Information Security


Operating System Encryption

Full disk encryption is a good idea on any device but particularly on mobile devices. See below for instructions on how to enable full disk encryption on Windows, Mac and Linux.

Windows BitLocker

Desktop@UCL machines already have BitLocker enabled, more information can be found here: https://www.ucl.ac.uk/isd/services/computers/staff/desktopucl-managed-computers/hard-drive-encryption-using-bitlocker

If you are not using a Desktop@UCL, follow the instructions on the Microsoft website below::

We recommend that you use BitLocker with TPM where possible.

FileVault for Mac

To enable FileVault on your Mac follow the instructions below:

  1. Choose Apple menu () > System Preferences, then click Security & Privacy.
  2. Click the FileVault tab.
  3. Click the lock, then enter an administrator name and password.
  4. Click Turn On FileVault.
  5. Choose how you want to be able to unlock your disk and reset your password in case you ever forget your password. 

Bear in mind that if you lose both your account password and your FileVault recovery key, you will not be able to log in to your Mac or access your data.


Full disk encryption on Linux depends on which Linux distribution you are using, see the links below for instructions for some popular Linux distributions: