iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If Windows asks for a Microsoft recovery key, it usually means it needs the BitLocker recovery key to unlock an encrypted drive. This is a 48-digit number—not a Windows product activation key. Note the recovery-key ID shown on screen, then use that ID to find the matching key in the account or backup where it was saved.
What is a Microsoft recovery key?
A BitLocker recovery key is a 48-digit number that can unlock an encrypted drive when Windows cannot unlock it automatically. The recovery-key ID displayed with the prompt helps you identify which saved key is the right one. It is separate from a Windows product key, which is used for Windows activation.
Microsoft explains that hardware, firmware, or software changes can trigger the prompt: BitLocker may treat changes that are legitimate to the device owner as a possible security risk. The request does not by itself prove that someone tried to access your computer. Microsoft’s recovery-key guidance covers Windows 10 and Windows 11.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Where to look for the matching key
Start by writing down the recovery-key ID from the locked PC. From another device, check the likely storage locations below and match the ID before using a key.
#1 Best Overall
- Compact plug-and-stay design to instantly add storage to your laptop, game console, in-car audio, and more
- Save time with ultra-fast transfer speeds up to 400MB/s (Based on read speed. 1 MB/s = 1 million bytes per second. Based on internal testing; performance may vary depending upon host device, usage conditions, drive capacity, and other factors. USB 3.0 port required.)
- Transfer a full-length movie to the drive in less than 30 seconds (Based on 1.2GB MPEG-4 video transfer with USB 3.2 Gen 1 or USB 3.0 host device.)
- Get space for your high-resolution photos, videos, and more at a great value with up to 256GB of storage (1GB=1,000,000,000 bytes. Actual user storage less.)
- Password-protect files using a downloadable software (Password protection uses 128-bit AES encryption and is supported by Windows 10+ and macOS v10.9+ (Software download required, see Password Protection page on SanDisk site).)
| Where to check | When it may apply | What to do |
|---|---|---|
| Personal Microsoft account | The key was backed up to the account used on the PC. | Visit aka.ms/myrecoverykey, sign in, and find the entry with the matching key ID. If someone else set up the PC, check whether the key is in that person’s account. |
| Work or school account or IT department | The PC is managed by an organization. | Try aka.ms/aadrecoverykey, or contact the organization’s IT support. Access may depend on its policies. |
| Printed copy | The key was printed when BitLocker was set up or backed up. | Check securely stored papers and compare the ID with the prompt. |
| USB flash drive | The key was saved to removable storage. | Follow Windows’ instructions for using the drive, or open the saved text file on another device and match the ID. |
| File or cloud copy | The key was saved to an unencrypted location, or copied to a protected cloud location. | Check the location used when the key was backed up. The BitLocker-protected drive cannot be the only place its own key file is stored. |
What to do if Windows is asking for the key
- Record the recovery-key ID. Copy it carefully from the recovery screen so you can distinguish the correct key from other saved keys.
- Check the likely personal account. On another device, sign in at aka.ms/myrecoverykey and compare the listed ID with the one on screen.
- Contact your organization if the PC is managed. Try aka.ms/aadrecoverykey or ask the work or school IT department to check its recovery-key records.
- Check other setup and backup locations. If someone else configured the device, ask them to check their account. Look for a printed copy, USB drive, or saved file.
- Use the matching 48-digit key when prompted. Do not guess or substitute a different key; the ID is there to help identify the correct one.
Can Microsoft recover a lost BitLocker key?
No. Microsoft Support says, “Microsoft Support doesn’t have the ability to retrieve, provide, or recreate a lost BitLocker recovery key.” If the key is not in an account, held by your organization, or available in a backup, Support cannot generate a replacement.
If you cannot find the key, avoid resetting Windows until you have considered the data-loss consequences. If the change that triggered the prompt can be safely undone, reversing it may help Windows unlock the drive automatically; otherwise, Windows recovery or reset may be necessary, and resetting removes files. Microsoft advises backing up important files before recovery actions that may remove data. With encryption enabled, most options in the Windows Recovery Environment require the BitLocker key. See Microsoft’s Windows recovery options.
How to back up a recovery key before you need it
Backing up an existing key is different from recovering one that is already lost. Microsoft documents saving a BitLocker recovery key to a Microsoft account, a USB flash drive, a text file, or a printout. It also describes saving the file to an unencrypted location and copying it to OneDrive Personal Vault. The backup must remain accessible if the encrypted PC is locked.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchRank #2
- Not for Microsoft accounts (e.g., @outlook.com logins)
- ✅ Compatible with most PCs, laptops, and desktops
- ✅ Finish in 10 minutes or less for most systems
- ✅ Step-by-step PDF instructions included
- ✅ Supports Windows 7, 8, 10, and some 11 systems (local accounts only)
- Keep offline copies separate from the PC. Store a USB drive or printout away from the computer. Anyone with both the locked device and its key could bypass the protection.
- Choose a location the locked PC cannot block. Do not make the encrypted drive itself the only home for its key file.
- Protect the copy. A recovery key can unlock the drive, so limit access to the account, paper, or removable storage that holds it.
A USB drive is simply a place to store a key you already have; it cannot generate a missing key or decrypt a drive by itself. Microsoft notes that the key file is only a few kilobytes, so the drive does not need to be large. For setup details, see Microsoft’s guide to backing up a BitLocker recovery key.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the Windows 11 recovery screen can tell you
Starting with Windows 11, version 24H2, Microsoft says the recovery screen shows a hint of the Microsoft account associated with the key. The hint may help you identify which account to check; it does not display or replace the recovery key.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
