Use another device to open Microsoft’s BitLocker recovery-key page, sign in with the Microsoft account used to configure the laptop, and match the Recovery Key ID shown on the locked screen to the listed 48-digit key.^1^
Recover the laptop
- On the blue BitLocker screen, note the first eight digits of the Recovery Key ID.
- This is an identifier used to find the correct key.
- It is not the 48-digit recovery key.
- The Windows device ID and serial number cannot unlock the drive.
- On a phone or another computer, open: https://aka.ms/myrecoverykey
- Sign in using the same personal Microsoft account that was used when the laptop was initially configured or BitLocker was enabled.
- Compare the Key IDs in the account with the Key ID displayed on the laptop.
- When the IDs match, enter the corresponding 48-digit recovery key on the laptop. The key normally appears as eight groups of six digits.
Microsoft Support cannot retrieve, provide, recreate, or verify a lost key from a device name, device ID, serial number, or proof of ownership.^1^
If the key is not in that Microsoft account
Check these locations in order:
- Another Microsoft account: If someone else originally configured the computer or enabled BitLocker, the key might be stored in that person’s account.
- Work or school account: If the laptop was ever managed by an organization, open https://aka.ms/aadrecoverykey, sign in, select Devices, expand the relevant device, and select View BitLocker Keys. If it is unavailable, contact that organization’s IT department and provide the Recovery Key ID, not account passwords.^1^
- Printed copy: Check paperwork retained when BitLocker was activated.
- USB drive: Check USB drives for a saved key or text file, using another computer to read it if necessary.
- Saved file or cloud storage: Search for files named similar to “BitLocker Recovery Key,” including
.txtor.pdffiles.
If no recovery key can be found
BitLocker is designed so that encrypted data cannot be recovered without the required recovery password or another configured authentication method.^2^
The remaining option is to reset or reinstall Windows. This removes the inaccessible files on the encrypted drive. From Windows Recovery Environment, select:
Troubleshoot → Reset this PC
Microsoft lists reset and installation-media recovery options for Windows 10 systems that cannot start.^3^
After regaining access
Create an additional backup of the recovery key and keep it separately from the laptop. Microsoft recommends verifying that the key is accessible through the Microsoft account or organization and retaining another safe backup.^4^
Also remove the email address and device ID from any public post. Do not share the 48-digit recovery key, Microsoft account password, or verification codes with anyone.
References