Security Posture Best Practices

Encrypting Your Computer Hard Drives

  • Updated

Encryption helps protect the data on a device, ensuring that data can only be accessed by people with authorization. As an employee, setting up the encryption of your hard drive can help keep your machine secure. 


Encrypting macOS

  • Turn on and set up FileVault.
  • Choose Apple menu > System Preferences, then click Security & Privacy.
  • Click the FileVault tab.
  • Click 🔒, then enter an administrator name and password.
  • Click Turn On FileVault.


Encrypting Windows 10 and 11 Pro:

Check if your device supports encryption

  • Open Start.
  • Search for System Information, right-click the top result, and select the Run as administrator option.
  • Click the System Summary branch from the left pane.
  • Check the "Device Encryption Support" item, and if it reads Meets prerequisites, then your computer includes support file encryption.

  • Note: If the ''Device Encryption Support'' item reads ''Elevation Required to View'', you did not open the System information tab as an administrator. 

Turn on Device encryption: 

  • Open Settings.

  • Click on Privacy & Security (Win 11) or Update & Security (Win 10).

  • Click on Device encryption.
    • If the Device encryption page isn't available, then your device does not support the encryption feature. You may still be able to enable Bitlocker.
  • Under the Device encryption section, click the Turn on button.

Enable BitLocker

    • Sign in to Windows with an administrator account.
    • In the search box on the taskbar, enter Manage BitLocker and select from results. OR select the Start button.
    • Under Windows System, select Control Panel.
    • In the Control Panel, select System and Security.
    • Then under BitLocker Drive Encryption, select Manage BitLocker. You’ll only see this option if BitLocker is available for your device.
    • Select Turn on BitLocker and follow the instructions provided.

 If Vanta is still reporting that the disk is not encrypted after following the above steps, please see our Troubleshooting Windows Disk Encryption guide.


Encrypting Linux

  • Detecting disk encryption on Linux is complex and varies widely. We recommend you encrypt your disks with LUKS, follow this guide