Your BitLocker recovery key is stored in your Microsoft account, printed on paper during setup, or saved to a USB drive — the location depends on how you turned on BitLocker

If you cannot remember your PIN or password, Windows will ask for your recovery key before you can access your drive. The key is a 48-character code that looks like this: 111111-222222-333333-444444-555555-666666-777777-888888. You do not need to type the dashes — Windows accepts the numbers alone.

The fastest way to find it depends on whether you set up BitLocker yourself or inherited it from a previous owner or your workplace. If you turned it on, check your Microsoft account first. If your organization turned it on, contact your IT department — they hold a copy of every key.

Key Takeaways

  • Your recovery key is stored in your Microsoft account if you turned on BitLocker while signed in to Windows with a Microsoft account.
  • If you set up BitLocker with a local account, the key was printed to paper or saved to a USB drive during setup — check those locations first.
  • Your IT department or help desk has a copy of your recovery key if your workplace turned on BitLocker for you.
  • You can view your key only from a device that is not locked, or from another device using your Microsoft account.

Finding your key in your Microsoft account

If you turned on BitLocker while signed in with a Microsoft account, Windows automatically saved your recovery key to that account. You can view it from any device with internet access — you do not need the locked computer.

Go to account.microsoft.com and sign in with the same Microsoft account you use on the locked computer. Select Devices in the left menu, then click the name of the locked device. Look for a section called BitLocker or Recovery. Your 48-character key will appear there. Write it down or take a screenshot before you leave the page.

If you do not see a BitLocker section, either you set up BitLocker with a local account instead of a Microsoft account, or you turned on BitLocker before signing in to a Microsoft account. Move to the next section.

Checking for a printed recovery key or USB drive

During BitLocker setup, Windows offers to print your recovery key or save it to a USB drive. If you chose either option, look for that physical copy now. The printed key is usually on a single sheet of paper with the Windows logo and the 48-character code clearly visible. A USB copy is a text file named something like BitLocker Recovery Key.txt.

Check your desk, filing cabinet, or the drawer where you keep important documents. If you saved it to a USB drive, plug that drive into any computer and open the file. The key inside is the same one you need to unlock your locked device.

If you cannot find either a printed copy or the USB drive, and your Microsoft account does not have the key, contact your IT department if this is a work computer. If it is your personal computer and you set it up yourself, you may need to reset Windows using another method.

Getting your key from your workplace IT department

If your organization turned on BitLocker for you, your IT department or help desk has a master copy of your recovery key. Call or email them and explain that you need your BitLocker recovery key. They will verify your identity and provide the key — this usually takes a few minutes to a few hours depending on their process.

Have your device name and employee ID ready when you contact them. Some organizations require you to visit in person or use a secure portal to retrieve it. Ask whether they can send it to you by email or text, or whether you need to pick it up.

Using your recovery key to unlock your device

Once you have your 48-character key, restart your locked computer. Windows will show a screen asking for your PIN, password, or recovery key. Select Enter recovery key or I forgot my PIN, depending on what the screen says.

Type or paste the 48 numbers from your recovery key. You can include the dashes or leave them out — Windows accepts both formats. Press Enter. Windows will unlock your drive and let you sign in again.

After you regain access, change your PIN or password to something you will remember. If you are worried about forgetting it again, write the new PIN down and store it somewhere safe, or use Windows Hello with your fingerprint or face instead.

What to do if you cannot find your recovery key anywhere

If your Microsoft account does not have the key, you did not print or save it during setup, and your IT department cannot locate it, you have limited options. BitLocker is designed to prevent anyone — including you — from accessing an encrypted drive without the recovery key.

Contact Microsoft Support through your Microsoft account. Explain that you have lost access to your device and cannot find your recovery key. They may be able to help you prove ownership and reset your device, though this process can take several days and may result in losing your files.

For work devices, your IT department may have additional recovery methods or be able to reset the device remotely. Do not attempt to remove the hard drive or use third-party tools — these will not bypass BitLocker and may damage your data further.

Preventing this problem in the future

Once you regain access to your device, take steps to avoid this situation again. Store your recovery key in at least two places: your Microsoft account (which you already have) and a physical location like a safe or locked drawer. Do not store it only on the encrypted drive itself — you cannot access that drive without the key.

If you use a PIN or password to unlock BitLocker, write it down separately from the recovery key and store both in a safe place. Consider using Windows Hello with your fingerprint or face as your primary unlock method — these are harder to forget than a PIN.

Frequently Asked Questions

Can someone else use my recovery key to unlock my device?

Yes. Your recovery key is equivalent to your password — anyone who has it can unlock your drive. Store it in a safe place, just like you would store a password. Do not email it to yourself or leave it in an unsecured location.

What if I have multiple devices with BitLocker turned on?

Each device has its own unique recovery key. When you sign in to your Microsoft account, you will see a list of all your devices. Click each one to view its individual recovery key. Write down which key belongs to which device so you do not mix them up.

Can I change my recovery key to something easier to remember?

No. Recovery keys are generated by Windows and cannot be changed or customized. They are 48 random characters specifically to make them impossible to guess. You can only store the key you have in a safe place and refer to it when you need it.

Do I need my recovery key every time I turn on my computer?

No. You only need the recovery key if you forget your PIN or password, or if Windows detects a change to your hardware. Under normal circumstances, you sign in with your PIN or password and never see the recovery key again.

What happens if I lose my recovery key and forget my PIN?

You will not be able to access your device without one or the other. Contact Microsoft Support or your IT department immediately. They may be able to help you prove ownership and regain access, but the process can be lengthy and may result in data loss.