BitLocker keys

Question

BitLocker keys

denmarfl 100

I recall when I Powered on my Dell Desktop purchased Sept 2025....during its 1st time startup...a window opened entitled BitLocker and suggested that number be saved...and prnted out should it be required in the future. I know I did both...but I guess I saved it so well...I cannot find it.

I signed into my Microsoft acct....BitLocker Recovery Keys. I saw many listing...and rightfully so since I have owned many Desktops and Laptops running Windows. My last 2 Laptops and my New Desktop...I did use the same Device Name...why...honestly I don't know...and, apparently its was OK to use the same Device name on several devices otherwise...Windows would have refused to allow me to use the same name advising it had already been used.So the Bitlocker page in my Microsoft acct shows this Device name 3 times...3 different KEY ID, 3 Different Recovery keys (which I assume is the actual 48 digit BitLocker key)....under the drive column...it shows on the 1st one...OSV, 2nd One FDV and 3rd one OSV. How can I determine which of these keys is the BitLocker key for my Desktop...and my 2 Laptops?

2 answers

Your answer

Answer 1

EmilyS726 210.5K Independent Advisor

Hello,

When you were prompted for bitlocker key, it would display you the bitlocker key ID it is seeking, so that you can use that key ID to identify which key to get when you log into your account.

I attach a screenshot of what it looks like

User's image

denmarfl 100 Reputation points

2026-03-01T19:43:31.46+00:00

Confused....are you writing that if for some reason my PC prompts me in order to get into my PC....this Bitlocker screen will appear and it will display the Bitlocker number to enter? If that is so, this Bitlocker key is definitely not a scurity tool...if anyone can see it...and enter it.

Perhaps I am just not understanding your reply. There must be away looking at my Microsoft acct...see the 3 entries with the Same Device Nmae....but different KEY ID, RECOVERY KEY....that I can determine thru some source....which of these 3 belongs to which of my current PC's
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T19:47:37.65+00:00

I am sorry I didn't explain it thoroughly.

That's the key ID, not the key itself.

You will use the first section of the key ID to identify which key it is looking for:
denmarfl 100 Reputation points

2026-03-01T20:13:47.73+00:00

When I went to my Microsoft acct....and saw all the Recovery keys List of my 3 PC's....I printed that page. So..how do I ...if I can...open the screen you have included in your reply that screen on each of my 3 PC's so I can see the key ID on each of my 3 PC's....and see the same KEY ID that i printed out from my Microsoft acct...and on the Printed sheet...mark each of my PC's assigned Bitlocker recovery key....Thanks for all your assistance, it is appreciated......
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T20:31:10.73+00:00
Sure thing.

Please type cmd in the search on the taskbar. Don't press enter key yet. Instead, choose "run as administrator" to launch Command Prompt.

Run this command:

manage-bde -protectors -get C:

Look for the Numberical password.
denmarfl 100 Reputation points

2026-03-01T21:42:01.68+00:00

And now I feel I may be becoming...a pest.

I knew I had saved the BitLocker Key when I started my Desktop up the very 1st Time and was given the option to SAVE IT, Print it. I thought I had printed it...but could not find it in any of my papers relating to the Desktop. But researching my Desktop I did find it...I had saved it as a file on my external drive.

This Printed file on my PC, the Identifier 1st 8 digit\alpha (Starts as 7Fxxxxxx ID is different from the Numerical Number that I see when I ran your command.... Starts 8Cxxxxxx...

In my Microsoft acct Online display list....I see both these 8 digit\alpha ID's\Numbers 7Fxxxxxx (shows Updated 9/23/2025) & 8Cxxxxxx (Shows Updated 12/14/2025)

When comparing the 48 Digit Recovery Keys...1) from the Saved file when I started my PC and saved it as a File...and, 2) the 48 Digit Key that displayed...running your command....both Recovery keys are recorded in my Microsoft Acct Online.... the 48 Digit Recovery keys are totally Different.

I can add ...I started up the Desktop in Sept 2025....so the Saved File I found was printed during the 1st time Power on.... In December 2025 I recall making some changes in my Microsoft acct, but for sure I don't recall why....

Did I truly mess up and now my Desktop somehow has 2 different BitLocker Recovery Keys?
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T21:54:13.6966667+00:00
Let's make sure you are looking at the right one, since the command can return quite a few strings. See example below (green boxes).

If it doesn't match, I suggest that you turn off bitlocker, then turn it back on so a new key is re-generate.

