BitLocker recovery without saved recovery key

Question

BitLocker recovery without saved recovery key

John L 0

It's a bootable drive, so I'm locked out. The laptop partition has a linked Microsoft account that I have access to. I can verify that I neglected to save my recovery key.

What are my options? Additional lockout data attached.

0 comments

2 answers

Your answer

Answer 1

Are you saying you didn’t write down the key and didn’t opt to have it saved in your account? If so you will have to clean install. No other options.

To perform a clean installation of Windows 11 using the Windows Media Creation Tool. You do need to get access to another computer so you can download the Windows installation files into a flash drive, then use the flash drive to help your computer. Hopefully you have a spare computer, or you can have friend or family help you.

The following steps should be done on a working Windows computer:

Download the Windows Media Creation Tool from Microsoft's official website. https://www.microsoft.com/software-download/windows11 click on the "download now" button under "Create Windows 11 Installation Media"

Run the tool and select "Create installation media for another PC."

Choose "USB flash drive" as the media to use for the installation and select "Next."

Connect a USB flash drive with at least 8 GB of free space to your computer.

Select the USB flash drive you want to use, and then select "Next."

The tool will then download the required files and create the installation media.

=====================================================

Now these steps will be done on your problematic computer:

Go to the computer's BIOS boot menu to have it boot from the USB drive.

Follow the on-screen instructions to install Windows 11, making sure to choose "Custom install" and select the option to delete all existing partitions.

Once the installation is complete, you'll have a clean installation of Windows 11 on your computer.

Answer 2

For a BitLocker-protected boot drive, access requires the 48-digit recovery password or a recovery key. If that recovery information was not saved anywhere accessible, BitLocker is designed so the data is unrecoverable.

Available options:

Check all possible key locations one more time:
- Microsoft account recovery key page: https://account.microsoft.com/devices/recoverykey
- If the device was ever managed by work or school, check with the organization’s IT department.
- If recovery keys were stored in Microsoft Entra ID, they can also be accessed from https://myaccount.microsoft.com under Devices > the Windows device > View BitLocker Keys.
- Check for any printed copy, saved text file, or USB device that may contain the recovery information.
If the recovery screen is asking for the 48-digit number, enter that recovery password if found.
If the device cannot boot normally, and the recovery information is found later, the drive can also be connected to another device as a secondary drive and unlocked there.
If the recovery information cannot be found, Microsoft Support cannot retrieve, provide, or recreate a lost BitLocker recovery key.
If the key is truly unavailable, the remaining path is to remove the encrypted contents and reinstall Windows. This is destructive and results in loss of all data on the drive. For an OS drive, accepted Microsoft Q&A guidance states that a Windows reset will not work on an encrypted drive; instead, use Windows installation media on another PC, then during setup delete all partitions on the encrypted drive to remove the encryption before reinstalling Windows.

Why this happened: BitLocker can enter recovery after hardware, firmware, boot configuration, TPM, or startup-environment changes, and also after too many failed sign-in attempts.

References: