What is TPM in plain English?

A TPM is a small security vault built into—or provided by—the computer’s main hardware. It protects important digital keys so Windows can check the computer and safeguard features such as drive encryption and secure sign-in.

TPM stands for Trusted Platform Module, which sounds like a committee that meets quarterly and produces a PDF nobody reads. Fortunately, what it does is more useful than its name.

What does it protect?

When information is encrypted, a secret digital key is needed to unlock it. Keeping that key only as an ordinary file would be rather like leaving the house key under a mat labelled “house key”. A TPM gives Windows a protected place for security information.

Windows can use it with BitLocker drive encryption, Windows Hello sign-in and checks that help detect unexpected changes during startup.

Why does Windows 11 care?

Microsoft requires TPM version 2.0 for normal Windows 11 support. The aim is to make modern hardware-backed security widely available instead of treating it as an optional extra that nobody enables until after a disaster.

Does my PC have one?

Many PCs already have TPM 2.0, sometimes integrated into the processor rather than fitted as a separate chip. Open Windows Security, choose Device security and look for Security processor details. You can also run Microsoft’s PC Health Check.

If Windows cannot see a TPM, it may be disabled in the PC’s firmware settings. Manufacturers use different names, including Intel PTT and AMD fTPM, which is very helpful if the objective was to make an ordinary person assume three different things are involved.

Can I add TPM 2.0?

Some desktop motherboards accept a specific TPM module, but compatibility is exact and the processor may still fail Windows 11 requirements. Laptops rarely offer a worthwhile add-on route. Check the entire compatibility picture before buying a mysterious chip from an online marketplace.

Microsoft provides a fuller explanation on its TPM support page.