A BitLocker recovery key is a unique 48-digit key used to unlock an encrypted drive. Windows can ask for it after a restart if it detects a possible unauthorized access attempt, or after hardware, firmware, or software changes.
For a work or school device, the recovery key is typically backed up and managed by the organization’s IT department. If the key is not shown in the account, use one of these supported paths:
- Check the My Account portal from another device:
- Go to the Devices page.
- Select the locked device.
- Select View BitLocker Keys.
- If the device is Intune-enrolled, check Company Portal:
- Sign in to the Company Portal website.
- Go to Devices.
- Select the locked PC.
- Select Get recovery key.
- Select Show recovery key.
- The key is shown for five minutes.
- If no key is found there, contact the organization’s IT support. For organization-managed devices, the recovery key might be held by the organization.
Important facts:
- Microsoft Support can’t retrieve, provide, or recreate a lost BitLocker recovery key.
- Recovery keys in Company Portal are available only for work or school devices encrypted by the organization, not for devices personally encrypted.
- If the device is properly encrypted but no key is found in Company Portal, the documented next step is to contact IT support.