A BitLocker recovery key is a 48-digit numerical password used to unlock the encrypted drive.
To find which account has the key, use the recovery key ID shown on the BitLocker screen and check these locations:
- Note the first 8 digits of the recovery key ID on the recovery screen.
- Check the Microsoft account recovery key page from another device: https://aka.ms/myrecoverykey
- Sign in with each Microsoft account that might have been used to set up the laptop.
- Match the key ID shown on the website with the key ID on the laptop.
- If the laptop was ever signed in with a work or school account, check: https://aka.ms/aadrecoverykey
- Sign in with the work or school account.
- Go to Devices, expand the device, and select View BitLocker Keys.
- If the device is managed by an organization, the recovery key might also be available through the Intune Company Portal:
- Sign in to the Company Portal website
- Go to Devices
- Select the locked PC
- Select Get recovery key > Show recovery key
- Also check whether the key was saved elsewhere when BitLocker was turned on:
- a printed copy
- a USB flash drive containing the saved key
Important facts:
- Microsoft Support cannot retrieve, provide, or recreate a lost BitLocker recovery key.
- If the device was set up or BitLocker was turned on by someone else, the key might be stored in that person’s Microsoft account.
- If the recovery key cannot be found, the remaining option is to reset the device using Windows recovery options. This removes all files.
References: