Sophos Central Device Encryption

Sophos Central Device Encryption. Full disk encryption, managed from one console.

Sophos Central Device Encryption turns on native BitLocker on Windows and FileVault on Mac, then manages the policies and recovery keys for you from the Sophos Central cloud console. Prove a lost device was encrypted, recover a locked out user, and keep encryption running quietly in the background so it never gets in your people's way.

Shop Encryption Licenses Request a Quote

Central Device Encryption Key Specs

Platforms

Windows and macOS

Encryption

Native BitLocker and FileVault

Management

Sophos Central cloud console

Licensing

Per user, term based

Expert Pre-Sales Advice Certified reps reply in 1 hour.

Config & Managed Services Skip the setup. We'll do it.

POs · Tax-Exempt · Net 30 Welcomed for Corp, Edu, & Gov.

Same-Day Shipping Order by 3pm EST, ships today.

Specifications

Central Device Encryption at a Glance

Managed from Sophos Central

Set an encryption policy once in the Sophos Central cloud console and it applies as users log in. There are no key management servers to stand up and no back end to babysit. If you already run Sophos endpoints, encryption lives right next to the rest of your security policies.

Native BitLocker and FileVault

Sophos does not invent its own crypto. It drives the encryption already built into your operating systems, BitLocker on Windows and FileVault on Mac, so you get vendor supported full disk encryption on boot and fixed data volumes.

Recovery and compliance

Recovery keys are escrowed securely in Sophos Central, and locked out users can pull their own key from the Self Service Portal. Encryption status reporting gives you the proof auditors ask for when a laptop goes missing.

Deployment and licensing

Policies push out remotely in a couple of clicks. On Windows the encryption agent ships with the standard Sophos Central endpoint installer, so there is nothing extra to deploy. Licensing is per user, in seat tiers, on one, two, or three year terms.

Not sure encryption is the layer you need first?

Device Encryption protects data at rest on lost or stolen machines. If you are also weighing endpoint protection, XDR, or email security, line them up side by side before you buy.

Compare Sophos Central Options

Central Device Encryption FAQ

How is Sophos Central Device Encryption licensed and priced?

It is licensed per user in seat tiers, such as 1 to 9 or 25 to 49 users, on one, two, or three year terms. One user counts as one license even if they sign in on more than one machine, and a seat only counts once an encryption policy is turned on for it. Pricing scales down as your seat count goes up, so the best way to get an accurate number is a quick quote. As a Sophos Platinum Partner, Firewalls.com can size the right tier and term for you.

Do I need Sophos Endpoint Protection to run Device Encryption?

No. Device Encryption is a standalone product and you can buy it on its own. If you already run Sophos Central endpoint protection on Windows, there is nothing extra to install, since the encryption agent comes with the standard endpoint installer once you hold the license. On Mac the encryption agent is installed separately.

Does it use BitLocker and FileVault, or its own encryption?

It uses the encryption already built into your operating systems, BitLocker on Windows and FileVault on Mac. Sophos does not add its own algorithm. What Sophos Central adds is the management layer on top, so you set policy, escrow recovery keys, and report on encryption status across every device from one place.

What happens if a user forgets their PIN or gets locked out?

Recovery keys are stored securely in Sophos Central, so nobody is ever permanently locked out of a machine. A user who forgets their BitLocker PIN or Mac password can retrieve a recovery key from the Sophos Self Service Portal without opening a help desk ticket, and your admins can pull the key from the console if needed.

How do renewals work when my license expires?

Licenses are term based, so renew before the end date to keep managing encryption in Sophos Central. If a license lapses, the product stops being available in the console, though drives already encrypted stay encrypted. Send us your current seat count and term and we will quote the renewal so there is no gap in coverage.

What does Device Encryption cover, and does it encrypt USB drives?

It covers full disk encryption on boot volumes and fixed data volumes for Windows and Mac laptops and desktops. Removable media such as USB drives is not covered by Device Encryption. You can require startup authentication using a TPM and PIN, a passphrase, or a USB key, so a stolen laptop is useless to whoever ends up with it.

Get every laptop encrypted without the headaches.

Tell us how many users you need to cover and we will size the right license tier and term. Firewalls.com is a Sophos Platinum Partner, so you get certified guidance and honest pricing, not a shopping cart guess.

Request a Quote

You'll always get our best prices when you're signed in!

