Bitlocker recovery key restart loop

A repeated BitLocker recovery prompt usually means Windows is hitting a startup or security-state problem and BitLocker is re-entering recovery each time. Common triggers include changes to boot files, TPM state, BIOS/UEFI firmware, PCR settings, or repeated failed startup attempts.

Start with this path:

1. Check whether the device can reach Windows Recovery Environment.
   • Power on the PC.
   • As Windows starts loading, hold the power button to force shutdown.
   • Repeat this twice.
   • On the third start, Windows should enter Recovery Environment.
2. In Recovery Environment, try startup repair options.
   • Go to Troubleshoot.
   • If available, use repair options such as startup repair or uninstalling recent updates.
3. If the device is a Surface and this started after firmware or TPM-related updates, check for the known Surface BitLocker recovery issue.
   • On affected Surface devices, BitLocker can keep prompting for recovery after UEFI or TPM firmware updates, especially if PCR values differ from the default PCR 7 and PCR 11.
   • To verify the PCR values in use, run this from an elevated Command Prompt when possible:

          manage-bde.exe -protectors -get <OSDriveLetter>:
     

4. If the device cannot start even after entering the correct recovery key, use WinRE Command Prompt to inspect or repair startup.
   • For BCD-related recovery screens, from Troubleshoot > Advanced options > Command Prompt, run:

          bootrec /scanos
          bootrec /rebuildbcd
          bootrec /fixmbr
          bootrec /fixboot
     

   • Then test whether Windows starts.
5. If the issue is repeated recovery after a configuration change and Windows does load, identify and reset the root cause.
   • Review what changed before the loop started: BIOS/UEFI update, TPM change, boot order change, docking changes, Windows upgrade, or hardware movement.
   • Use:

          manage-bde.exe -status
     

     to view the current BitLocker protection mode.
   • BitLocker validation profile reset can be performed by suspending and resuming BitLocker.
6. If the problem is a forgotten PIN rather than a damaged startup state, reset the PIN after unlocking with the recovery password.
   • Open BitLocker Drive Encryption in Control Panel.
   • Expand the OS drive.
   • Select Change PIN > Reset a forgotten PIN.
   • Administrative credentials are required if the signed-in account is not an administrator.

Important:

• Disabling protectors or turning off BitLocker reduces protection on the device.
• Firmware, TPM, and boot repair actions should be done carefully because they can affect startup and security state.

If this is a Surface device and the loop began after firmware or TPM updates, the most relevant documented fix is to boot from a Surface recovery image, unlock the OS drive with the recovery password, and disable the TPM protectors temporarily using manage-bde.exe -protectors -disable <DriveLetter>: so the device can start again.

References:

• BitLocker recovery overview
• BitLocker recovery process
• BitLocker recovery: known issues
• Surface turns on but is stuck on the Recovery screen
• I have a Bitlocker bluescreen. The problem is a error code (E_FVE_USER_REQUESTED_RECOVERY). I am in a loop where even if I enter the key I cannot enter my pc. Can someone help please?? - Microsoft Q&A