Sophos Central Device Encryption

Sophos Central Device Encryption. Full disk encryption, managed from one console.

Sophos Central Device Encryption turns on native BitLocker on Windows and FileVault on Mac, then manages the policies and recovery keys for you from the Sophos Central cloud console. Prove a lost device was encrypted, recover a locked out user, and keep encryption running quietly in the background so it never gets in your people's way.

Shop Encryption Licenses Request a Quote

Central Device Encryption Key Specs

Platforms

Windows and macOS

Encryption

Native BitLocker and FileVault

Management

Sophos Central cloud console

Licensing

Per user, term based

Expert Pre-Sales Advice Certified reps reply in 1 hour.

Config & Managed Services Skip the setup. We'll do it.

POs · Tax-Exempt · Net 30 Welcomed for Corp, Edu, & Gov.

Same-Day Shipping Order by 3pm EST, ships today.

Specifications

Central Device Encryption at a Glance

Managed from Sophos Central

Set an encryption policy once in the Sophos Central cloud console and it applies as users log in. There are no key management servers to stand up and no back end to babysit. If you already run Sophos endpoints, encryption lives right next to the rest of your security policies.

Native BitLocker and FileVault

Sophos does not invent its own crypto. It drives the encryption already built into your operating systems, BitLocker on Windows and FileVault on Mac, so you get vendor supported full disk encryption on boot and fixed data volumes.

Recovery and compliance

Recovery keys are escrowed securely in Sophos Central, and locked out users can pull their own key from the Self Service Portal. Encryption status reporting gives you the proof auditors ask for when a laptop goes missing.

Deployment and licensing

Policies push out remotely in a couple of clicks. On Windows the encryption agent ships with the standard Sophos Central endpoint installer, so there is nothing extra to deploy. Licensing is per user, in seat tiers, on one, two, or three year terms.

Not sure encryption is the layer you need first?

Device Encryption protects data at rest on lost or stolen machines. If you are also weighing endpoint protection, XDR, or email security, line them up side by side before you buy.

Compare Sophos Central Options

Central Device Encryption FAQ

How is Sophos Central Device Encryption licensed and priced?

It is licensed per user in seat tiers, such as 1 to 9 or 25 to 49 users, on one, two, or three year terms. One user counts as one license even if they sign in on more than one machine, and a seat only counts once an encryption policy is turned on for it. Pricing scales down as your seat count goes up, so the best way to get an accurate number is a quick quote. As a Sophos Platinum Partner, Firewalls.com can size the right tier and term for you.

Do I need Sophos Endpoint Protection to run Device Encryption?

No. Device Encryption is a standalone product and you can buy it on its own. If you already run Sophos Central endpoint protection on Windows, there is nothing extra to install, since the encryption agent comes with the standard endpoint installer once you hold the license. On Mac the encryption agent is installed separately.

Does it use BitLocker and FileVault, or its own encryption?

It uses the encryption already built into your operating systems, BitLocker on Windows and FileVault on Mac. Sophos does not add its own algorithm. What Sophos Central adds is the management layer on top, so you set policy, escrow recovery keys, and report on encryption status across every device from one place.

What happens if a user forgets their PIN or gets locked out?

Recovery keys are stored securely in Sophos Central, so nobody is ever permanently locked out of a machine. A user who forgets their BitLocker PIN or Mac password can retrieve a recovery key from the Sophos Self Service Portal without opening a help desk ticket, and your admins can pull the key from the console if needed.

How do renewals work when my license expires?

Licenses are term based, so renew before the end date to keep managing encryption in Sophos Central. If a license lapses, the product stops being available in the console, though drives already encrypted stay encrypted. Send us your current seat count and term and we will quote the renewal so there is no gap in coverage.

What does Device Encryption cover, and does it encrypt USB drives?

It covers full disk encryption on boot volumes and fixed data volumes for Windows and Mac laptops and desktops. Removable media such as USB drives is not covered by Device Encryption. You can require startup authentication using a TPM and PIN, a passphrase, or a USB key, so a stolen laptop is useless to whoever ends up with it.

Get every laptop encrypted without the headaches.

Tell us how many users you need to cover and we will size the right license tier and term. Firewalls.com is a Sophos Platinum Partner, so you get certified guidance and honest pricing, not a shopping cart guess.

Request a Quote

You'll always get our best prices when you're signed in!

