Encryption does not cost space, but the recovery setup can
What BitLocker actually occupies, why a drive can look different after enabling it, and what it means for cleanup.
BitLocker encrypts a volume in place and the encryption itself costs essentially nothing in space. What does take space is the surrounding arrangement, and on a small drive it is worth knowing about.
What actually uses space
| Component | Size | Note |
|---|---|---|
| The encryption itself | Negligible | Data is transformed, not expanded |
| System partition | 100 to 500 MB | Needed to boot an encrypted volume |
| Recovery partition | 500 MB to 1 GB | Present with or without BitLocker |
| Free space encryption | None permanently | Used space only is the faster option |
Checking whether it is on
manage-bde -status
Get-BitLockerVolume | Select-Object MountPoint, VolumeStatus, EncryptionPercentageWorth running even if you never enabled it: device encryption is on by default on many consumer machines signed in with a Microsoft account, and people routinely do not know.
Used space only, or the whole drive
When enabling BitLocker, Windows offers to encrypt used space only or the entire drive. Used space only is much faster and is correct for a new machine. Encrypting the whole drive also covers data from files that were deleted before encryption, which matters on a drive that has been in use, and it does not change the free space afterwards.
What it means for cleanup
Nothing changes about which folders are large or what is safe to remove. What does change is disposal: an encrypted drive whose key is discarded is effectively wiped, which is why preparing a PC to sell is simpler on an encrypted machine.
The thing to get right
Save the recovery key somewhere that is not the encrypted machine. It is stored in your Microsoft account by default, which is fine until the day you cannot sign in. A printed copy or a key kept elsewhere is the difference between a locked machine and a lost one.
Common questions
Does BitLocker use disk space?
The encryption itself does not meaningfully, because data is transformed rather than expanded. The system partition needed to boot an encrypted volume is a few hundred megabytes.
How do I check if BitLocker is on?
Run manage-bde -status or Get-BitLockerVolume in an administrator prompt. Device encryption is enabled by default on many consumer machines, so it is worth checking even if you never turned it on.
Should I encrypt used space only or the whole drive?
Used space only for a new machine, which is much faster. Encrypting the whole drive also covers data from previously deleted files, which matters on a drive that has been in use.
Does encryption change how I clean up a drive?
No. The same folders are large and the same things are safe to remove. It does make disposal simpler, because discarding the key makes the drive unreadable.