Additional Microsoft Entra services and features related to identity, access, and network security
A BitLocker-locked drive generally cannot reveal the full Microsoft account holding its key; record the recovery key ID and use it to check every account that could have configured the old drive.
Locate the matching recovery key
- Record the recovery key ID
- In the BitLocker prompt, note the first eight digits of the recovery key ID.
- This is not the 48-digit recovery key. It identifies which stored key matches the drive.
- If the recovery screen is from Windows 11 version 24H2, it may display a hint for the associated Microsoft account. Older versions do not provide that account hint.^1^
- Check every personal Microsoft account previously used on the computer
- Open https://account.microsoft.com/devices/recoverykey.
- Sign in with each possible account, including old Outlook, Hotmail, Live, Skype, or Xbox accounts.
- Compare the displayed key ID with the ID from the locked drive. The device does not necessarily need to appear in the account’s device list for its key to be present.^2^
- Check accounts belonging to whoever configured BitLocker
- If the repair shop installed Windows, set up the computer, or enabled encryption, ask whether an employee used an account during setup.
- When another person sets up the device or turns on BitLocker, the key may be saved in that person’s Microsoft account.^1^
- BitLocker could also have been enabled by a previous administrator, who selected where to save the key.^3^
- Check any work or school account ever connected to the computer
- Go to https://aka.ms/aadrecoverykey and sign in.
- Select Devices, expand the applicable device, and select View BitLocker Keys.
- Match the recovery key ID. If access is unavailable, contact that organization’s IT administrator; keys for managed devices may be held in Microsoft Entra ID or Active Directory.^1^
- Search offline locations
- USB drives used during the original setup.
- Printed records kept with the computer’s paperwork.
- Saved text files containing a recovery key. Microsoft documents USB and printed copies as supported recovery locations.^1^
If no matching key can be found
Microsoft Support cannot retrieve, provide, or recreate a lost BitLocker recovery key. Without the matching 48-digit key or another recovery method configured when encryption was enabled, the encrypted files cannot be accessed.^1^
The drive can be erased and reformatted for reuse, but that permanently removes all data on it. Do not format it while still searching for the key or if the files are important.
References