PowerShell: Get BitLocker Status
Compliance audits, security checklists, or just making sure a laptop is safe before it leaves the building - knowing whether BitLocker is actually protecting a drive (not just installed) is essential. This one-liner shows you the encryption status for every volume in seconds.
Prerequisites:
- Privileges: Run as Administrator
- Module: Built-in, no import needed
Quick Command:
Get-BitLockerVolume | Select-Object MountPoint, ProtectionStatusExample Output:
MountPoint ProtectionStatus
---------- ----------------
C: On
D: Off📦
Want all of them at once?
Get every free one-liner from this blog in a single downloadable bundle organized by category, each with full comment-based help. No more copy-pasting one at a time.
Get every free one-liner from this blog in a single downloadable bundle organized by category, each with full comment-based help. No more copy-pasting one at a time.
How It Works:
- Get-BitLockerVolume queries BitLocker configuration for all volumes on the system, returning details like encryption status, method, and protection state.
- MountPoint identifies the drive letter (e.g. C:, D:), so you can tell exactly which volume each result refers to.
- ProtectionStatus shows On if BitLocker encryption is active and protecting the volume, or Off if it's not (even if the drive was previously encrypted or is currently being decrypted).
- Select-Object trims the output down to just these two properties, since Get-BitLockerVolume returns a lot of other data (like EncryptionMethod, KeyProtector, or VolumeStatus) that isn't needed for a quick status check.