Find and Save Your Windows BitLocker Recovery Key Before You Need It

If your PC ever boots to a blue screen asking you to "Enter the recovery key for this drive", you cannot get into Windows without a 48-digit number. Spending one minute now can save you from that situation.

Why would Windows suddenly ask for a recovery key?

• Many Windows 11 laptops and newer PCs turn on device encryption (BitLocker) automatically when you sign in with a Microsoft account. It may be on even if you never enabled it.
• After a BIOS update, a motherboard or drive replacement, a BIOS setting change or some Windows updates, the PC may decide something has changed and ask for the key.
• Microsoft Support cannot retrieve, provide or recreate a lost recovery key. Without it you have to reset the PC, which removes all of your files.

Step 1: Check whether your PC is encrypted

• Windows 11 Home: go to Settings → Privacy & security → Device encryption and see if it is On. If the menu is missing, the PC does not support device encryption.
• Windows 11 Pro: search the Start menu for "Manage BitLocker" and check the C: drive.
• From the command line, open Command Prompt as administrator, type manage-bde -status and look at "Protection Status".

Step 2: Find where the recovery key is stored

• On another device (such as your phone), go to aka.ms/myrecoverykey and sign in with the Microsoft account you use on the PC. You will see recovery keys listed by device.
• If the PC uses a work or school account, try aka.ms/aadrecoverykey or ask your IT department.
• Match the first 8 characters of the key ID shown on the recovery screen with the key ID in the list to pick the right key. Starting with Windows 11 24H2, the recovery screen also shows a hint of the linked account.

Step 3: Keep a second copy somewhere safe

• In Manage BitLocker (Pro) or the BitLocker page in Control Panel, choose "Back up your recovery key" to save it to a file or print it.
• In an administrator Command Prompt, manage-bde -protectors -get C: shows the 48-digit key under "Numerical Password". Take a photo of it or write it down.
• A key file stored only on the encrypted PC itself is useless. Keep it outside the PC: a USB drive, another computer, your phone or a printout.

Things to remember

• Check your recovery key before a BIOS update or hardware change.
• If someone else set up your PC, the key may be saved in their Microsoft account.
• Before selling a used PC, reset it and remove it from the device list in your Microsoft account.

Reference: Microsoft Support – Find your BitLocker recovery key