How to Find Your BitLocker Recovery Key (Windows 11 & 10)

You turn on your laptop and, instead of the usual login screen, Windows shows a blue screen asking for a BitLocker recovery key. It's a scary moment, especially if you never knowingly set up BitLocker. The good news: in most cases the key already exists and is saved somewhere you can reach in a few minutes.

This guide walks through every place Microsoft stores BitLocker recovery keys, how to match the right key to your PC, and what your options are if the key truly can't be found.

What is a BitLocker recovery key?

BitLocker is the drive-encryption feature built into Windows 10 and Windows 11. On many modern laptops it is switched on automatically (often labelled "Device encryption") the first time you sign in with a Microsoft account. The recovery key is a 48-digit number that unlocks the drive when Windows can't confirm that the startup process is safe.

Windows usually asks for it after something changes at a low level, for example:

• a BIOS/UEFI or firmware update,
• changes to Secure Boot or TPM settings,
• hardware changes such as a new motherboard or moving the drive to another PC,
• several failed sign-in attempts, or a failed Windows update.

Before you start, look at the recovery screen and write down the first 8 characters of the "Key ID". If you have several keys saved, this ID tells you which one belongs to this drive.

1. Check your Microsoft account (most common)

If you set up the PC with a personal Microsoft account (Outlook, Hotmail, Live), the key was most likely backed up there automatically.

1. On another phone or computer, open aka.ms/myrecoverykey.
2. Sign in with the same Microsoft account used on the locked PC.
3. Find the entry whose Key ID matches the one on your screen and type the 48-digit key into the PC.

Tip: if a family member, shop technician or company set up the laptop for you, the key may be in their Microsoft account, not yours. Ask them to check the same page.

2. Check your work or school account

Office and college laptops that sign in with a work or school (Microsoft Entra ID) account often store the key in the organization's directory.

1. On another device, go to aka.ms/aadrecoverykey and sign in with your work or school account.
2. Open Devices, select the locked device and choose View BitLocker Keys.

If you don't see the option, your IT department may have restricted it. Contact your IT helpdesk; admins can usually look up the key in Microsoft Entra, Intune or Active Directory within minutes.

3. Look for a printout

When BitLocker is turned on manually, Windows offers to print the key. Check folders where you keep warranty cards, invoices or other important papers from when you bought or set up the PC.

4. Check USB drives

Windows can also save the key to a USB flash drive. Plug likely drives into the locked PC; if the key is stored there, the recovery screen can read it. If it was saved as a .txt file, open the drive on another computer and look for a file named like BitLocker Recovery Key followed by a long ID.

5. Find the key while you can still sign in

If you can still get into Windows (or you want to be prepared before trouble starts), back up the key now:

1. Open Command Prompt as administrator.
2. Run: manage-bde -protectors -get C:
3. Under Numerical Password, you'll see the ID and the 48-digit recovery password. Save it somewhere safe and offline, such as a printed copy kept with your important documents.

You can also open Control Panel > BitLocker Drive Encryption > Back up your recovery key and choose to save it to your Microsoft account, a file or a printout.

What if you can't find the key anywhere?

This is the hard truth: BitLocker is designed so that nobody can bypass it, and Microsoft states that its support team cannot retrieve, provide or recreate a lost recovery key. Be very careful with websites or "unlock services" claiming otherwise; many are scams.

Your realistic options are:

• Undo the change that triggered recovery. If you just changed a BIOS setting (for example, disabled Secure Boot or TPM), changing it back sometimes lets Windows start normally.
• Ask whoever set up the device to check their Microsoft or organization account.
• Reset the PC using a Windows recovery option or installation media. This wipes the drive and deletes all files on it, but it gives you a working computer again. Files backed up to OneDrive or another drive can then be restored.

How to avoid this problem in the future

• Confirm today that your key appears at aka.ms/myrecoverykey.
• Keep a printed copy with your important papers, separate from the laptop.
• Before updating BIOS/firmware on a business laptop, suspend BitLocker first (Control Panel > BitLocker > Suspend protection). It resumes automatically after restart.
• Keep regular backups so a reset is an inconvenience, not a disaster.

Want to understand how BitLocker protects your data in the first place? Read our guide: BitLocker: a powerful tool for data encryption in Windows. Locked out of your account instead? See Windows password recovery: 3 effective methods.

Frequently asked questions

Can I skip the BitLocker recovery screen?

No. Pressing Esc may show more options, but without the key the encrypted drive stays locked. The only way past it without the key is to reset the drive, which erases its data.

Is the BitLocker recovery key the same as my Windows password or PIN?

No. Your password or PIN signs you into Windows. The recovery key is a separate 48-digit number used only to unlock the encrypted drive.

I never turned on BitLocker. Why is it asking for a key?

Many Windows 11 and recent Windows 10 laptops enable device encryption automatically when you sign in with a Microsoft account. That's why the key is usually found in that account.

Source: Microsoft Support, "Find your BitLocker recovery key". Steps checked against Microsoft's documentation in October 2026.