BitLocker recovery key

Question

BitLocker recovery key

Clayton Rodgers 0

How do I find my BitLocker recovery key ID if my company did not enable it when setting it up?

0 comments

3 answers

Your answer

Answer 1

The BitLocker recovery key ID is only shown on the BitLocker recovery screen or wherever the recovery key was backed up. If the company did not enable BitLocker or did not escrow the key, there is no separate way to “generate” or “look up” a key ID.

To find the recovery key ID when BitLocker is already asking for it:

Start the device and wait for the blue BitLocker recovery screen.
On that screen, note the first 8 digits of the Recovery key ID shown. That is the key ID used to match against stored recovery keys.

To locate the corresponding recovery key (if it was backed up):

Check the Microsoft account that might have been used when BitLocker was turned on by going to https://aka.ms/myrecoverykey from another device and matching the key ID.
If the device was ever joined to a work or school account, sign in with that account at https://aka.ms/aadrecoverykey, go to Devices, select the device, and choose View BitLocker Keys, then match by key ID.
Check for a printed copy of the key or a USB flash drive where the key might have been saved as a text file.
If the device is managed by an organization, contact the IT department to see if they have the recovery key.

If the recovery key cannot be found in any of these locations and the changes that triggered recovery cannot be undone, the only remaining option is to reset the device using Windows recovery options, which removes all files.

References:

Answer 2

Hi Clayton Rodgers,

The recovery key ID is essentially a unique identifier that helps match your device to the correct recovery key. If your company did not enable automatic backup to Active Directory or Azure AD when BitLocker was set up, the key may not be stored centrally, which makes things more complicated.

Here’s what you can try: on the locked device, BitLocker will display a recovery screen with a long numeric identifier, this is the recovery key ID. You can use that ID to match against any recovery keys you may have saved manually (for example, printed copies, USB drives, or files saved during setup). If you have access to the device when it’s unlocked, you can also run manage-bde -protectors -get C: in an elevated Command Prompt to list the recovery key ID and any associated keys.

If your company didn’t configure AD or Azure AD backup, the only official sources are the ones chosen at setup: a Microsoft account, a printed copy, a saved file, or a USB drive. Without those, unfortunately, there isn’t a way to retroactively generate the recovery key. In that case, you’ll need to check with your IT administrator to confirm whether any recovery information was captured outside of AD.

I hope the response provided some helpful insight. If it clarified the issue for you, please consider marking it as Accept Answer so others with the same issue can find the solution. Feel free to leave a comment if you need further information.

Jason.

Hadeel Salha 0 Reputation points

2026-03-27T02:25:13.8+00:00

I want m'y recovery key
Mihaela-Dorica Stroia 0 Reputation points

2026-04-02T12:38:59.94+00:00

This is not normal, neither I nor anyone from my company activated Bitlocker. I don't have the Bitlocker key, looked for it in every account and now I am losing all my data because of a security service I didn't ask to use? This security "protection" helped me lose all my data and now Microsoft says there is no way to recover it??? Microsoft from bad to worse seems. I don't know how you do it, Microsoft, but give me the Bitlocker Key and stop activating services through updates.

Answer 3

Jason Nguyen Tran 25,690 Independent Advisor

Hi Clayton Rodgers,

I’m following up to check whether the issue has been resolved. Feel free to reply if you need further information. If the information provided was helpful, please click "Accept Answer" to help others in the community. Thank you!

0 comments