Check BitLocker encryption status with manage-bde

See whether a volume is encrypted, which protectors guard it, and how far a conversion has progressed — all from one command.

WindowssystemsecurityDiagnosticsLow risk
Run `manage-bde -status C:` in an elevated prompt to view conversion status, protection status, encryption method, and configured key protectors.

01Command

Command
$ manage-bde -status C:

02What it does

The output separates Conversion Status (Fully Decrypted, Used Space Only Encrypted, Fully Encrypted, or a percentage in progress) from Protection Status (Protection On/Off) — a drive can be encrypted but temporarily unprotected, e.g. after firmware changes. The Protectors section lists TPM, TPM+PIN, or Recovery Password entries. Capture your 48-digit recovery key before it matters: `manage-bde -protectors -get C:` shows it, and `manage-bde -on C:` starts encryption, `manage-bde -off C:` decrypts. A quick GUI cross-check exists in Control Panel > BitLocker Drive Encryption.

03Risk

RiskLow risk
RequirementsRun as administrator; BitLocker is built into Windows Pro, Enterprise, and Education editions.
!Warning: Never start a decryption or encryption run on a laptop with a failing battery — an interrupted conversion can lock the volume behind a recovery key you may not have.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • manage-bde status | Microsoft Learn
    Microsoft · vendor-doc · 2026-09-17
    Evidence: Microsoft documents manage-bde -status as providing key protection, encryption percentage and volume information for drives.
  • Manage BitLocker - manage-bde - Windows CMD
    SS64 · technical · 2026-09-17
    Evidence: SS64 lists manage-bde switches including -on, -off, -status and -protectors for managing BitLocker from the command line.

Last verified: 2026-09-17 · Category: Security & Privacy

06Related solutions