← Back to all tech guides
🔒 Small Business

Encrypting Office Laptops, in Plain English

Last verified: October 2026

BitLocker vs FileVault, at a GlanceSame job, one switch on each platformBitLocker(Windows)FileVault (Mac)Built intoWindows Pro/BizmacOSHome editionDeviceEncryptionN/A -- all MacsTurn on fromSettingsSystem SettingsRecovery key toMicrosoftaccountApple accountThe key ruleSave it separateSave it separateEither one, turned on, makes a lost laptop's data unreadable.
BitLocker vs FileVault — same job, one switch on each platform.
Where to Keep the Recovery KeySafe and separate from the laptopPlaceGood becauseMS/Apple accountReachablefrom elsewherePrintout in safeOffline,no screen neededPassword managerOrganized,behind one keyOn the laptopNO -- thief getslock and keyKeep at least two copies, never only on the machine itself.
Keep the recovery key safe and separate — never only on the laptop.

A lost or stolen laptop is either replaceable hardware or a data breach — and encryption is the switch that decides which. Here's how to turn on BitLocker or FileVault and save the recovery key the right way. Rather have a hand? My number is (330) 200-8042.

Best For
Any laptop that leaves the building
The Tools
BitLocker (Windows), FileVault (Mac)
Golden Rule
Save the recovery key, safe and separate
Payoff
Lost laptop, not a breach

Laptop Encryption, at a Glance

Laptops get lost and stolen — it happens to careful people. Disk encryption scrambles everything on the drive so that whoever ends up with the machine sees only noise, not your customer list, invoices, or saved passwords. Windows has BitLocker (and Device Encryption on Home), and Macs have FileVault — each is one switch you may already own. The catch is the recovery key: save it somewhere safe and separate, because losing it can mean losing the data for good. There's a printable 29-page version up top.

Common Questions

1 What does encrypting a laptop actually do?

It scrambles everything on the drive into gibberish that can only be unlocked with your sign-in or a recovery key. If the laptop is lost or stolen while locked or off, the data is unreadable to whoever has it. It protects data at rest — not a machine left open and unlocked.

2 Which tool do I use — BitLocker or FileVault?

BitLocker on Windows Pro and Business editions; Device Encryption on many Windows Home laptops; and FileVault on Macs. Same idea, one switch in Settings on each. Menu names shift between versions, so check your current Settings.

3 Why does everyone make such a big deal about the recovery key?

Because encryption keeps everyone out without it — including you. There's no back door and no support line that can recover the data if both your sign-in and the recovery key are gone. Save the key somewhere safe and separate from the laptop the moment you turn encryption on.

4 Where should I store the recovery key?

In at least two independent places, kept away from the laptop: your Microsoft or Apple account, a printout in a safe, and/or your password manager. Never store the only copy on the machine it unlocks, and label each key with the laptop it belongs to.

5 Will encryption slow down my computer?

On modern machines the difference is small enough that you won't notice it in everyday work. The one-time first encryption pass takes a while, but you can keep working through it, and the hardware handles the scrambling from then on.

6 Does encryption help with cyber insurance?

Often yes. Applications frequently ask whether portable devices are encrypted, and a truthful 'yes' can help — as long as it's true for every machine they ask about. See our cyber-insurance application guide for how to answer honestly.

Would You Rather I Just Help?

Turning on encryption is quick; the part worth getting right is saving each recovery key somewhere safe and separate so you're protected without risking a lockout. I'll switch it on across every laptop you've got, store the keys properly, and leave you with a simple list of what's protected — with nothing to sell you. $99 flat for a visit, 30-day come-back-free. I'm a tech helper, not a lawyer — for any breach-notification questions I'll help you line up the right pro.

🏡
In Your Home
No remote runaround. I come to you.
💵
$99 Flat
First visit, no surprise charges.
📅
30-Day Follow-Up
Included with every visit.
📍
Local
Based in Atwater — serving Portage County.

Would you rather I just do this for you?

No shame in it — plenty of folks would rather hand it off, and that's what I'm here for. I'll come to your home, set it up right, and make sure it's working before I leave. Flat $99 per visit — no jargon, no upsell, and every visit is 30-day come-back-free.

Not a hardware job? I can often fix it remotely for $49 — a secure screen-share, up to 2 hours, that you watch the whole time and can end whenever (included free for $39/mo Support Plan members, and it counts toward the $99 if it turns out I need to come out).