bitlocker problem

Question

How can BitLocker recovery keys persist in my Microsoft account after BitLocker has been disabled on the device?

Answer 1

Dear Lee Jin, 

Thank you for your question and for sharing the details into Microsoft Q&A Forum. 

Seeing multiple BitLocker recovery keys in your Microsoft account can happen if BitLocker/Device Encryption was enabled and disabled multiple times after certain changes or because each encrypted volume (C:, D:, external/USB, etc) has its own recovery key, turning BitLocker off for one volume doesn’t automatically turn it off for others. If you plan to clean up old keys, please proceed carefully, especially because each encrypted volume has its own key. Before proposing any steps, please first review the Independent Advisor’s reply you referenced, it’s accurate and worth following. Additionally, the steps below may help. 

1. Verify which volumes are still encrypted 

Windows 11 Home: Settings > Privacy & security > Device encryption or 

• Run manage-bde -status in Command Prompt to see per‑volume status. 

2. Match the correct key 

On any BitLocker prompt, note the Recovery Key ID (first 8 digits) and match it with the entry on your Microsoft account’s keys page. 

3. Delete only keys you no longer need 

• Go to your BitLocker recovery keys page > ⋯ (More options) > Delete. This removes the online backup only (it doesn’t decrypt a drive). 

4. Keep a safe backup before deleting 

• I recommend maintaining an offline copy (USB/print/file) of any recovery key you might need later.

For more information, please visit: BitLocker recovery overview and BitLocker recovery process

I hope this helps you manage your BitLocker keys carefully, avoid accidental deletion, and maintain a streamlined, secure setup for your Windows 11 device. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

 

Answer 2

When you disable Bitlocker Drive encryption on your PC, the associated Bitlocker key is not automatically removed from your account online.

If you do not want the Bitlocker key to appear on your account online, select it. click the 3 dots beside the key and click Delete.

As a precaution, it would be best to note down the Bitlocker Recovery Key and keep it safe somewhere, in case it is required in the future.