BitLocker Recovery Key: Where to Find Your 48 Digit Key on Windows
Your BitLocker recovery key is a 48 digit number saved in your Microsoft account, your work or school account, a printout or a USB drive. Match the key ID on the recovery screen to the right key, then type the key in. Microsoft Support cannot retrieve a lost key for you, so check every place below.
By Neeraj Singh ~6 min Updated Nov 2026 Checked against Microsoft Support and Learn
Error message
Your PC is locked. BitLocker asks for your 48 digit recovery key and shows a key ID.
Summary
Check your Microsoft account first at aka.ms/myrecoverykey from another device. Write down the first 8 digits of the key ID shown on the recovery screen so you select the matching key. Work and school devices store the key under aka.ms/aadrecoverykey or with your IT team. Look for a printout or a USB drive if you saved the key when BitLocker started. Windows asks for the key when BitLocker cannot open the drive on its own, as after a hardware or firmware change.
What the BitLocker recovery screen means
BitLocker recovery is the process that restores access to a protected drive when the drive does not open with its default method. The recovery password is a 48 digit number that opens the volume in recovery mode.
The recovery password is unique to the device it was created on. Windows shows a key ID on the recovery screen so you can find the matching password.
Microsoft Support cannot retrieve, provide or recreate a lost key. You must locate it through one of the sources in this guide.
The same recovery steps apply on Windows 11 and Windows 10. You can also need the key for a data or external drive when you forget its password.
What triggers the BitLocker recovery screen
Entering the wrong PIN too many times.
A BIOS or UEFI firmware upgrade, a new motherboard or a cleared, disabled or hidden TPM.
Changes to the boot manager, the boot order or the NTFS partition table on the disk.
Using PXE boot or upgrading Windows from a CD, DVD or mounted ISO.
Docking or undocking a portable computer or moving the drive into a new computer.
Passing the allowed number of failed sign in attempts, when your organization sets that limit.
✓ How to fix it
Method 1
Find the Key in Your Microsoft Account
1On the recovery screen, write down the first 8 digits of the recovery key ID. The ID shows which key matches your drive when you have more than one.
1Use this method if the device ever signed in with a work or school account. Microsoft says the organization can store the key.
2On another device, go to aka.ms/aadrecoverykey and sign in with your work or school account.
3Select Devices, expand your device and select View BitLocker Keys. Match the key ID to find the right key.
4Microsoft also lists myaccount.microsoft.com for Microsoft Entra ID self service. Open the Devices tab, select your Windows device and select View BitLocker Keys. Your organization can switch this off.
5If you cannot sign in, contact your IT support. Administrators on domain joined devices open Active Directory Users and Computers, right-click the computer object, select Properties and open the BitLocker Recovery tab.
6Administrators can also right-click the domain and select Find BitLocker Recovery Password, then enter the first 8 characters of the password ID. Details are on the Microsoft Learn BitLocker recovery process page.
Method 3
Check Your Printout or USB Drive
1Look where you keep important papers for your device. If you printed the key when BitLocker started, the key ID and key sit on the same page.
2If you saved the key to a USB drive, plug it into the locked device and follow the on screen instructions.
3If you saved the key as a text file, open the file on a different device and read the 48 digits from there.
4Match the key ID in the file or printout to the ID on your recovery screen before you type anything.
Method 4
Enter the Recovery Key and Open Your Drive
1Type the 48 digits into the preboot recovery screen. Microsoft says to enter the key there if you have access to it.
2If a recovery key sits on a USB drive, plug it in when the screen asks for it.
3If you cannot type the key on that screen or cannot boot the device, Microsoft says you can connect the drive to another device as a secondary drive. See the Microsoft Learn BitLocker recovery process page.
4After you sign in, you can set a new PIN. Open the BitLocker Control Panel applet, expand the drive and select Change PIN. Then select Reset a forgotten PIN.
5Before the next firmware or hardware change, suspend BitLocker. Microsoft says suspending leaves the drive fully encrypted and reseals the key without asking for the recovery key. Read the Microsoft Learn BitLocker recovery overview for the full trigger list.
Method 5
What to Do When You Cannot Find the Key
1On a managed device, contact your IT department. They can read the key from Microsoft Entra ID or Active Directory.
2On a personal device, check every account you ever used on the PC. Another family member or an old Microsoft account can hold the key.
3If the key fails, Microsoft says you can use the BitLocker Repair tool to regain access to your drive.
4If you cannot find the key and cannot undo the change that locked the drive, Microsoft says you must reset the device with Windows recovery options. Resetting removes all of your files.
Your BitLocker recovery key is a 48 digit number. Check your Microsoft account at aka.ms/myrecoverykey and your work or school account at aka.ms/aadrecoverykey. Then check a printout and a USB drive and match the key ID. Resetting your device removes all of your files. Use it last.
Frequently asked questions
Where do I find my BitLocker recovery key?
Check your Microsoft account at aka.ms/myrecoverykey, your work or school account at aka.ms/aadrecoverykey, a printout or a USB drive. Match the key ID on the recovery screen to the right key.
How long is a BitLocker recovery key?
The recovery key is a 48 digit number. Microsoft describes it as the number that lets you regain access to an encrypted drive.
What is the BitLocker key ID?
The key ID is shown on the preboot recovery screen. Write down its first 8 digits so you can match it to the right key when you have more than one.
Why does my PC ask for a BitLocker recovery key?
Windows asks when BitLocker cannot open the drive by itself. Microsoft lists a wrong PIN, a BIOS or UEFI firmware upgrade, a cleared TPM, boot manager changes and moving the drive to a new computer.
Can Microsoft Support recover my lost key?
No. Microsoft says Support cannot retrieve, provide or recreate a lost key. You must find it in one of the saved locations.
Where is the key on a work or school laptop?
Go to aka.ms/aadrecoverykey, sign in, select Devices and then View BitLocker Keys. Your IT team can also read the key from Microsoft Entra ID or Active Directory.
What happens if I cannot find the key at all?
Microsoft says a personal device needs a reset through Windows recovery options when you cannot find the key or undo the change. Resetting removes all of your files.
How do I stop the recovery screen from coming back?
Microsoft says to suspend BitLocker before a known firmware or hardware change. Suspending reseals the key without asking for the recovery key. Protection resumes at the next restart.
