What to do when Windows asks for a BitLocker recovery key and how to find it

If a blue screen at startup asks for a 48-digit BitLocker recovery key, your files are not gone. Here is how to find the key in your Microsoft account, your work or school account, on a printout or a USB drive, how to enter it, and how to back it up now so you never get stuck again.

What to do when Windows asks for a BitLocker recovery key and how to find it

BitLocker is the Windows feature that encrypts your drive, and on many new computers it is switched on without you noticing (on Windows 11 Home it is called "Device encryption"). Normally the drive unlocks by itself at startup, but after a BIOS/UEFI update, a hardware change or too many wrong PIN attempts, Windows asks for the 48-digit recovery key as a safety measure.

This screen does not mean your data has been wiped; once you enter the right key the computer starts as usual. Below we list the places the key might be, starting with the most likely, and finish by showing how to back it up from today on.

  • Time15-30 minutes
  • DifficultyMedium
  • Steps10

๐Ÿงฐ What you need

  • A second device with internet access (phone, tablet or another computer)
  • The email address and password of the Microsoft account you used to set up the computer
  • Your organization account or your IT department's contact details if the device came from work or school
  • Any printout made when BitLocker was turned on, or the USB drive the key was saved to
  • Pen and paper or a phone camera to note the key ID

Steps

  1. Note the recovery key ID on the screen On the recovery screen, next to the prompt for the 48-digit key, you will see a "recovery key ID" (Key ID). Write down its first 8 characters or take a photo of the screen. If your account holds more than one key, this ID is how you match the right one. There is no need to keep restarting the computer; the screen can stay as it is until you find the key.
  2. Check your Microsoft account from another device On your phone or another computer, open a browser and go to <strong>aka.ms/myrecoverykey</strong>. Sign in with the Microsoft account you use on the locked computer. In the list, look at the device names and key IDs, and find the 48-digit recovery key on the row whose first 8 characters match the ID on the screen. On Windows 11 Home, device encryption adds the key to this account automatically the first time you sign in with a Microsoft account, so this is the first place to look.
  3. If someone else set up the computer, try their account If your device is not in the list, think about who set the computer up first. If a family member or friend set it up or turned on BitLocker, the key may be stored in their Microsoft account. Ask them to sign in at the same address with their own account and look for your device name and key ID. If you have a second Microsoft account under another email address, try that one too.
  4. For a work or school computer, check your organization account If the computer is managed by your school or employer, go to <strong>aka.ms/aadrecoverykey</strong> on another device and sign in with your organization account. Select <strong>Devices</strong>, expand the row for the device and select <strong>View BitLocker Keys</strong>. Your organization may have turned this option off; if you cannot see the key, contact your IT department and give them the key ID and the device name.
  5. Check for a printout or a USB drive The key may have been printed when BitLocker was turned on; look where you keep important papers for the computer, such as the warranty card or receipt. If the key was saved to a USB flash drive, plug it into the locked computer and follow the on-screen instructions. If the key is stored on the drive as a text file, open the file on another computer and read the 48 digits from there.
  6. Enter the 48-digit key carefully The recovery key is made of 8 groups of 6 digits and contains numbers only. Type the digits group by group, in order; Windows checks each 6-digit group separately and lets you correct a group that was typed wrong. Once the key is accepted, the computer starts as usual. If the recovery screen opened in the Windows Recovery Environment, you can start Narrator with Windows + Ctrl + Enter or tap the text box to bring up the on-screen keyboard.
  7. Once it starts, think about the cause After Windows starts, try to remember why the screen appeared: a recent BIOS/UEFI update, a motherboard or drive change, a change in boot order or many wrong PIN attempts is most likely the reason. After the key is entered once, BitLocker accepts the new state and the screen usually does not return. If it keeps coming back even though you changed nothing, tell your IT department if the device belongs to an organization, or contact the manufacturer's support if it is your own.
  8. Back up the key now (Pro, Enterprise, Education) Type <strong>BitLocker</strong> in Start and choose <strong>Manage BitLocker</strong> from the results. Select <strong>Back up your recovery key</strong> next to the drive. Choose one or more of the options to save to your Microsoft account, save to a USB flash drive, save to a file or print the recovery key, then select <strong>Finish</strong>. On organization devices you will see an option to save to the organization account instead of a Microsoft account. You cannot save the file to the encrypted drive itself; keep it somewhere else.
  9. On Windows 11 Home, confirm the key is in your account The Home edition has no Manage BitLocker app; encryption is handled on the <strong>Settings > Privacy & security > Device encryption</strong> page. If this feature is on, the key has been saved to the Microsoft account you sign in with. Before anything goes wrong, visit aka.ms/myrecoverykey and check that your device appears in the list. On computers used with a local account, device encryption does not turn on automatically.
  10. Know the last resort if the key is nowhere Microsoft Support cannot find, provide or recreate a lost BitLocker recovery key. If the key does not turn up in any of the places above, the only option left is to reset the device using the Windows recovery options. Resetting removes all of your files; if you have a backup in OneDrive or on an external drive, you can restore your files from there afterwards. Before taking this step, check every Microsoft account and every paper you can think of one more time.

โš  This guide is general information. Yudum cannot be held responsible for the outcome of following it; for official procedures always rely on the institution's own statement. Steps and fees change over time.

Was this guide helpful?

๐ŸŽฏ Related content

Yudum

Since 1998, from all over the world โ€” chat, radio, games and more.

Join the Chat Sign up free

18+ only โ€” live chat, voice and video on Yudum are for adults. Why?

Chat since 1998

Chat rooms you can join without an account, voice and video chat, live radio around the clock, games that run in your browser and fresh content every day. No install, no fee โ€” open your browser and join in.