Drive encryption, also known full‑disk encryption (FDE) is a security technology that protects data stored on a computer’s hard drive or solid‑state drive by converting it into unreadable, encrypted code. This prevents unauthorized people from accessing the data, even if the device is lost, stolen, or the drive is removed and placed into another machine.

Drive encryption safeguards data at rest, ensuring that sensitive information stays protected unless the correct password, key, or authentication method is provided.

‍

How Drive Encryption Works

Drive encryption uses cryptographic algorithms to automatically convert plaintext data into ciphertext before it is written to the disk. Only users with the correct encryption key can decrypt and access the information. Without that key, the data remains unreadable.

Disk encryption encrypts every bit of data on a disk or disk volume, preventing unauthorized access to stored data.
It ensures data remains inaccessible even if the physical drive is removed and connected to another system. ‍

The process is seamless to the user, data is encrypted on write and decrypted on read automatically.

‍