Windows 11 BitLocker Recovery Key: Where to Find It Before Your PC Locks You Out

• The fastest place to check is your Microsoft account at the official recovery-key page. Match the first eight characters of the key ID shown on your BitLocker screen.
• Work and school PCs may store the key with your organization instead, while printed copies and USB backups are other common locations.
• If the key is missing, Microsoft cannot recreate it. Avoid resetting Windows until you have checked every account and backup location because recovery options may erase apps, settings, or files.

What to do when Windows asks for a BitLocker recovery key

A BitLocker recovery key is a unique 48-digit number that unlocks an encrypted Windows drive when the normal startup check cannot release the encryption key. Windows may ask for it after a BIOS or UEFI change, firmware update, motherboard replacement, boot-configuration change, TPM change, or another event that looks like a possible security risk.

These steps apply to Windows 11 and Windows 10 PCs, including devices using automatic Device Encryption. Start by writing down the first eight characters of the Recovery key ID shown on the blue recovery screen. You need that ID to choose the correct key if several are listed in your account.

Before you try anything risky

Do not guess repeatedly, delete partitions, or reset the PC as a first step. A reset can remove applications and settings, and some recovery or reinstall options can remove personal files. If the computer belongs to your employer or school, contact IT before changing anything; the organization may control the recovery key and may have a supported repair process.

If the recovery screen appeared immediately after a BIOS update or hardware change, think about whether you can safely undo that change. For example, restoring a recently changed boot setting may stop the recovery prompt. If you are unsure what changed, leave the settings alone and locate the key first.

Quick checks: find the key in the most likely places

1. Check the Microsoft account used on the PC. This is the most likely location for many personal Windows devices, especially when Device Encryption was enabled automatically.
2. Check a work or school account. A device that was ever connected to an organization may have its key stored under Microsoft Entra ID or managed by the IT department.
3. Look for a printed copy. Search files, paperwork, or a folder where you keep important device records.
4. Check USB flash drives. The key may have been saved as a text file. If the locked PC cannot read the drive, plug it into another computer and open the file there.

A successful result is a 48-digit recovery password whose key ID matches the first eight characters displayed on the recovery screen. Do not use a key just because it belongs to the same computer name; the ID is the reliable match.

Find the key in your personal Microsoft account

Use another phone, tablet, or computer if the locked device cannot start. Open the official Microsoft recovery-key page and sign in with the account used to set up Windows or enable device encryption.

1. Sign in to your Microsoft account.
2. Review the listed recovery keys and compare each key ID with the ID on your BitLocker screen.
3. Enter the matching 48-digit key on the locked PC.

If someone else set up the computer, the key may be saved in that person’s Microsoft account instead. This can happen with a used PC, a family computer, or a device configured by a technician. Starting with Windows 11 version 24H2, the recovery screen can show a hint for the Microsoft account associated with the key, which may help identify the right account.

Check a work or school account

For a business, university, or school computer, the recovery key may be stored in the organization’s account rather than a personal Microsoft account. You may be able to retrieve it yourself, but company policies can require an administrator or help desk to provide it.

1. Sign in with the work or school account connected to the PC.
2. Open Devices and select the affected computer.
3. Choose View BitLocker Keys.
4. Match the displayed key ID with the ID on the recovery screen, then enter the corresponding key.

If the device does not appear, or the key list is unavailable, contact your organization’s IT department. Recovery information may be stored in Microsoft Entra ID or Active Directory, and users may not have permission to view it directly. Do not remove the computer from workplace management just to troubleshoot the prompt.

What if the key is on paper or a USB drive?

Printed recovery key

Look for a printout created when BitLocker or Device Encryption was enabled. The page should include both a recovery key ID and the 48-digit recovery password. Compare the ID before entering the number.