Sophos Central Device Encryption - 1-9 clients - 12 Months

Supports 1-9 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AANCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1-9 clients - 12 Months - Renewal

Supports 1-9 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AARCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1-9 clients - 24 Months

Supports 1-9 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AANCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1-9 clients - 24 Months - Renewal

Supports 1-9 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AARCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1-9 clients - 36 Months

Supports 1-9 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AANCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1-9 clients - 36 Months - Renewal

Supports 1-9 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AARCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 10-24 clients - 12 Months

Supports 10-24 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12ABNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 10-24 clients - 12 Months - Renewal

Supports 10-24 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12ABRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 10-24 clients - 24 Months

Supports 10-24 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24ABNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 10-24 clients - 24 Months - Renewal

Supports 10-24 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24ABRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 10-24 clients - 36 Months

Supports 10-24 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36ABNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 10-24 clients - 36 Months - Renewal

Supports 10-24 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36ABRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 25-49 clients - 12 Months

Supports 25-49 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12ACNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 25-49 clients - 12 Months - Renewal

Supports 25-49 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12ACRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 25-49 clients - 24 Months

Supports 25-49 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24ACNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 25-49 clients - 24 Months - Renewal

Supports 25-49 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24ACRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 25-49 clients - 36 Months

Supports 25-49 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36ACNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 25-49 clients - 36 Months - Renewal

Supports 25-49 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36ACRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 50-99 clients - 12 Months

Supports 51-100 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12ADNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 50-99 clients - 12 Months - Renewal

Supports 51-100 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12ADRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 50-99 clients - 24 Months

Supports 51-100 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24ADNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 50-99 clients - 24 Months - Renewal

Supports 51-100 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24ADRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 50-99 clients - 36 Months

Supports 51-100 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36ADNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 50-99 clients - 36 Months - Renewal

Supports 51-100 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36ADRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 100-199 clients - 12 Months

Supports 100-199 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AENCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 100-199 clients - 12 Months - Renewal

Supports 100-199 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AERCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 100-199 clients - 24 Months

Supports 100-199 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AENCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 100-199 clients - 24 Months - Renewal

Supports 100-199 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AERCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 100-199 clients - 36 Months

Supports 100-199 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AENCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 100-199 clients - 36 Months - Renewal

Supports 100-199 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AERCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →

FAQ

Resources

Why Buy From Us?

Filter Search

Expedited Delivery

Same Day Shipping

Sophos Central Device Encryption

Sophos Central Device Encryption. Full disk encryption, managed from one console.

Central Device Encryption at a Glance

Managed from Sophos Central

Native BitLocker and FileVault

Recovery and compliance

Deployment and licensing

Not sure encryption is the layer you need first?

Central Device Encryption FAQ

Get every laptop encrypted without the headaches.

You'll always get our best prices when you're signed in!

Sophos Central Device Encryption - 1-9 clients - 12 Months

Sophos Central Device Encryption - 1-9 clients - 12 Months - Renewal

Sophos Central Device Encryption - 1-9 clients - 24 Months

Sophos Central Device Encryption - 1-9 clients - 24 Months - Renewal

Sophos Central Device Encryption - 1-9 clients - 36 Months

Sophos Central Device Encryption - 1-9 clients - 36 Months - Renewal

Sophos Central Device Encryption - 10-24 clients - 12 Months

Sophos Central Device Encryption - 10-24 clients - 12 Months - Renewal

Sophos Central Device Encryption - 10-24 clients - 24 Months

Sophos Central Device Encryption - 10-24 clients - 24 Months - Renewal

Sophos Central Device Encryption - 10-24 clients - 36 Months

Sophos Central Device Encryption - 10-24 clients - 36 Months - Renewal

Sophos Central Device Encryption - 25-49 clients - 12 Months

Sophos Central Device Encryption - 25-49 clients - 12 Months - Renewal

Sophos Central Device Encryption - 25-49 clients - 24 Months

Sophos Central Device Encryption - 25-49 clients - 24 Months - Renewal

Sophos Central Device Encryption - 25-49 clients - 36 Months

Sophos Central Device Encryption - 25-49 clients - 36 Months - Renewal

Sophos Central Device Encryption - 50-99 clients - 12 Months

Sophos Central Device Encryption - 50-99 clients - 12 Months - Renewal

Sophos Central Device Encryption - 50-99 clients - 24 Months

Sophos Central Device Encryption - 50-99 clients - 24 Months - Renewal

Sophos Central Device Encryption - 50-99 clients - 36 Months

Sophos Central Device Encryption - 50-99 clients - 36 Months - Renewal

Sophos Central Device Encryption - 100-199 clients - 12 Months

Sophos Central Device Encryption - 100-199 clients - 12 Months - Renewal

Sophos Central Device Encryption - 100-199 clients - 24 Months

Sophos Central Device Encryption - 100-199 clients - 24 Months - Renewal

Sophos Central Device Encryption - 100-199 clients - 36 Months

Sophos Central Device Encryption - 100-199 clients - 36 Months - Renewal

FAQ

Resources

Why Buy From Us?

Request Emailed Quote