Encrypting Windows 11 Home SSD: Local Account Device Encryption, MS Account Privacy, or Linux Dual-Boot?

Questions
1

Hi everyone,

I’m currently trying to secure my laptop which runs Windows 11 Home. Since standard BitLocker isn’t available on the Home edition, I’m looking into my options for full disk encryption and would love some advice from a privacy perspective.

Here are my main questions:

  1. Device Encryption without a Microsoft Account: Is it actually possible to enable Windows “Device Encryption” on Windows 11 Home while strictly using a Local Account? I want to avoid signing into a Microsoft account if possible, so my encryption key isn’t automatically backed up to their servers.
  2. Minimizing Tracking if an MS Account is Mandatory: If there is absolutely no workaround and I must use a Microsoft account to trigger Device Encryption, what is the best way to create and maintain this account to minimize tracking and telemetry? Any specific settings or practices I should follow?
  3. The Linux Dual-Boot Alternative: As a last resort, if the Windows encryption options are too invasive, I was considering setting up a Linux dual-boot. If I go this route, is there a reliable way to encrypt the entire drive (including the Windows partition) from the Linux sideso that both OSes are protected if the SSD or PC gets stolen?

Thanks in advance for any insights or alternative solutions you might have!

2

No, it requires a MS account.

There is no way you can control telemetry and tracking with a linked MS account.

I don’t think so, encrypting the Windows partition with Linux would break the boot.

I see two other options:

  • You could switch Windows edition to Pro with MAS gravel and use bitlocker, if you’re comfortable with that.

  • You can use Veracrypt knowing that in the past it had problems to boot especially after some update. You could avoid that just encrypting a data partition and leaving the system boot one alone.

4

For Encryption use veracrypt instead of the “Device Encryption”.

5

Switch to Linux as soon as possible, and run a VM with Windows if Wine isn’t enough. This is what I do for an exotic peripheral that has no Linux tooling and that I occasionally need, using an IoT edition of Windows, activated with a popular GitHub script.

6

Can you explain to me how to ecrypt only a data partition and leaving the Windows part alone?

7

It depends on how your drive is partitioned.
If you have only one system partition that takes all your drive space you’ll have to create a second one, in the free space available, using the Windows Disk Management.
There are many tutorials online, a simple search will get you there.

Be sure you have a backup before doing anything.
Once the data partition is available use veracrypt to encrypt it.

8

Thank you!