USB backup

If you saved the key to a USB flash drive, connect the drive to the locked computer and follow the recovery-screen instructions. If the key was saved as a text file, use another computer to open it and read the number. Keep the backup separate from the PC; storing both in the same bag or drawer makes one theft or loss more damaging.

If the BitLocker key still does not work

First, recheck every digit and confirm that the key ID matches. A Microsoft account can contain multiple keys for different devices or previous installations. Also check whether another person configured the computer.

If the device was recently repaired, upgraded, or transferred to a new owner, ask the previous owner, repair shop, employer, or school administrator which account originally stored the key. Microsoft Support cannot retrieve or recreate a lost BitLocker recovery key.

When a key is correct but Windows continues returning to recovery, the underlying issue may be a firmware, TPM, boot, or hardware change rather than a missing password. If you can unlock the computer, suspend BitLocker protection before planned firmware or BIOS work, then resume protection after the update finishes. Follow the manufacturer’s instructions for the specific PC model.

Last resort: Windows recovery or reset

If you cannot find the key and cannot undo the change that triggered recovery, Windows may require a recovery or reset process. BitLocker protection can also require the recovery key before many Windows Recovery Environment tools will run.

Choose the least destructive option that matches the problem:

• Uninstall updates: useful when the problem began after a recent Windows update and does not normally remove personal files.
• System Restore: rolls back system files, settings, drivers, and installed programs to an earlier restore point while preserving personal files.
• Reset this PC: reinstalls Windows and lets you choose whether to keep personal files, but removes applications and settings.
• Reinstall from installation media: a more extensive option that can remove everything from the selected drive.

Back up important files before starting any recovery process whenever possible. If you suspect malware, a clean reinstall may be appropriate, but it can remove personal data and applications. For a work or school computer, let IT decide whether reset or reinstallation is permitted.

Prepare your PC before the next recovery prompt

While Windows is working, make sure you know which account stores the recovery key and keep a second copy in a secure location. A recovery key can unlock the encrypted drive, so do not post it publicly or store it unprotected alongside the computer.

You can also prepare by enabling Windows Backup under Settings > Accounts > Windows backup, creating a recovery drive on an empty USB drive, and recording the device model and serial number. A recovery drive is a last-resort tool, not a replacement for the BitLocker key. Creating one erases the USB drive’s existing contents, so use an empty drive.

Before a planned BIOS, UEFI, firmware, motherboard, or TPM change, confirm that the key is accessible first. That small check can save you from being locked out after an otherwise routine update.

Helpful Links

• Find your BitLocker recovery key – Verify the recovery-key locations and compare the key ID shown on the BitLocker recovery screen.
• Recovery options in Windows – Compare Windows recovery, reset, reinstall, backup, and recovery-drive options.
• BitLocker recovery process – Review Microsoft's guidance for organization-managed devices, USB backups, and help-desk recovery.
• BitLocker overview – Learn how Device Encryption and BitLocker protect Windows drives and why recovery can be triggered.

Frequently Asked Questions

Q. Can Microsoft Support give me a replacement BitLocker recovery key?

A. No. Microsoft says it cannot retrieve, provide, or recreate a lost BitLocker recovery key. Check the correct Microsoft account, work or school account, printed backup, USB drive, or the organization that managed the PC.

Q. Why did BitLocker suddenly appear after a BIOS or firmware update?

A. BitLocker checks boot and hardware information before releasing the drive-encryption key. A BIOS, UEFI, TPM, motherboard, boot-order, or other early-startup change can look like an unauthorized change and trigger recovery.

Q. Will resetting Windows remove BitLocker?

A. Resetting Windows reinstalls the operating system and can remove applications and settings. Depending on the option selected, personal files may also be removed. It should be treated as a last resort after checking every recovery-key location.

Q. Should I keep my BitLocker key on the same USB drive as my computer's startup key?

A. No. Keeping both on one removable drive creates a single point of failure. Store the recovery copy separately from the PC and protect it because anyone with the key may be able to unlock the encrypted drive.