Yes—BitLocker can reduce storage performance on Windows 11 PCs, and Microsoft says the effect may be more noticeable on very fast NVMe drives and I/O-heavy workloads such as gaming and video editing. Microsoft has historically described the usual overhead as small, often in the single-digit percentage range. That is not a universal benchmark result, however: the real impact depends on the drive, processor, Windows version, encryption method, drivers, and workload.
For most users, this is a reason to check the active encryption path—not an automatic reason to disable protection. Windows 11 24H2 and 25H2 can use hardware-accelerated BitLocker on compatible systems, potentially reducing the performance cost.
As an Amazon Associate I earn from qualifying purchases.
What Microsoft acknowledged
In an announcement published on December 19, 2025, Microsoft said BitLocker’s historical performance overhead has generally been kept within single-digit percentage points. It also acknowledged that faster NVMe storage can make the cost more visible because modern drives can process data quickly enough for encryption and I/O-path overhead to become a larger part of the total operation.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Microsoft specifically identified high-throughput, I/O-intensive workloads such as gaming and video editing. This does not mean every Windows 11 gaming PC loses a large amount of performance, or that BitLocker imposes a fixed single-digit penalty on every SSD. The figure is Microsoft’s general characterization of typical overhead, not a universal maximum or an independent benchmark covering every configuration.
#1 Best Overall
- MEET THE NEXT GEN: Consider this a cheat code; Our Samsung 990 PRO Gen4 SSD helps you reach near max performance with lightning-fast speeds; Whether you’re a hardcore gamer or a tech guru, you’ll get power efficiency built for the final boss
- REACH THE NEXT LEVEL: Gen4 steps up with faster transfer speeds and high-performance bandwidth; With a more than 55% improvement in random performance compared to 980 PRO, it’s here for heavy computing and faster loading
- THE FASTEST SSD FROM THE WORLD'S FLASH MEMORY BRAND: The speed you need for any occasion; With read and write speeds up to 7450/6900 MB/s you’ll reach near max performance of PCIe 4.0 powering through for any use
- PLAY WITHOUT LIMITS: Give yourself some space with storage capacities from 1TB to 4TB; Sync all your saves and reign supreme in gaming, video editing, data analysis and more
- IT’S A POWER MOVE: Save the power for your performance; Get power efficiency all while experiencing up to 50% improved performance per watt over the 980 PRO; It makes every move more effective with less consumption
Microsoft’s hardware-accelerated BitLocker announcement explains the change.
Why a faster NVMe SSD can expose the cost
Encryption has to happen as protected data moves through the storage stack. On a slower disk, the drive itself may be the limiting factor, hiding much of the additional work. A high-end PCIe 4.0 or PCIe 5.0 NVMe SSD can complete reads and writes quickly enough that CPU-side cryptographic work, driver overhead, queue handling, or an unavailable fast-I/O path becomes more significant.
There are two ways to think about the effect:
- Relative performance: the same encryption work can represent a larger share of a very fast storage operation.
- Absolute performance: a small percentage reduction from a high-throughput drive can equal more lost MB/s or IOPS than the same percentage on an older SATA SSD.
This is a systems explanation, not a promise that every fast NVMe drive will slow by the same amount. Workloads with small files, random I/O, sustained concurrent reads and writes, or frequent CPU involvement may behave differently from simple sequential transfers.
What gamers are likely to notice
Average FPS
BitLocker is unlikely to be the main determinant of average frame rate in a conventional game. FPS is usually governed by the GPU, CPU, game engine, resolution, graphics settings, and frame-time limits. A storage-encryption difference should not automatically be described as an FPS penalty.
Loading, installation, and patching
Storage-sensitive operations are more plausible places to notice a difference. Game installation and patching often combine large transfers with decompression, file creation, and many smaller I/O operations. Loading screens can also respond to storage latency and throughput, although game design and CPU decompression work remain important.
Rank #2
- PCIe 4.0 Performance: Delivers up to 7,100 MB/s read and 6,000 MB/s write speeds for quicker game load times, bootups, and smooth multitasking
- Spacious 1TB SSD: Provides space for AAA games, apps, and media with standard Gen4 NVMe performance for casual gamers and home users
- Broad Compatibility: Works seamlessly with laptops, desktops, and select gaming consoles including ROG Ally X, Lenovo Legion Go, and AYANEO Kun. Also backward compatible with PCIe Gen3 systems for flexible upgrades
- Better Productivity: Up to 2x faster than previous Gen3 generation. Improve performance for real world tasks like booting Windows, starting applications like Adobe Photoshop and Illustrator, and working in applications like Microsoft Excel and PowerPoint
- Trusted Micron Quality: Built with advanced G8 NAND and thermal control for reliable Gen4 performance trusted by gamers and home users
Asset streaming and traversal stutter
Games that stream assets while the player moves through a world can be more sensitive to the storage path than games that load most content between levels. The result depends on how the game schedules I/O and whether the CPU, memory, GPU, or storage device is the actual bottleneck.
