You turn on your PC and instead of Windows you get a blue BitLocker recovery screen asking for a 48-digit key. Don't reset anything yet. In most cases the key is already saved somewhere - usually in your Microsoft account - and you can read it from your phone. This guide shows every place to look, in the order that most often works.
BitLocker (and device encryption, its simpler version on many Windows 11 Home laptops) encrypts the drive. At startup, it checks that nothing important about the PC has changed. If it sees something it can't trust, it locks the drive and asks for the recovery key. Common triggers:
The key is a normal part of this design - it's what proves you own the drive.
The recovery screen shows a Key ID. Write down its first 8 characters. Microsoft says this ID tells you which key to use if you find more than one (for example if you've had several PCs).
This is where most home PCs store the key, because Windows backs it up automatically when you sign in with a Microsoft account.
https://aka.ms/myrecoverykey.Tip: if nobody in the house remembers setting up BitLocker, the key is still usually here - device encryption turns itself on when a Microsoft account signs in on supported hardware.
If you've forgotten the account password, recover the account first - see forgot your Windows 11 password for the Microsoft account steps.
If the PC was ever joined to an employer's or school's account, the key may be stored there instead:
https://aka.ms/aadrecoverykey and sign in with the work or school account.If you don't see it, contact that organization's IT support - they manage these keys.
When BitLocker was turned on manually, Windows asked where to back up the key. Look for:
BitLocker Recovery Key <ID>.TXT.Match the Key ID in the file with the one on screen.
If a family member, shop or former employer set up the PC, the key may be in their Microsoft or company account. Check with them before you give up.
Microsoft is clear that its support can't give you a lost recovery key or create a new one. Without the key, the encrypted data can't be read. The remaining option is to reset the PC, which removes all files on that drive. Only do this once you're sure the key isn't in any account above.
https://aka.ms/myrecoverykey and confirm the PC appears.If the key is accepted but the PC keeps asking for it at every startup, a firmware setting or recent update is usually the cause - that needs a closer look. The GetQuickTechSupport team can walk you through it remotely once the PC is unlocked.
Most often in the Microsoft account that set up the PC - sign in at aka.ms/myrecoverykey from another device. It can also be in a work or school account (aka.ms/aadrecoverykey), on a printout, or in a text file on a USB drive.
BitLocker asks for the key when it sees a change it can't trust at startup, for example a firmware (BIOS/UEFI) update or setting change, a hardware change, or repeated failed sign-ins.
No. Microsoft says its support can't provide or recreate a lost BitLocker recovery key.
On a work or school PC, ask your IT department. Otherwise, the only way back in is to reset the PC, which removes all files on the encrypted drive.
Comments