When creating a system image using Windows Backup, you may encounter an error that says “You have chosen drive C is encrypted”, and the backup location is not encrypted. After the error, we noticed that the backup was not created. In this post, we will talk about this issue and see what you do to resolve it.
You have chosen to back up drive C:, which is encrypted. The backup location will not be encrypted. Make sure the backup is kept in a physically secure location.
Fix You have chosen to back up drive C which is encrypted error in Windows 11/10
If you see a message You have chosen to back up drive C which is encrypted, follow these suggestions to address the issue:
- Check if the backup is configured
- Check BitLocker conflict
- Run Backup as an administrator
- Run Check Disk
- Consider Cloud backup with encryption
Let us talk about them in detail.
1] Check if the backup is configured
When researching this issue, we encountered multiple scenarios where the backup was still configured, despite receiving this error message. Therefore, it’s essential to understand what this error means. This message indicates that you’re backing up an encrypted drive (such as one protected with BitLocker), but the destination, such as an external hard drive, is not encrypted. So, while your original data is secure, the backup copy won’t be unless you take extra steps. If someone gains access to that backup, they could read your files.
If you are concerned about your data, you can use BitLocker or another encryption tool to secure the destination drive before backing up. Alternatively, instead of backing up a full system image, back up specific files and folders, and then encrypt them manually (e.g., using 7-Zip or VeraCrypt).
2] Check BitLocker conflict
If your backup is copied at the destination, we need to investigate further. First, let’s check if there is any BitLocker conflict that may be causing the backup to be configured incorrectly. To do so, open the Command Prompt as an administrator and run the following command.
manage-bde -status C:
Now, you need to check if the Drive is encrypted with BitLocker. If it’s encrypted, you need to unlock it before using its backup. For that, run the following command.
manage-bde -unlock C: -RecoveryPassword YOUR-48-DIGIT-KEY
Finally, configure backup and see if the issue is resolved.
You can also encrypt the destination and then try making the backup. Use the following command to do so.
Enable-BitLocker -MountPoint "D:" -EncryptionMethod XtsAes256 -Password (ConvertTo-SecureString -String "YourPassword" -AsPlainText -Force) -UsedSpaceOnly
3] Run Backup as an administrator
Since we are discussing BitLocker, a system-level protection, you should try running the backup as an administrator, as it bypasses these privileges. Hopefully, this will do the trick for you.
4] Run Check Disk
If the BitLocker enablement or disablement is of no use, we recommend you use the CHKDSK command to check both the source and the destination drives to make sure there are no bad sectors. To do so, open the Command Prompt (as an administrator) and run the following command.
chkdsk /r C:
You can replace C with the drive letter of the source and the destination. Finally, check if the issue is resolved.
- ChkDsk /f -> checks for and tries to repair file system errors.
- ChkDsk /r -> includes /f, but it also scans the entire disk surface for physical errors and attempts to fix them.
Finally, check if the issue is resolved.
5] Consider Cloud backup with encryption
If you choose Cloud backup with encryption, you will be saving your files to an online storage service while ensuring they’re protected by encryption, so even if someone accesses the cloud storage, they can’t read your data without the decryption key. This adds a strong layer of security, particularly for sensitive files such as personal documents or system backups. Some services offer built-in encryption, while others let you encrypt your files manually before uploading. It’s a safe, smart way to keep a protected copy of your data off-site.
Hopefully, with the help of these solutions, your issue will be resolved.
Read: Backup BitLocker Drive Encryption Recovery Key in Windows
What happens if I encrypt my C drive?
Encrypting your C drive (using tools like BitLocker or FileVault) scrambles all data on the drive, rendering it unreadable without the correct password, PIN, or recovery key. This means if someone physically steals your computer or removes the drive, they cannot access your operating system, applications, or personal files without authorization. While the encryption is active, you can still use your computer normally after logging in, as decryption happens seamlessly in the background. Still, it primarily protects your data against physical theft or unauthorized offline access to the drive.
Read: Turn On or Off use of BitLocker on Removable Data Drives
To recover a BitLocker-encrypted drive, you must have the 48-digit recovery key or password to decrypt the data. If the drive fails to unlock during boot (due to hardware changes, firmware updates, or repeated incorrect PIN entries), enter the recovery key in the Windows Recovery Environment (WinRE) or via the pre-boot recovery screen.
Read: Backup BitLocker recovery key and suspend BitLocker encryption before updating BIOS.
