
Is the the compatibility mode encryption or the best one?
ANd can I convert it to 256?
Based upon the docs Bitlocker does not allow you to convert from one system to another. To do that you first need to decrypt the drive using the current settings. Then encrypt it again using the updated settings. You can do that using Enable-BitLocker.
Bear in mind the options you have available are based upon the OS. Also you can use Group policy to change the default encryption policies going forward.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 77%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
About conversion: this would imply to decrypt and re-encrypt with the new algorithm.