Windows requests the BitLocker recovery key when it cannot automatically unlock the encrypted drive, often after a hardware, firmware, or software change that could also resemble unauthorized access.^1^
Find and enter the recovery key
- On the BitLocker recovery screen, write down the first eight digits of the Recovery Key ID. This identifies the correct key if your account contains several keys.
- On another phone or computer, open: https://account.microsoft.com/devices/recoverykey
- Sign in with the Microsoft account used to set up or sign in to the locked PC.
- Find the entry whose Key ID matches the ID displayed on the locked PC.
- Enter its corresponding 48-digit recovery key on the recovery screen. The key ID itself is not the recovery key.^2^
On Windows 11 version 24H2 and later, the recovery screen may display a hint identifying the associated Microsoft account.^2^
If the key is not in that account
Check these locations in order:
- Another person’s Microsoft account: If someone else initially configured the PC or enabled encryption, the key may be attached to that person’s account.
- Work or school account: Open https://aka.ms/aadrecoverykey, sign in, select Devices, expand the relevant device, and select View BitLocker Keys. If it is an organization-managed device, contact its IT department.
- Printed copy: Check paperwork stored when the computer was configured.
- USB drive: Connect any USB drive used when BitLocker was enabled. If the key was saved as a text file, read it using another device.^2^
Device Encryption may have been enabled automatically, in which case the key is normally backed up to the Microsoft, work, or school account associated with activation. If BitLocker Drive Encryption was enabled manually, the person enabling it selected where to save the key.^1^
If no recovery key can be found
Microsoft Support cannot retrieve, provide, or recreate a lost recovery key. Without it, the supported remaining option is to reset or reinstall Windows; this removes the files on the encrypted drive.^2^
After access is restored, create or verify an additional recovery-key backup so it remains available if recovery is requested again.^3^
References