Encrypt USB Flash Drives on Windows with BitLocker or VeraCrypt

If you regularly use a USB flash drive to move files between PCs, you should treat it like a physical security risk: small, easy to misplace, and potentially accessible to whoever finds it. Encrypting the drive protects your data if the USB is lost, since access requires the correct credentials.

Quick facts

Windows’ built-in drive encryption (BitLocker) is only available starting with Windows 10/11 Pro; it isn’t offered in Windows Home.
VeraCrypt is open-source and works on Windows, macOS, Linux, Raspberry Pi, and FreeBSD.
The guide’s VeraCrypt setup uses “common VeraCrypt volume” and the default encryption algorithm: AES-256.
During setup you must choose between a password only, or a key file approach to avoid being locked out.
After encryption, Windows will prompt to format the USB because it cannot read encrypted contents directly.
To use the encrypted drive again, you mount it with VeraCrypt (the guide uses “Auto-Mount”).
Before unplugging, it’s recommended to use “Dismount All” to prevent issues.

Because many home users run Windows 10 or Windows 11 Home, the practical option here is to encrypt the USB drive with VeraCrypt rather than BitLocker. The process is designed to lock the contents so that a found or stolen drive won’t expose your personal information.

Encrypt a USB drive with VeraCrypt

Start by downloading the latest VeraCrypt version from the project’s website. On Windows, you can use either the installer or the portable version; both provide the same functionality, with the portable option not installing VeraCrypt to the PC.

After launching VeraCrypt, the app may suggest an English-language tutorial. The steps below follow the same workflow, but in Spanish, starting from the VeraCrypt home screen.

In the main interface, choose “Create Volume.” When the wizard appears, select “Encrypt partition / non-system drive,” then click Next. For the next screen, pick “Standard VeraCrypt volume” and continue.

Use “Select Device” and choose the USB drive you already connected. Then confirm “Create encrypted volume and format it” and proceed to the encryption algorithm selection. The guide notes that the default is AES with a 256-bit key size, and you should keep that selection unless you have a specific reason to change it.

Next, verify that the volume size shown matches the size you entered earlier, then continue. You’ll then set the password that protects the drive: if you lose or forget it, you won’t be able to recover access to the USB contents.

The guide also highlights a safety alternative: using a key file so that unlocking requires both the password and the additional file. After confirming your password (or password-plus-key-file setup), you proceed to the configuration step where you move the mouse over the window to increase cryptographic strength.

Keep moving until the progress indicator reaches green, then click “Format” to start the encryption and formatting process. The time required depends on the drive’s capacity.

Mount and access the encrypted USB later

When you plug the encrypted drive into a Windows PC again, Windows may ask you to format it, because it can’t access encrypted contents directly. You should not format the drive if you want to keep your data.

Instead, open VeraCrypt and use the same application to access the USB. From the VeraCrypt main screen, select “Auto Mount” so the tool detects the connected encrypted device, then enter your password.

Once mounted, the USB should appear in File Explorer and you can use it normally. Before removing the drive, the guide recommends using “Dismount All” to avoid errors or data issues.