Bitlocker key ghosting me

Question

Good morning everyone and thanks for the help in advance.

I'm writing you today because of an ugly issue with BitLocker. (on windows 11)

A couple of years ago I have got my computer, a Lenovo laptop, reset by their official customer service in Spain (where I was living) and when they returned it to me it had a local account only, named LENOVO. I've kept on using that account since then, without logging in with any Microsoft account because I have to admit liking that "password free" life, and my data are very important, but privacy is not a problem for me since my computer remains home.

I've now decided to upgrade a little, so I’ve changed the internal SSD with a bigger one (its perfect compatibility was certified by the vendor), I’ve installed windows back. Everything was perfect till I’ve tried connecting my old SSD externally with an SSD USB case. When I did it, my computer asked me for a BitLocker key, even I’ve never requested any encryption.

Since I don't have this key, I’ve tried mounting the old SSD back into my laptop, assuming that being in its original place with no hardware changes it will work back without problems. For my surprise, when I booted the laptop, it still asked me that BitLocker key, with no way out.

Now, I'm sure that I didn't use any Microsoft account as Windows user after the customer service restored my laptop and I'm pretty sure the only Windows user in it was that local one named LENOVO.

I've checked online and I’ve found out that, since my computer at boot says: to find your key "try your work or school account" it means that the BitLocker key is stored in an institutional account (school, university, corporations, or ...)

I've started thinking and I could come up with two possibilities (or maybe you can point out more).

1 the Lenovo customer service, despite of creating a local account for the laptop, in some ways registered the BitLocker key under some institutional account of their own (theoretically possible?)

2 after I got my computer back, when I’ve logged in Microsoft Office using my university account, windows automatically transferred the BitLocker key in that account.

Since I'm having problems contacting Lenovo customer service (maybe you can give me some advice about how to do that too?), I'm trying to check on my university account.

The problem is that even though I could successfully login in office apps, if I try to check the page "aka.ms/aadrecoverykey", after inserting email and password (which are correct, since I could login with office apps), it asks me a 2-step verification, sending an SMS to my old Spanish phone number which I do not possess anymore.

So, I'm stuck, unable to access my data (all my recent research and job documents are in that SSD).

Please, help.

Answer 1

Device encryption can be enabled, yes. Like I said check the new SSD to see if it has enabled encryption when you carried out the installation. If you didn't use an online account for that then it proves it will enable encryption with or without an online account.

So far as finding the key on the account. If you are unable to access the account then you need to contact Microsoft support directly (if it is a personal account) or the university. When you try to access sensitive information you are required to confirm who you are.

Use the Get Help app in windows or Contact Us - Microsoft Support and enter Chat with an agent then Contact Support.

Answer 2

I would still check your new SSD installation to see if the C: drive is encrypted. It should show you in Disk Management and if you go to Control Panel you will see Device Encryption. From there you have the option to save the recovery key.

Answer 3

Yesterday I've wrote to the university and today they replied me and their IT could change my phone number in the Microsoft account. So I could login and my BitLocker Key was actually there waiting for me... luckily!

I still have to say that I don't like that this Encryption is automatic and I like even less that just because i logged in Office apps, Windows takes the freedom to save such a vital data (bitlocker key) in that account without even asking me... I would have never have used that account for anything else but Office... instead it became a life or death account behind my back.

Anyway, thank you neilpzz for your answers! Luckily today we had a happy ending.

Answer 4

In Windows 11 Home edition Device encryption can be enabled during installation (automatically) which uses the same encryption as BitLocker, hence the request for a BitLocker recovery key.

Your new drive may be the same. Using the new drive check Turn on device encryption - Microsoft Support for Settings to see if it is On or Off.

Without the correct recovery key for your old drive you cannot access the drive.

Does it mean that it may actually have been enabled without any Microsoft account linked to it? if so, then bitlocker is on but the key isn't available anywhere? i hope it's just a nightmare

any suggestion about how to get access to that account to check if the key is there?

Answer 5

In Windows 11 Home edition Device encryption can be enabled during installation (automatically) which uses the same encryption as BitLocker, hence the request for a BitLocker recovery key.

Your new drive may be the same. Using the new drive check Turn on device encryption - Microsoft Support for Settings to see if it is On or Off.

Without the correct recovery key for your old drive you cannot access the drive.