Check BitLocker encryption status with manage-bde
See whether a volume is encrypted, which protectors guard it, and how far a conversion has progressed — all from one command.
01Command
$ manage-bde -status C:02What it does
The output separates Conversion Status (Fully Decrypted, Used Space Only Encrypted, Fully Encrypted, or a percentage in progress) from Protection Status (Protection On/Off) — a drive can be encrypted but temporarily unprotected, e.g. after firmware changes. The Protectors section lists TPM, TPM+PIN, or Recovery Password entries. Capture your 48-digit recovery key before it matters: `manage-bde -protectors -get C:` shows it, and `manage-bde -on C:` starts encryption, `manage-bde -off C:` decrypts. A quick GUI cross-check exists in Control Panel > BitLocker Drive Encryption.
03Risk
04Undo
✓No undo needed — this command does not change persistent state.
05Sources
- manage-bde status | Microsoft LearnEvidence: Microsoft documents manage-bde -status as providing key protection, encryption percentage and volume information for drives.
- Manage BitLocker - manage-bde - Windows CMDEvidence: SS64 lists manage-bde switches including -on, -off, -status and -protectors for managing BitLocker from the command line.
Last verified: 2026-09-17 · Category: Security & Privacy
06Related solutions
Query every installed hotfix with its install date and type from PowerShell — the fastest way to confirm a specific KB number actually landed.
Use the System File Checker to verify every protected Windows system file against known-good copies and automatically replace the damaged ones.
Diagnose NTFS file system errors and bad sectors on any volume — including the system drive while Windows is running — before committing to a repair.