A BitLocker recovery key is a 48-digit number used to unlock an encrypted drive. If the D: drive is BitLocker-protected, access depends on finding the correct key for that specific drive.
Use this process:
- Check the recovery key ID on the prompt
- When Windows asks for the BitLocker key, note the first 8 digits of the recovery key ID.
- This helps identify the correct key if more than one recovery key exists.
- Check Microsoft account or work/school account storage
- For devices using Device Encryption, the recovery key is typically attached to the Microsoft account or work/school account before protection is activated.
- If recovery keys are stored in Microsoft Entra ID, they can be viewed at
https://myaccount.microsoft.comunder Devices > View BitLocker Keys. - Even if the device no longer appears in the account device list, the recovery key may still be associated with an account that was used on the PC.
- Check other saved locations
The recovery key may also have been:
- printed
- saved to a USB device
- saved as a text file on another device
- stored by an organization if the laptop was managed by work or school
- If the drive was moved or is being accessed from another PC
- A moved BitLocker drive can require recovery because the TPM environment changed.
- If the drive is connected as a secondary drive to another Windows device and the recovery key is available, it can be unlocked with:
Command PromptUnlock-BitLocker -MountPoint D -RecoveryPassword xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx
Or use Control Panel / File Explorer and select Unlock drive, then enter the 48-digit key.manage-bde.exe -unlock D: -recoverypassword xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx - Important limitation Microsoft Support cannot retrieve, provide, or recreate a lost BitLocker recovery key.
If the recovery key cannot be found in any saved location or account, there is no supported way to unlock the encrypted data.