On the BitLocker recovery screen, write down the first eight characters of the recovery key ID. Look up the key in the account or backup location used for that PC, and match the ID before entering the 48-digit recovery key. For a work or school device, contact the organization that manages it.
Record the key ID and identify the device
Start by recording the recovery key ID shown on the screen. This is an identifier that helps you pick the right record when several keys are listed. The recovery key itself is the long numeric code that unlocks the volume. Keep those two values separate. If a household has several computers, use the ID as the deciding match. Device names can be reused, renamed, or carried over during a migration.
Also note what changed before the prompt appeared. It may have followed a repair, firmware update, or hardware change. Use this information when talking to support. Avoid guessing at firmware or security settings in an effort to remove the prompt. For example, resetting security hardware can change what the PC expects and complicate recovery. If a technician made the change, ask which settings were modified and consult the device documentation before undoing anything. Microsoft’s BitLocker recovery guide explains where keys can be stored.
Check the Microsoft account used for setup
Use a separate device that can get online. Open Microsoft’s recovery key instructions and follow its Microsoft account link. Sign in with the account that was used to set up or enable encryption on the affected PC. If you use more than one account, confirm which one you are signed into before deciding the key is missing. On some versions of Windows the recovery screen may display an account hint. Use it as a clue, then confirm the key ID against the record.
If somebody else originally set up the computer, the key may belong to their account. Ask them to check for the matching record themselves. There is no need to share the account password. If the device came from a previous owner and contains your own files, check whether it was reset and set up under your account or handed over as configured. That history helps determine which accounts or backup locations to check first.
Check work, school and offline copies
A managed PC may store recovery information with the organization that registered or joined it. Contact the help desk through a channel you already trust. Give them the device details and key ID they ask for. Expect them to verify that you are entitled to recover the device. If the laptop was formerly managed, ask the former administrator how the transition was handled. A personal account and an organizational account can look similar on the sign-in screen, so follow the support team’s guidance for the device.
If the key was saved manually, check the printed records, USB drive or secure file location where it would have been stored. A saved recovery text file might be accessible from a separate computer. The copy on the locked volume does not help while that volume remains locked. Use our home backup testing guide to check whether you have another copy of your files if you cannot locate the key. Backups and the recovery key solve different recovery problems.
Enter the matching key and verify access
When the key ID matches, enter the associated 48-digit number into the recovery screen. Follow the on-screen instructions and check each group carefully. If Windows rejects the entry, compare the ID again and make sure you are using the recovery key rather than a device PIN, account password, or identifier. If you see several old records for one device, use the ID associated with the prompt in front of you. Do not post any of the recovery keys in a forum or send them in an ordinary troubleshooting message.
After Windows starts, open an important file and verify that you can use the computer normally. If the prompt returns on every restart, investigate the trigger with the manufacturer or IT team. Keep the working key available while troubleshooting. Avoid treating repeated recovery prompts as a reason to disable protection without understanding the cause. For help keeping access to the account that holds the key, see our passkey and account recovery guide.
If there is no usable key
Review any official account recovery options before giving up on the account that might hold the key. If the prompt followed a change, work with the relevant support team to determine whether a supported reversal is possible. Microsoft explains that a device reset may be needed if the recovery key cannot be found and the change that caused the prompt cannot be undone. Resetting can remove files. Check separate backups and whether important documents are available on another device before taking that step.
Avoid tools that claim to unlock the volume without a key. Use a trusted repair provider if you need help identifying whether the problem is the recovery screen or a failing drive. A drive can have a physical problem and also be encrypted. Unlocking alone cannot repair unreadable storage, and repairing the hardware does not supply a missing encryption key. The right next step depends on which symptoms you can verify.
Prepare for a future recovery prompt
While the system is accessible, use Windows’ supported BitLocker controls to back up the key for the encrypted volume. Store a copy somewhere accessible if this device becomes unavailable. On a managed computer, follow the organization’s approved procedure. In a household, agree on who needs access to recovery information and use a secure location. Confirm you can identify the record by its key ID without having to open the protected volume first.
Keep the keys associated with devices clearly labeled. Before replacing a system board or servicing storage, confirm that you can locate the correct record and that your independent backups are current. The offline backup rotation guide explains a way to keep a second copy of files disconnected. Include a restore test in that plan so you know what you can recover if you lose access to both the computer and its normal recovery account.
If you are preparing a computer for someone else, confirm the handover process before they begin storing files on it. Have the new owner or administrator verify that the appropriate account has the current recovery information. Keep the device’s history clear so nobody has to guess which former account to contact years later. For a shared family PC, record the device model and where the record is held while keeping the recovery number itself in a secure location.
Frequently asked questions
Is the key ID the recovery key?
No. The ID identifies which saved record to use. Enter the matching 48-digit recovery key to unlock the volume.
Can Microsoft regenerate my key?
Microsoft Support cannot retrieve or recreate a lost recovery key. Check saved copies and the accounts associated with the device.
Will a reset recover my files?
A reset can remove files. Check independent backups before using a reset as a way to make the device usable again.
