Edit

Share via

Get recovery key for Windows

  • Article

Applies to:

  • Windows 10
  • Windows 11
  • iOS/iPadOS
  • macOS

Access the BitLocker recovery key for a work or school device on the Intune Company Portal website or in the Intune Company Portal app. If you forget the sign-in password and get locked out of an Intune-enrolled PC, you can unlock it with a stored recovery key. This article describes how to retrieve the key from Company Portal.

Note

A BitLocker key is a 48-character long password divided into eight groups of 6 characters separated by dashes. Example: 123456-789012-345678-901234-567890-123456-789012-345678

Requirements

  • Enrolled, BitLocker-encrypted work or school device provided by your organization
  • Registered work or school account
  • Permission to view BitLocker recovery key
  • Supported devices
  • Supported version of Company Portal app

You can obtain the recovery key for a work or school device that's encrypted by your organization. Recovery keys aren't available for devices you personally encrypt.

Get recovery key from Company Portal website

Retrieve a personal BitLocker recovery key on the Company Portal website.

Example screenshot of the BitLocker Recovery Key page on the Intune Company Portal website.

  1. On any device, sign in to the Company Portal website.
  2. Go to Devices.
  3. Select the PC you're locked out of.
  4. Select Show recovery key.
  5. Your recovery key appears. For security reasons, the key disappears after five minutes. To see the key again, select Show recovery key.

If a key isn't found, but your device is properly encrypted, contact your IT support person for help. Check the Company Portal website for your organization's helpdesk details.

Get recovery key from Company Portal app

Retrieve a personal BitLocker recovery key in the Company Portal app. The recovery key must belong to a device that's enrolled in Microsoft Intune.

  1. Open the Intune Company Portal app. The following apps support recovery key retrieval:

    • Company Portal for iOS
    • Company Portal for macOS

  2. Go to Devices, and then select your Windows device.

  3. On the device details page, select Get recovery key. The Company Portal website opens in Safari and shows the key.

After 5 minutes of inactivity, Company Portal returns you to the Windows device details page in the web portal. You can view the key again from there.

IT pro support

If you're an IT support person and want to configure and manage encryption, see Manage policy for Windows devices with Microsoft Intune.