How to Password-Protect a USB Flash Drive

Three ways to lock your USB drive with a password

You can password-protect a USB flash drive using built-in operating system tools, third-party encryption software, or hardware-encrypted drives that come with password protection built in. The method you choose depends on your operating system, how much security you need, and whether you want to encrypt the entire drive or just specific folders.

Windows users can use BitLocker (on Pro, Enterprise, and Education editions) or third-party tools like VeraCrypt. Mac users have FileVault or can use third-party encryption software. Linux users typically rely on LUKS encryption or third-party tools. Some USB drives ship with their own password software pre-installed, which requires no setup beyond creating your password.

Key Takeaways

Windows Pro and Enterprise can use BitLocker to encrypt an entire USB drive; Windows Home edition requires third-party software like VeraCrypt or 7-Zip.
Mac users can encrypt a USB drive using Disk Utility and FileVault, which is built into macOS.
Third-party tools like VeraCrypt work across Windows, Mac, and Linux, but require installation and setup on each computer where you want to open the drive.
Hardware-encrypted USB drives come with password protection already installed and do not require software installation on the computer you plug into.
Password-protecting a USB drive does not prevent physical damage or loss; it only prevents someone with access to your computer from reading the files without the password.

Using BitLocker on Windows Pro, Enterprise, or Education

BitLocker is built into Windows Pro, Enterprise, and Education editions. To use it, plug in your USB drive, right-click it in File Explorer, and select Turn on BitLocker. Windows will walk you through creating a password and choosing whether to save a recovery key (you should save this somewhere safe, separate from the drive itself).

Once BitLocker finishes encrypting the drive — which can take several minutes to several hours depending on the drive's size — the drive will lock automatically when you eject it. Every time you plug it in, Windows will prompt you for the password before showing you the files. BitLocker works only on Windows; if you plug the drive into a Mac or Linux computer, you will not be able to read it without additional software.

Windows Home edition does not include BitLocker. If you use Home edition, you will need to use a third-party tool instead.

Using third-party encryption software on any Windows version

VeraCrypt and 7-Zip both run on Windows Home, Pro, and Enterprise. VeraCrypt is free and open-source; it encrypts the entire drive or creates a password-protected container (a single encrypted file) on the drive. 7-Zip is also free and can create password-protected archives, though this method is slower for large amounts of data.

To use VeraCrypt, read and install it, then plug in your USB drive. Open VeraCrypt, select Create Volume, choose Encrypt a non-system partition/drive, select your USB drive, and follow the prompts to set a password. The encryption process can take a long time on large drives. Once complete, you will need to mount the drive in VeraCrypt each time you use it — it does not integrate with Windows the way BitLocker does.

The trade-off is that VeraCrypt works on Windows, Mac, and Linux, so you can open the same encrypted drive on different operating systems. However, anyone using the drive on a different computer will also need VeraCrypt installed.

Encrypting a USB drive on Mac using Disk Utility

Mac users can encrypt a USB drive using Disk Utility, which is built into macOS. Plug in the drive, open Disk Utility (in Applications > Utilities), select the drive in the left sidebar, and click Erase. Choose APFS Encrypted or Mac OS Extended (Journaled, Encrypted) as the format, enter a password, and click Erase.

The drive will be reformatted and encrypted with your password. Every time you plug it into a Mac, you will be prompted to enter the password. If you plug the encrypted drive into a Windows or Linux computer, you will not be able to read it without third-party software.

If you need the drive to work on both Mac and Windows, use VeraCrypt instead of Disk Utility's built-in encryption.

Using hardware-encrypted USB drives

Some USB drives come with hardware encryption built in. These drives have a small keypad on the outside where you enter a PIN or password before the drive will unlock. Examples include IronKey, Apricorn Aegis, and Kingston DataTraveler Vault. The advantage is that the encryption happens on the drive itself, not on your computer, so you do not need to install software on every device you use.

Hardware-encrypted drives work on any operating system — Windows, Mac, Linux — without additional software. The downside is that they cost more than standard USB drives, and if you forget the password, the drive is usually permanently locked with no recovery option.

What password protection does and does not do

Password protection prevents someone from reading your files if they plug the drive into a computer and try to open it. It does not protect the drive from physical damage, loss, or theft of the hardware itself. If someone steals the drive, they cannot read the files without the password, but they still have the physical device.

Password protection also does not protect files while the drive is unlocked and mounted on your computer. Once you enter the password and the drive appears in File Explorer or Finder, anyone with access to your computer can read the files. Lock your computer when you step away, and eject the drive when you are finished using it.

Frequently Asked Questions

What happens if I forget the password to my encrypted USB drive?

If you used BitLocker or Disk Utility and saved a recovery key, you can use that key to unlock the drive. If you did not save a recovery key and forget the password, the drive is typically unrecoverable without specialized data recovery services, which are expensive. Hardware-encrypted drives usually have no recovery option — a forgotten PIN permanently locks the drive.

Can I password-protect just one folder on my USB drive instead of the whole thing?

Yes. You can create a password-protected archive (a single encrypted file) using 7-Zip or WinRAR, or you can use VeraCrypt to create an encrypted container within the drive. This leaves other files on the drive unencrypted and accessible. However, encrypting the entire drive is more find and simpler to manage.

Will an encrypted USB drive work on any computer?

It depends on the encryption method. BitLocker-encrypted drives work only on Windows computers with BitLocker support. Disk Utility encryption works only on Mac computers. VeraCrypt and hardware-encrypted drives work on Windows, Mac, and Linux, but VeraCrypt requires software installation on each computer.

Does password-protecting a USB drive slow it down?

Encryption adds a small amount of processing overhead, but most modern computers and USB drives are fast enough that you will not notice a significant difference. Hardware-encrypted drives may perform slightly better than software encryption because the encryption happens on the drive itself.

Can I add a password to a USB drive that already has files on it?

Yes, but the process usually requires reformatting the drive, which erases everything on it. Copy your files to your computer first, encrypt the drive, then copy the files back onto the encrypted drive.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.