Finding Your BitLocker Recovery Key

If you’ve landed here, something has asked you for a BitLocker recovery key — a 48-digit number you’re fairly sure you’ve never seen in your life.

You’re not going mad, and you haven’t done anything wrong. Almost nobody sets this up deliberately. It gets switched on quietly, in the background, on a huge number of machines sold in the last few years.

Why You’ve Never Seen This Before

Modern Windows encrypts the drive by default on most new computers. During setup you’re steered fairly firmly towards signing in with a Microsoft account, and once you do, device encryption switches itself on and saves the recovery key to that account.

Nobody shows you the key. Nobody makes you write it down. So the first time most people learn their drive was encrypted at all is the day something goes wrong and a blue screen asks for the key — or the day they bring the machine to us and we tell them.

The good news: if a Microsoft account was signed in, the key is almost certainly sitting there waiting for you. You just have to go and look.

What You’re Looking For

A BitLocker recovery key is 48 digits, in eight groups of six, like this:

123456-234567-345678-456789-567890-678901-789012-890123

Two things worth knowing before you start:

• Digits only. No letters. If what you’re looking at has letters in it, it’s something else — a product key or an account recovery code.
• The short code is not the key. Microsoft shows a Key ID next to each key — a shorter jumble of letters and numbers. That’s a label, not the key. You need the long numeric one. Copying the Key ID by mistake is far and away the most common slip.

Where It Will Be

In rough order of likelihood:

1. Your Microsoft account. By far the most common. Any account that has ever signed in to that PC is worth checking.
2. A work or school account. If the computer was set up by an employer, a school or a university, the key goes to their system instead — and only their IT people can get it out.
3. Printed, or saved to a file or USB stick. If someone set BitLocker up deliberately, they were offered these options. Worth a look in the drawer, or for a file called something like BitLocker Recovery Key.txt.
4. Somebody else’s Microsoft account. If a family member, a mate, or the shop that sold you the machine set it up under their own login, the key is in their account, not yours. This one catches people out constantly.

Getting It From Your Microsoft Account

Do this on your phone, or any other computer — you don’t need the locked machine, which is just as well if it’s sitting on our bench.

1. Go to aka.ms/myrecoverykey — that’s Microsoft’s own address, and it opens in a new tab so you keep this page.
2. Sign in with your Microsoft account. That’s the email and password you use for Outlook, Xbox, Office or the Microsoft Store — whichever one was signed in on that computer.
3. You’re after a list headed BitLocker recovery keys, showing the device name, a Key ID, and the key itself. If that’s what you’re looking at, you’re in the right place. If you’ve ended up somewhere else, see the next section — it’s extremely common and it’s not you.
4. Find the right one, and copy the whole 48-digit key.

If You Land on the Wrong Page

This catches almost everybody, so don’t assume you’ve clicked something wrong. Signing in part-way through often drops you at the general Microsoft account page instead of the keys page — a dashboard, or a list of your devices, or a “welcome back” screen. It’s more likely if you were already signed in as a different account, or if Microsoft interrupted with a “verify it’s you” or “stay signed in?” step along the way.

The quickest fix: click the same link again. Now that you’re signed in, aka.ms/myrecoverykey usually goes straight to the keys. That one step solves it most of the time.

If it still won’t, you can walk there by hand from the account page:

1. Select Devices along the top.
2. Find the computer you’re after and select View details.
3. Select Manage recovery keys.

Microsoft moves this furniture around every so often, so treat those labels as a description rather than gospel. The shape of it is always the same: get to Devices, pick the machine, then look for whatever mentions recovery keys. If you’re staring at a list of your devices, you’re one or two clicks away — keep going rather than starting over.

And if you get thoroughly lost, ring us. Talking people through this screen is something we do most weeks.

If nothing is listed, don’t give up yet — sign out and try any other Microsoft account you’ve ever used. Old addresses, a partner’s account, the one you set up years ago and forgot about. It’s a very common outcome to find it on the third try.

For a work or school computer, the equivalent address is aka.ms/aadrecoverykey — though if the machine is properly managed by an employer, you’ll usually need to ask their IT department rather than getting it yourself.

If There’s More Than One Key Listed

Very common if you’ve owned a few machines, or if the drive has been re-encrypted at some point. This is what the Key ID is for.

The blue recovery screen on the locked computer shows a Key ID near the top. Match those first few characters against the ones in the list, and you’ve found the right key. If your machine is with us, we can read that ID off it and tell you what to look for — just ask.

If you genuinely can’t tell which is which, send us all of them. It costs us seconds to try each one, and it costs you another trip if we guess.

If It Isn’t Anywhere

This is the part we’d rather tell you straight than dress up.

If the key is genuinely lost, the data on that drive is gone. Not “difficult” — gone. That’s not a limitation of our workshop; it’s the entire point of encryption, and it’s true for everyone. Microsoft can’t recover it, we can’t recover it, and neither can anyone who tells you otherwise.

What we can still do is wipe the drive and set the machine up fresh, which gets you a working computer back even when the old contents aren’t coming with it. If any of it was ever backed up, synced to OneDrive, or copied to another device, that’s where we start looking instead. It’s worth reading what to back up before you bring it in once you’re out the other side of this — and if the files really matter, data recovery is a conversation worth having before anything else is tried.

Once You Have It

Save it somewhere that isn’t the computer it unlocks. A password manager, a note in your phone, or genuinely a bit of paper in a drawer — all fine. All better than where it is now, which is “somewhere in an account you’d forgotten about”.

And if one of our techs asked you to fetch it, there’s a form just below to send it straight through to the store holding your machine.

Encryption doing its job perfectly against its actual owner is, admittedly, a slightly annoying way to find out that it works.