BitLocker

in plain english

Windows' built-in full-disk encryption. Protects data at rest if a laptop is lost or stolen. Free to use on Windows Pro/Enterprise/Education. Manage and recover keys via Intune (cloud) or Active Directory (on-prem).

official microsoft definition

A data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. Provides volume encryption and integrity checking via TPM.

plans & eligibility

• Built into Windows Pro/Enterprise/Education editions (no extra licence)
• Recovery key management requires Intune (with Entra ID) or Active Directory + MBAM/SCCM

related on aguidetocloud