BitLocker is enabled by default on newer Windows 11 installations under "Device Encryption". In this mode, the hard disk is encrypted at rest, but is automatically decrypted when a legitimate ...