Device encryption is a security feature that Microsoft often quietly enables during Windows 11 setup. Sign in with a Microsoft account on a PC with compatible hardware, and the deed is (usually) done.