recover bitlocker key for corrupted laptop

Use another device to sign in with the Microsoft 365 work or school account, locate the affected Windows device, and match its stored 48-digit BitLocker key to the recovery key ID displayed on the corrupted laptop.

Recover the key with a Microsoft 365 work or school account

1. On the laptop’s BitLocker screen, write down the first eight digits of the Recovery Key ID. This identifies the correct key if several are stored.
2. On another phone or computer, open https://aka.ms/aadrecoverykey.
3. Sign in with the same work or school account used on the laptop.
4. Select Devices, expand the affected device, and select View BitLocker Keys.
5. Find the entry whose key ID matches the ID displayed on the laptop.
6. Enter its 48-digit recovery key on the laptop. ^1^

If the organization manages the laptop through Intune, the key may also be available through Company Portal:

1. Open https://portal.manage.microsoft.com and sign in.
2. Select Devices and then the affected PC.
3. Select Get recovery key > Show recovery key.
4. Match the ID and enter the displayed key on the laptop. This route requires an organization-enrolled, BitLocker-encrypted device and permission to view its key. ^2^

If the key is not visible

Contact the organization’s IT administrator and provide:

• The laptop or device name, if known
• The Recovery Key ID shown on the BitLocker screen
• Proof that the device is assigned to you

For a key stored in Microsoft Entra ID, a device owner or an administrator with an eligible role can open the device details and select Show Recovery Key. Eligible roles include Helpdesk Administrator, Cloud Device Administrator, Intune Administrator, Security Administrator, and Security Reader. The key exists there only if the encrypted device stored it in Microsoft Entra ID. ^3^

If “365 account” means a personal Microsoft account

If the computer was configured with a personal Microsoft account rather than a business account:

1. Open https://account.microsoft.com/devices/recoverykey on another device.
2. Sign in with the Microsoft account used when the laptop was configured or BitLocker was enabled.
3. Match the listed key to the Recovery Key ID on the laptop.
4. Enter the corresponding 48-digit key.

If another person originally configured the laptop, the key may be stored in that person’s account. Also check any printed copy or USB drive used when BitLocker was enabled. ^1^

If no recovery key can be found

Microsoft Support cannot retrieve or recreate a lost BitLocker recovery key. Without the correct key, the encrypted files cannot be recovered through Windows recovery. The remaining option is to reset or reinstall Windows, which removes the files on the encrypted drive. ^1^

From the Windows Recovery Environment, select Troubleshoot > Reset this PC. Reinstallation from recovery media is another option, but it also removes data; if this is an organization-owned laptop, contact IT before resetting it. ^4^

References

1. Find your BitLocker recovery key | Microsoft Support
2. Get recovery key for Windows
3. Manage device identities using the Microsoft Entra admin center
4. Recovery options in Windows | Microsoft Support