Before BIOS, hardware, recovery or account changes, locate the 48-digit BitLocker key and confirm its key ID matches the recovery screen. A Windows password or device PIN is not the recovery key. First, record the recovery-key ID shown by Windows and check the Microsoft account, work/school account, printout or administrator that may hold the key.
What this covers
- A Windows device protected by BitLocker or Device Encryption
What it does not cover
Try in this order
0 of 7 completedEstablish the exact starting state
ReversibleRecord the recovery-key ID shown by Windows and check the Microsoft account, work/school account, printout or administrator that may hold the key.
Separate the fault or decision boundary
ReversibleMatch the key ID instead of trying unrelated 48-digit keys or changing firmware repeatedly.
Apply the narrowest correction
ReversibleStore an accessible verified copy controlled by the owner, then perform the intended repair with the recovery path available.
Locate the key before you hand the laptop over
ReversibleCheck your Microsoft account, any work or school account the device was signed into, and any printout or USB drive.
Write down the first 8 digits of the key ID
ReversibleThe ID lets you match the right key if the account holds more than one.
Check every account the device has been signed into
ReversibleMicrosoft says a key can be stored in a personal Microsoft account or in an organization's account if the device was ever signed into one, so check both before assuming it is lost.
Verify before escalating
ReversibleConfirm the key can be located from another device without exposing it publicly.
Microsoft
Where a BitLocker recovery key can be and what Microsoft cannot do
Find the key before the repair, not during it.
- Microsoft account
- If the key was backed up to your Microsoft account, sign in at aka.ms/myrecoverykey from another device.
- Work or school account
- If the device was signed into an organization, the key can be at aka.ms/aadrecoverykey, or you may need to contact that organization's IT support.
- Printout or USB
- You might have printed the key when BitLocker was activated, or saved it to a USB flash drive, which you plug into the locked device.
- The key ID
- When prompted, note the first 8 digits of the recovery key ID to tell which key to use if you have more than one.
- The limit
- Microsoft Support cannot retrieve, provide or recreate a lost BitLocker recovery key, and without it you may have to reset the device, which removes all files.
Stop boundary
When this stops being a self-service repair
- !Do not hand the laptop in for repair or reset it until you have located the recovery key, because without it Microsoft says you may have to erase the device.
Evidence ledger
Sources behind this answer
Exact questions
Common questions about “Find and verify a BitLocker recovery key before Windows repair”
Can Microsoft give me the key if I lose it?+
No. Microsoft states that Microsoft Support cannot retrieve, provide or recreate a lost BitLocker recovery key.
What if I cannot find it at all?+
Microsoft says you may need to reset the device, which removes all files.
What is the key ID for?+
When the recovery screen appears, note the first 8 digits of the recovery key ID, which tells you which key to use if the account holds more than one.
Can a repair shop get around it?+
Microsoft says Microsoft Support cannot retrieve, provide or recreate a lost BitLocker recovery key, so a shop cannot either without the key.
Where should I save the BitLocker recovery key?+
Save it to your Microsoft account, print it or keep it on a USB drive stored somewhere safe. Do not keep it only on the encrypted drive, and confirm you can actually retrieve it before a repair starts.
Can a repair trigger the BitLocker recovery screen?+
Yes. Replacing the motherboard, changing firmware settings or updating the BIOS can make Windows ask for the key. Having the recovery key ready avoids being locked out of your own files after the repair.
How can I check the recovery key is the right one?+
In Windows the recovery key has an identifier, and the screen that asks for it shows the same identifier. Match the first characters of the identifier on your saved key with the one on the screen. A key saved for an older drive or another device will not unlock this one.
Where can I find the BitLocker recovery key?+
In your Microsoft account under devices, in an organization's account, on a printout or on a saved file. Check the key ID matches.
Is the key sensitive?+
Yes. Store it safely and do not share it publicly.