Roger Irwin Computer Services - IT Support Services - Computer Repair - Nelson / Richmond / Tasman
Book an Appointment 03 548-2220

Find Your BitLocker Recovery Key

If your computer starts on a blue screen asking for a BitLocker recovery key, Windows has locked the drive to protect your files. Here's where to find the key, and how to make sure you have it before you need it.

Why it asks for the key

BitLocker and Device Encryption scramble everything on the drive so nobody can read it if the computer is lost or stolen. Most new Windows 11 computers have it turned on automatically. Windows asks for the 48-digit recovery key when something changes that it doesn't recognise, such as:

  • A BIOS or firmware update Or a change to BIOS settings such as Secure Boot.
  • Hardware changes A new drive, motherboard or memory, or the drive moved to another computer.
  • Repairs or a failed update Sometimes after Windows has tried to repair itself.

Where to find your recovery key

The recovery screen shows a Key ID. Use another computer or your phone to find the key with a matching ID:

  • Your Microsoft account Sign in at account.microsoft.com/devices/recoverykey with the account you use on the computer. This is where most keys are.
  • Work or school computers Ask your IT administrator, or sign in at myaccount.microsoft.com and look under Devices.
  • Saved or printed When BitLocker was set up, the key may have been printed, saved to a USB stick or saved as a text file.

Without the key, the files can't be recovered. The encryption can't be bypassed, by us or anyone else. Don't reset or reinstall Windows until you've checked every place the key might be.

Check whether your drive is encrypted

Open Settings > Privacy & security > Device encryption, or search the Start menu for Manage BitLocker on Windows Pro. For more detail, open Command Prompt as administrator:

manage-bde -status
Shows each drive and whether it is encrypted. Protection On means BitLocker is active.

Save a copy of your key now

While the computer is working, make sure you have the key somewhere safe, away from the computer itself:

manage-bde -protectors -get C:
Command Prompt as administrator: shows the Key ID and 48-digit recovery password for drive C:.

You can also search the Start menu for Manage BitLocker and choose Back up your recovery key. Keep a printed copy with your important papers, and check that the key is listed in your Microsoft account.