DirectStorage and BypassIO
Microsoft’s BypassIO documentation lists BitLocker Drive Encryption as a reason BypassIO may be unavailable. BypassIO is part of the Windows infrastructure used by DirectStorage to provide a lower-overhead path for supported applications.
Recommended Free Tools
This does not mean BitLocker “breaks DirectStorage” or that every DirectStorage game will suffer a dramatic slowdown. It means Windows can report BitLocker as preventing BypassIO, potentially causing an application to use a less direct path. The practical effect depends on the game, storage device, driver, and workload.
What video editors may experience
Video editing is most likely to expose storage-encryption overhead when the same drive is doing several jobs at once:
- Reading large source files while writing previews or proxies.
- Generating caches and thumbnails.
- Handling high-bitrate, multi-stream footage.
- Using a scratch disk during effects-heavy work.
- Ingesting, transferring, or exporting large media projects.
If an edit is limited by CPU encoding, GPU effects, RAM capacity, or codec complexity, BitLocker may have little visible effect. A fast encrypted drive can still be substantially faster in practice than a slower unencrypted one.
Rank #3
- SPEED UP PROJECTS. Launch creator applications fast with uncompromising PCIe 4.0 read speeds up to 7,100MB/s,[2] (1TB and 2TB[1] models) and write speeds up to 6,700MB/s[2] (1TB[1]-4TB[1] models).
- CREATE AND STORE MORE. Make more room for your 4K videos and high-resolution images with capacities from 500GB[1] up to 4TB[1] on M.2 2280 built with our trusted 8th generation SANDISK BiCS QLC 3D CBA NAND.
- IT GOES WHERE YOU GO. With an all-new power efficient design, your drive delivers high performance with low power, giving you more time to be productive while on the go.
- UNCOMPROMISED RELIABILITY. With up to 1,200 TBW[3] (4TB[1] model) endurance rating, your drive is designed for creators.
- KEEP YOUR DRIVE UPDATED. Monitor your SSD’s performance and check for updates with the downloadable SANDISK Dashboard application.[5]
Software BitLocker, hardware acceleration, and self-encrypting drives
“BitLocker performance” is not one fixed profile. At least three arrangements need to be distinguished:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall| Arrangement | Where cryptographic work happens | Important qualification |
|---|---|---|
| Software-based BitLocker | Through the Windows software and CPU path | Can consume more CPU and storage-path resources. |
| Hardware-accelerated BitLocker | Supported cryptographic capabilities in a compatible CPU or SoC | Requires the right Windows release, hardware, firmware, and drivers. |
| Self-encrypting or hardware-encrypted drive | Inside supported storage hardware | A drive’s marketing claim does not prove Windows is using this mode. |
Microsoft says hardware-based encryption can improve performance and reduce CPU and power use. Its BitLocker policy documentation also makes clear that configuration can determine whether hardware-based encryption is permitted or whether software-based encryption is used even when hardware capability exists. Do not assume that an SSD labeled “hardware encryption” automatically removes BitLocker overhead.
See Microsoft’s documentation for BitLocker configuration and encrypted hard drives.
What changed in Windows 11 24H2 and 25H2
Microsoft says BitLocker can use new CPU or SoC capabilities for hardware acceleration starting with the September 2025 Windows update for Windows 11 24H2 and with Windows 11 25H2. The announcement also references existing support for UFS inline cryptographic engines.
The capability applies across automatic Device Encryption, manually enabled BitLocker, policy-driven enablement, and script-based enablement, with exceptions. It remains conditional: the processor or SoC, storage hardware, firmware, drivers, Windows build, and policy all have to support the relevant path. Being on Windows 11 24H2 or 25H2 alone does not prove that a particular PC is using hardware acceleration.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- This product has been replaced by our latest generation. Please search for the SANDISK Optimus GX 7100 NVMe SSD
- HIGH-OCTANE GAMING. Experience speeds up to 7,250MB/s read and 6,900MB/s write (1-2TB models), with up to 35% faster performance than previous generation.
- PURPOSE-BUILT. Designed for serious on-the-go gamers, with a PCIe Gen4 interface and SANDISK’s next generation TLC 3D NAND.
- MORE TIME TO CLEAR THAT CHECKPOINT. Built with laptops and handheld gaming devices in mind, with up to 100% more power efficiency over the previous generation.
- DO MORE WITH DASHBOARD. Ensure your drive is optimized for prime performance with the downloadable WD_BLACK Dashboard (Windows only).
