Windows 10 and Windows 11 21H2 have two kinds of encryption BitLockerandWindows gadget Encryption.
starting with version 22H2, Windows 11 Enterprise, and Education editions add Personal Data Encryption.
It is available on Windows Enterprise and Windows Education.
![]()
Personal Data Encryption differs from BitLocker since it encrypts individual files and content rather than entire volumes and disks.
PDE leverages Windows Hello for Business to link data encryption keys with user credentials.
This feature minimizes the number of credentials users must remember to reach the content.

Bitlocker encrypts your disk.
Sometimes, you may encounter the Bitlocker keeps asking for recovery key issue on Windows 11/10.
Here is how to fix the issue.

How Does PDE Protect Files
When a file is PDE protected, its icon displays a padlock.
PDE uses Windows Hello for Business to secure the keys that protect the files.
EFS uses certificates to secure and protect the files.
![]()
How to Enable Personal Data Encryption
1.
Log into theMicrosoft Intune Admin Center.
Go toDevices > Windows > Configuration profiles > Create a profile.
Click thePlatformdrop-down menu to chooseWindows 10 and later.
Click theProfiletype drop-down menu to chooseSettings catalog.
Under theBasicspart, typePersonal Data Encryptionand clickNext.
Now inConfiguration configs, you should clickAdd configs.
TypePersonal Data Encryptionin the search box and selectPDE.
Personal Data Encryption is disabled by default.
Turn onEnable Personal Data Encryption(User) and click theNextbutton.
Final Words
What Is Personal Data Encryption?
How does Personal Data Encryption work?
How to enable Personal Data Encryption on Windows 11?
The above content provides answers for you.
I hope you’re able to find the information you need here.