BitLocker Drive Encryption is one of the best security features in Windows 10.
BitLocker Drive Encryption is used to protect an entire partition and not just the individual files,it is the best choice for protecting the data.
All the data including temporary files, data files and operating system files are encrypted and protected without any user intervention.
As part of your BitLocker implementation, you need to create a recovery plan in case the certificate used for decryption is lost. You document the recovery password for BitLocker on each laptop. In addition, you should configure a recovery agent on each laptop that can be used to recover BitLocker encrypted data.