Sophos Central Device Encryption - 200-499 clients - 12 Months

Supports 200-499 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AFNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 200-499 clients - 12 Months - Renewal

Supports 200-499 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AFRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 200-499 clients - 24 Months

Supports 200-499 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AFNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 200-499 clients - 24 Months - Renewal

Supports 200-499 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AFRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 200-499 clients - 36 Months

Supports 200-499 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AFNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 200-499 clients - 36 Months - Renewal

Supports 200-499 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AFRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 500-999 clients - 12 Months

Supports 500-999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AGNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 500-999 clients - 12 Months - Renewal

Supports 500-999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AGRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 500-999 clients - 24 Months

Supports 500-999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AGNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 500-999 clients - 24 Months - Renewal

Supports 500-999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AGRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 500-999 clients - 36 Months

Supports 500-999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AGNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 500-999 clients - 36 Months - Renewal

Supports 500-999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AGRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1000-1999 clients - 12 Months

Supports 1000-1999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AHNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1000-1999 clients - 12 Months - Renewal

Supports 1000-1999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AHRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1000-1999 clients - 24 Months

Supports 1000-1999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AHNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1000-1999 clients - 24 Months - Renewal

Supports 1000-1999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AHRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1000-1999 clients - 36 Months

Supports 1000-1999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AHNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 1000-1999 clients - 36 Months - Renewal

Supports 1000-1999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AHRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 2000-4999 clients - 12 Months

Supports 2000-4999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AINCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 2000-4999 clients - 12 Months - Renewal

Supports 2000-4999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AIRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 2000-4999 clients - 24 Months

Supports 2000-4999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AINCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 2000-4999 clients - 24 Months - Renewal

Supports 2000-4999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AIRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 2000-4999 clients - 36 Months

Supports 2000-4999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AINCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 2000-4999 clients - 36 Months - Renewal

Supports 2000-4999 Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AIRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 5000-9999 clients - 12 Months

Supports 5000+ Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AJNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 5000-9999 clients - 12 Months - Renewal

Supports 5000+ Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU12AJRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 5000-9999 clients - 24 Months

Supports 5000+ Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AJNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 5000-9999 clients - 24 Months - Renewal

Supports 5000+ Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU24AJRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 5000-9999 clients - 36 Months

Supports 5000+ Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AJNCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →
Sophos Central Device Encryption - 5000-9999 clients - 36 Months - Renewal

Supports 5000+ Seats

Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console

Proof-of-compliance reporting

Self-service key recovery

User-centric management

Small Business friendly: Per-user pricing and quick deployment

Manufacturer Part #: CDEAAU36AJRCAA

NOTICE: Sophos License & Renewal products can only be activated in the United States of America.
For Pricing, request a quote.

Product Details →

FAQ

Resources

Why Buy From Us?

Filter Search

Expedited Delivery

Same Day Shipping

Sophos Central Device Encryption

Sophos Central Device Encryption. Full disk encryption, managed from one console.

Central Device Encryption at a Glance

Managed from Sophos Central

Native BitLocker and FileVault

Recovery and compliance

Deployment and licensing

Not sure encryption is the layer you need first?

Central Device Encryption FAQ

Get every laptop encrypted without the headaches.

You'll always get our best prices when you're signed in!

Sophos Central Device Encryption - 200-499 clients - 12 Months

Sophos Central Device Encryption - 200-499 clients - 12 Months - Renewal

Sophos Central Device Encryption - 200-499 clients - 24 Months

Sophos Central Device Encryption - 200-499 clients - 24 Months - Renewal

Sophos Central Device Encryption - 200-499 clients - 36 Months

Sophos Central Device Encryption - 200-499 clients - 36 Months - Renewal

Sophos Central Device Encryption - 500-999 clients - 12 Months

Sophos Central Device Encryption - 500-999 clients - 12 Months - Renewal

Sophos Central Device Encryption - 500-999 clients - 24 Months

Sophos Central Device Encryption - 500-999 clients - 24 Months - Renewal

Sophos Central Device Encryption - 500-999 clients - 36 Months

Sophos Central Device Encryption - 500-999 clients - 36 Months - Renewal

Sophos Central Device Encryption - 1000-1999 clients - 12 Months

Sophos Central Device Encryption - 1000-1999 clients - 12 Months - Renewal

Sophos Central Device Encryption - 1000-1999 clients - 24 Months

Sophos Central Device Encryption - 1000-1999 clients - 24 Months - Renewal

Sophos Central Device Encryption - 1000-1999 clients - 36 Months

Sophos Central Device Encryption - 1000-1999 clients - 36 Months - Renewal

Sophos Central Device Encryption - 2000-4999 clients - 12 Months

Sophos Central Device Encryption - 2000-4999 clients - 12 Months - Renewal

Sophos Central Device Encryption - 2000-4999 clients - 24 Months

Sophos Central Device Encryption - 2000-4999 clients - 24 Months - Renewal

Sophos Central Device Encryption - 2000-4999 clients - 36 Months

Sophos Central Device Encryption - 2000-4999 clients - 36 Months - Renewal

Sophos Central Device Encryption - 5000-9999 clients - 12 Months

Sophos Central Device Encryption - 5000-9999 clients - 12 Months - Renewal

Sophos Central Device Encryption - 5000-9999 clients - 24 Months

Sophos Central Device Encryption - 5000-9999 clients - 24 Months - Renewal

Sophos Central Device Encryption - 5000-9999 clients - 36 Months

Sophos Central Device Encryption - 5000-9999 clients - 36 Months - Renewal

FAQ

Resources

Why Buy From Us?

Request Emailed Quote