Enter only the key whose ID matches the screen, then identify the trigger—firmware/TPM change, boot-order change, dock/storage change or policy—before suspending protection. Repeated prompts are not fixed by guessing keys. First, photograph the recovery-key ID and locate the matching 48-digit key through the owner or administrator.
What this covers
- A BitLocker-protected Windows device that can reach the recovery screen
What it does not cover
Try in this order
0 of 7 completedEstablish the exact starting state
ReversiblePhotograph the recovery-key ID and locate the matching 48-digit key through the owner or administrator.
Separate the fault or decision boundary
ReversibleAfter successful boot, review recent BIOS, TPM, boot, hardware and organization-policy changes.
Apply the narrowest correction
ReversibleReverse the unsupported change or suspend/resume BitLocker through the documented administrative process before planned firmware work.
Record the key ID and find the matching recovery key
ReversiblePhotograph the recovery key ID on the screen, then locate the 48-digit key that matches it. It may be in your Microsoft account, saved to a file or printed, or held by your organization's administrator.
Once you are in, find out what triggered the prompt
ReversibleLook for recent changes such as a BIOS or firmware update, a TPM reset, a changed boot order, a new dock or storage device, or a company policy update. BitLocker asks for the key when it sees a change it does not trust.
Reverse the change or suspend and resume protection correctly
ReversibleUndo the unsupported change, or suspend BitLocker and then resume it as Microsoft documents, so that it records the new state. Restart twice with normal hardware attached to confirm the prompt is gone.
Verify before escalating
ReversibleCold-start twice with normal hardware attached and confirm no prompt.
Stop boundary
When this stops being a self-service repair
- !Do not reformat the drive or reset the PC to get past the prompt; that erases your data. Contact your administrator or Microsoft if the key cannot be found.
Evidence ledger
Sources behind this answer
Exact questions
Common questions about “Windows keeps asking for the BitLocker recovery key”
Why does BitLocker keep asking for the recovery key?+
It detects a change to the boot environment, the firmware or the hardware and cannot confirm the drive is safe. Find and remove the trigger and re-establish trust.
Where can I find my BitLocker recovery key?+
In your Microsoft account for a personal PC, in your organization's directory for a work PC, or in a file or printout you saved when you turned it on.
Can I guess the key or try other keys?+
No. Only the key whose ID matches the one shown on the screen will work, and guessing wastes attempts.
Is it safe to turn BitLocker off?+
It removes the protection on your files if the PC is lost or stolen, so only do it as a short step and turn it back on.
Why does BitLocker ask for the key?+
Changes to hardware, firmware or the boot setup can make Windows ask for the recovery key.
Why does it repeat?+
A stuck update or changed setting can keep triggering it.
How can I stop it?+
Suspend and resume protection after updates, or check firmware settings.