New BitLocker recovery key does not appear in my personal microsoft account

Mary Ann Harman 0 Reputation points
2026-11-11T04:43:48.76+00:00

I have windows 11 computer with bitlocker enabled. I created a new 48-digitt= BitLocker recovery password using Administer Terminal. windows confirmed that the new recovery key was successfully added.

I Wrote down the new recovery password and its matching key ID. but, when I sign into my personal Microsoft account and visit the BitLocker recovery key page, the new key ID does not appear.

how can I safely back up the newly created recovery key to my personal Microsoft account without risking access to my computer or deleting either recovery key/

Windows for home | Windows 11 | Recovery and backup

2 answers

Sort by: Newest
  1. SD - IA 183.1K Reputation points Independent Advisor
    2026-11-11T05:24:43.1033333+00:00

    Hi,
    The key upload takes 48 hours, so if you just turned on the protection, it will take a while. In the meantime, save it manually on OneDrive.

    User's image

    In Search, type > "Manage BitLocker"

    Expand Windows (C:/) and click Back up your recovery key.

    Save it to file and save it on Onedrive.

    I hope this information helps. If you have any more questions, don't hesitate to reach out. Wishing you good luck!

    Was this answer helpful?

    0 comments No comments

  2. AI answer

    2026-11-11T04:44:46.63+00:00

    Use Manage BitLocker → Back up your recovery key → Save to your Microsoft Account, then verify that the displayed key ID matches the newly created recovery-password protector before changing or deleting anything.

    Back up the key safely

    1. Keep the written copy of the new 48-digit password and key ID in a secure location away from the computer.
    2. Select Start, type BitLocker, and open Manage BitLocker.
    3. Next to the appropriate drive—normally C:—select Back up your recovery key.
    4. Select Save to your Microsoft Account, and then select Finish. This is the documented Windows 11 method for saving a recovery key to the recovery-key library of a personal Microsoft account. Creating this additional backup does not require decrypting the drive, and Microsoft supports making multiple backups.^1^
    5. Open the Microsoft account recovery-key page from another browser or device, sign in with the same personal Microsoft account, and compare the listed key ID with the ID you wrote down. The key ID identifies which 48-digit recovery password belongs to the drive.^2^

    Do not delete either recovery-password protector or any online entry while testing this. BitLocker supports saving recovery information to a Microsoft account, file, USB device, or printout.^3^

    If the new key ID still does not appear

    Microsoft’s personal-account procedure does not document a way to select a particular recovery-password protector when a drive contains multiple such protectors. Therefore, do not assume that repeating Back up your recovery key uploaded the newly added protector unless its key ID appears online.

    Use an independent backup for the new protector:

    • Keep the written copy securely, or
    • In Manage BitLocker → Back up your recovery key, choose Save to a USB flash drive, Save to a file, or Print the recovery key.
    • Do not keep the USB drive or printout with the computer. A file cannot be saved to the BitLocker-encrypted drive itself; Microsoft suggests storing a copy in OneDrive Personal Vault if appropriate.^1^

    You can also confirm that both recovery-password protectors remain installed without modifying them. Open Terminal (Admin) and run:

    manage-bde.exe -protectors -get C: -Type RecoveryPassword
    

    Compare each displayed protector ID and 48-digit password with your written records. The command only displays the configured protectors; it does not remove or replace them.^4^

    Commands not to use for a personal Microsoft account

    These commands do not upload to a personal Microsoft account:

    manage-bde.exe -protectors -aadbackup C: -id {ID}
    manage-bde.exe -protectors -adbackup C: -id {ID}
    

    -aadbackup targets Microsoft Entra ID, while -adbackup targets Active Directory Domain Services; they are organizational-directory operations, not personal-account backup methods.^5^

    Avoid any command containing -protectors -delete. Deleting protectors is unnecessary for backup and introduces avoidable recovery risk. Keep both protectors until the new key is independently backed up and its copy has been checked character-for-character.


    References

    1. Back Up Your BitLocker Recovery Key | Microsoft Support
    2. Find your BitLocker recovery key | Microsoft Support
    3. BitLocker FAQ
    4. BitLocker operations guide
    5. manage-bde protectors
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.