To recover a BitLocker partition, you need the correct recovery key or password, or you must use the BitLocker Repair Tool if the drive is corrupted but not encrypted. This guide explains every recovery path, from entering the 48-digit recovery key to repairing damaged metadata, and what to do when the key is lost.
What BitLocker Does to a Partition
BitLocker Drive Encryption, built into Windows Pro and Enterprise editions, encrypts the entire partition at the block level. When you enable BitLocker, Windows creates a new encrypted volume and, on system drives, adds an unencrypted System Reserved partition that holds the boot files. The encrypted partition appears as a single volume, but its file system is wrapped in an encryption layer. Recovery means either unlocking that layer with a key or repairing the layer itself if it is damaged.
BitLocker uses two main components: the encryption algorithm (AES with a 128-bit or 256-bit key) and a set of key protectors. A key protector is what grants access—typically a TPM (Trusted Platform Module) on modern hardware, a PIN, a password, or a recovery key. The recovery key is a 48-digit number, generated when BitLocker is enabled, and it is the universal fallback for unlocking the drive when other protectors fail.
How to Unlock a BitLocker Partition
If Windows boots normally but the drive is locked, you will see a BitLocker recovery screen. To unlock the partition:
- Write down or copy the 48-digit recovery key from wherever it was saved (Microsoft account, USB drive, file, or printed copy).
- On the recovery screen, select Enter the recovery key.
- Type the key using the on-screen keyboard or physical keyboard, then press Enter.
- If the key is correct, Windows will unlock the drive and continue booting or show the drive as accessible in File Explorer.
If you are already in Windows and a data drive is locked, open File Explorer, right-click the drive, and select Unlock Drive. You will be prompted for the password or recovery key. Once unlocked, the drive remains accessible until you restart or remove it.
When the Drive Is Corrupted: BitLocker Repair Tool
If the partition is corrupted—for example, after a failed update, power outage, or disk error—the drive may not unlock even with the correct key. In that case, use the BitLocker Repair Tool (repair-bde), a command-line utility available in Windows 10 and 11. It attempts to reconstruct the encrypted drive and copy the data to a new volume.
To use repair-bde, you need:
- The encrypted drive (source) and a destination drive with enough free space for the decrypted data.
- The recovery key or password for the source drive.
- Administrator privileges.
Open Command Prompt as administrator and run:
repair-bde <source> <destination> -rk <recoverykey.txt>
For example, if the locked drive is E: and the destination is F:, and the recovery key is saved as key.txt on a USB drive D:, the command is:
repair-bde E: F: -rk D: ecoverykey.txt
If you have a password instead of a key file, use -rp followed by the password. The tool will decrypt the source and write the data to the destination. Note that repair-bde does not repair the original drive; it copies data to a new volume. After the copy, you can format the original drive and restore the data.
How to Find Your BitLocker Recovery Key
Before attempting recovery, locate the recovery key. It is usually saved in one of these places:
- Microsoft account: Sign in to account.microsoft.com/devices/recoverykey and look for the device name.
- USB flash drive: If you saved the key to a USB drive when enabling BitLocker, plug it in and open the .txt file.
- File or printout: Some users save the key as a text file or print it. Check your documents or physical records.
- Active Directory: For domain-joined computers, the IT administrator may have stored the key in Active Directory.
If you cannot find the key, recovery is nearly impossible. BitLocker is designed so that without the key, the data is inaccessible. There is no backdoor. However, if the drive was encrypted with a TPM-only protector and the TPM is intact, Windows may unlock automatically at boot without prompting for a key.
Recovering a BitLocker Partition After Windows Reinstall
If you reinstall Windows on a system that had BitLocker enabled, the new installation may not recognize the old encrypted partition. To recover data from that partition, you need to boot into the new Windows and use the recovery key to unlock the old drive. If the old drive is connected as a secondary drive, it will appear as a locked volume. Right-click it and select Unlock Drive, then enter the recovery key. If the drive does not show up, check Disk Management to ensure it has a drive letter.
If the partition is missing entirely, use Disk Management to assign a drive letter to the volume. If the volume shows as RAW, do not format it—formatting destroys the encryption metadata. Instead, try the repair-bde tool with the recovery key.
Common Problems and Misconceptions
One common misconception is that BitLocker recovery requires the original password. In fact, the recovery key is the ultimate fallback and works even if the password is forgotten. Another is that formatting the drive will remove encryption—true, but it also deletes all data. Never format a locked drive unless you have a backup.
Another issue is the BitLocker Recovery screen appearing every boot. This usually happens when the TPM detects a change in the boot configuration, such as a BIOS update or a hardware change. If you have the recovery key, you can unlock once and then suspend BitLocker or back up the key again. If the problem persists, check for BIOS updates or reset the TPM (which will require the recovery key).
If the recovery key is incorrect, double-check that you are entering the correct 48-digit number. The key is grouped in eight blocks of six digits, and Windows accepts it with or without spaces. If you have multiple keys, try each one.
Alternatives to BitLocker Recovery
If BitLocker recovery fails and you have no backup, professional data recovery services may be able to help, but they cannot bypass encryption without the key. They can repair physical damage or clone the drive, but the encryption remains. The only alternative is to restore from a backup—which is why it is essential to back up the recovery key and your data.
For drives that are not system drives, you can also use third-party encryption tools, but they have their own recovery mechanisms. BitLocker is the standard for Windows, so the recovery process is well-documented and supported by Microsoft.
Frequently Asked Questions
Can I recover a BitLocker partition without the recovery key?
No. The recovery key is the only way to unlock a BitLocker drive when other protectors fail. Without it, the data is cryptographically inaccessible. If you have a TPM-only protector and the TPM is intact, the drive may unlock automatically, but that is not guaranteed.
What is the difference between recovery key and password?
The password is a user-created passphrase used to unlock the drive, while the recovery key is a 48-digit numerical code generated at encryption time. The recovery key is the fallback when the password is lost or the system changes.
Does repair-bde work on system drives?
Yes, but you must boot from another Windows installation or a recovery environment to run it, because the system drive is in use. You can run repair-bde from the Windows Recovery Environment or a separate Windows installation.
Will formatting the drive remove BitLocker?
Formatting a BitLocker drive removes the encryption and all data. If you want to remove BitLocker while keeping data, use Manage BitLocker and select Decrypt drive.
How do I avoid BitLocker recovery in the future?
Always back up the recovery key to multiple locations, such as your Microsoft account and a USB drive. Suspend BitLocker before making major hardware changes. Also, keep the TPM firmware up to date to avoid boot configuration changes.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.
More cards in this drawer
- Campus Tech Innovation Hubs: What They Are
- Poco C51 Airtel Prepaid Locked Variant India?
- Jenkins vs GitHub Actions: Which CI/CD Fits Your Team?
- Turn Off Backup Encryption in iTunes?
- Shared VPS Hosting: Is It Better?
- Disk Defrag Pro: What It Does and Whether You Need It