Why encryption may already be enabled
Windows 11 includes both the administratively managed BitLocker experience and Device Encryption. On qualifying devices, Device Encryption may turn on automatically after setup, particularly when a user signs in with a Microsoft account or work/school account. The exact behavior depends on the Windows edition, hardware, account, setup conditions, and device configuration.
That is why users may remember never selecting “BitLocker” while Windows nevertheless reports an encrypted system volume. Microsoft documents Device Encryption requirements and behavior in its Device Encryption support guide. Requirements for Automatic Device Encryption were reduced beginning with Windows 11 24H2, but qualifying hardware and configuration are still required.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to check whether your NVMe drive is encrypted
The most useful first check is manage-bde -status. Open Windows Terminal or Command Prompt as administrator and run:
manage-bde -statusFor each relevant volume, record:
- Conversion Status: whether encryption or decryption is in progress or complete.
- Percentage Encrypted: how much of the volume is encrypted.
- Encryption Method: the method Windows reports for that volume.
- Protection Status: whether protection is active or suspended.
- Lock Status: whether the volume is currently locked.
- Key Protectors: such as a TPM protector, recovery password, or startup key.
Microsoft documents manage-bde and its BitLocker operations guide. A lock icon or a general Settings page is not enough to identify the exact encryption path.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsTo save the status for troubleshooting, use:
manage-bde.exe -status > C:BDEStatus.txtTo inspect protectors on a particular volume:
manage-bde.exe C: -protectors -getReplace C: with the correct drive letter. These commands help establish what is configured, but they should not be interpreted as proof that every hardware capability is being used unless the reported method and supporting documentation align.
Best Value
- Ideal for high speed, low power storage
- Gen 4x4 NVMe PCle performance
- Up to 6,000MB/s read, 4,000MB/s write
- Includes Acronis cloning software
- 5-year limited warranty
How to test the real impact fairly
Do not make a decision from one synthetic sequential benchmark. Test the same drive and workload under identical conditions:
- Record the current
manage-bde -statusoutput. - Use the same Windows build, storage driver, firmware, power plan, benchmark settings, test size, and background applications.
- Measure sequential and random reads and writes at queue depths relevant to your work.
- Test game installation, patching, launch, loading, and—where applicable—asset streaming.
- For editing, test media ingest, cache or preview generation, sustained reads and writes, and export workflows.
- Record CPU utilization during storage-heavy tests.
- Check whether BypassIO is available when testing a DirectStorage-related workload.
- Repeat tests rather than relying on one run, and compare application completion times instead of only peak MB/s.
Suspending BitLocker is not the same as decrypting the volume. Suspension changes protection behavior but does not necessarily remove encryption overhead from ordinary I/O. A meaningful performance comparison generally needs an encrypted-versus-fully-decrypted test, with appropriate backups and recovery preparation.
Should you disable BitLocker?
| Your situation | Practical recommendation |
|---|---|
| Laptop, portable workstation, business PC, or system containing private data | Keep encryption enabled unless your organization has a different, documented policy. |
| Desktop gaming PC with no sensitive data | Measure the games and storage tasks you care about before changing anything. |
| Editing workstation using the same disk for media, cache, and exports | Investigate the encryption method, CPU usage, and storage bottleneck first. |
| New Windows 11 24H2 or 25H2 system | Check whether compatible hardware and drivers provide hardware acceleration. |
| Drive marketed as self-encrypting | Verify Windows’ active method and policy; do not rely on the product label alone. |
Before disabling encryption:
- Confirm that the 48-digit BitLocker recovery key is available in the correct Microsoft or work/school account.
- Back up important files and verify that the backup can be restored.
- Check whether the PC is managed by an employer or school.
- Identify every encrypted volume, not only the Windows drive.
- Understand that decryption removes the protection boundary against offline access to the drive.
To decrypt a volume from an elevated terminal, Microsoft documents:
manage-bde -off C:PowerShell provides an alternative:
Disable-BitLocker -MountPoint C:Decryption is not instant. Allow it to finish, avoid casually interrupting the process, and run manage-bde -status again afterward. Microsoft’s BitLocker operations guidance explains the consequences and supported procedures.
Bottom line
BitLocker can reduce NVMe storage performance. Microsoft historically describes the typical overhead as small and often single-digit, but very fast drives and storage-heavy gaming or video-editing workloads can make the trade-off more visible. The practical effect is configuration-specific and is more likely to affect loading, installation, patching, asset streaming, caching, and file transfers than ordinary GPU-limited FPS.
Check manage-bde -status, identify the active encryption method, and test the applications that matter to you. On compatible Windows 11 24H2 and 25H2 systems, hardware-accelerated BitLocker is the preferred way to seek lower overhead without giving up encryption. Disabling BitLocker should be a measured decision for a genuinely low-risk system—not a default gaming optimization.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