You can type cmd in the search on the taskbar, make sure you use "run as administrator" to launch Command Prompt, then run this command:

manage-bde -off C:

Let it run through. When it is done, the command prompt will return to the new row. Then you can run this command to verify status:

manage-bde -status

Then restart the computer, go to Control Panel > Bitlocker to turn it back on.
denmarfl 100 Reputation points

2026-03-01T22:35:12.8933333+00:00

yes...I was looking in the correct spot as you outlined in green, the code that displayed when I ran your Command...is recorded in my Microsoft OnLine acct

The Code I see on the Saved printout I saved when I started my PC for the 1st time....is different from that I see running your command.

You of course knew this, Bitlocker code is connected to a drive (I had thought it was a code just to unlock a PC..and nothing tied to Drive)

So I can complement this more....I of course have my C: loaded with Win11 from the factory, and....I installed a 2nd Internal drive that I used in my Old Win10 PC...I did not Re-Format this 2nd Internal drive....but it is now used to save Just data. I ran your command changing the drive to E: (2nd Internal Drive is e:) and the Numerical code displayed by the command is also in my Microsoft Online acct. The Updated date suggest it is not recorded there when I started my Win10 PC...because that was 12years ago....and the entry shows Updated 12/2025.

What I have learned from reading\Videos...the Codes are only stored at Microsoft for the PC Owners.....and, should Law Enforcement need it to get into a PC. Microsoft will release the BitLocker code to Law Enforcement if asked...whereas Apple...refuses to do so. I certainly have nothing on my PC to hide from Law Enforcement but there is that question of Privacy.

You can at Your Microsoft Online acct ...delete these recoded Bitlocker Codes and it has no effect what so ever on your PC's operation....it will run as usual. However...that Bitlocker Code still would be needed if for some reason your PC starts up asking for the Bitlocker 48 Digit code...so you would need to have it saved someplace safe and accessible.

That being written...in my Microsoft Online acct for some reasons....my desktop has 2...possibly 3 BitLocker Codes stored.... Should I ever find the need to enter the BitLocker Code to get into my PC....I guess I will need to try all 3 and and 1 will should work....

This interest in what is my BitLocker Code came about when a relative called and said their Win11 was displaying the Bitlocker key on a Power On requesting it be entered....and there was no SKIP...only thing was to enter the code to use their PC. I was not certain what to do, the relative did not have any documentation...they were an unskilled Microsoft\Desktop user...just turn it on and use it. Right or wrong...I saw no other choice than to tell them to use the Desktop Power Button...and instructed them to power off their PC. When they Powered it back on...the BitLocker screen did not appear and the PC Booted normally...guess we were just lucky...this time.

So in summary...for my desktop I have at least 3 Bitlocker codes saved in my Microsoft Online acct for My desktop...why is a mystery....and, I question if I should really keep the codes even Stored\saved with Microsoft....
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-01T22:47:39.4833333+00:00

I will do my best to answer these -

The same computer can have more than one bitlocker key, due to turning it off and on, each time it will generate a new one. This can be perhaps why your printed copy doesn't match up with what's shown in your account online now?

When your computer ever asks for bitlocker key, it will always give you the key ID, use the first few digits to help you determine which of the 3 is asking. You shouldn't have to enter all three to see which one works.

As for law enforcement and privacy, honestly that's way above my pay grade to know the answer. But yes, you are right, you can delete the key, and yet it doesn't mean bitlocker is disabled. So you'd better have it written down before you delete and save it somewhere safe.

And yes, bitlocker key is drive specific. If your external drive was taken from another computer - it is a matter of which account was used to enable bitlocker key on it then, it is not necessarily the current account for the computer it lives in now.

Regarding your relative's computer, if they cannot find the bitlocker key, a clean install is the only way to get the computer run again. There's no way to bypass bitlocker encryption. If it can be bypassed, one would ask "what's the point of bitlocker encryption then", right?
denmarfl 100 Reputation points

2026-03-02T04:43:09.5866667+00:00

Thanks for all your help....Understood...should that BitLocker ever display...the Key Code with is assigned to the Bitlocker 48 Digit code will appear...so you know which BitLocker Code in required.......

The relative's PC....ignored the BitLocker request....and not knowing why it displayed....I had them Power Off their PC by using the Power Button...and when they Powered it back up...the BitLocker screen did not display...it went right to the Desktop. Now that is strange....right? You gota wonder about Computers sometimes.....

Never knew what BitLocker was...and now I am a little smarter thanks to you
EmilyS726 210.5K Reputation points Independent Advisor

2026-03-02T13:24:21.6266667+00:00

You are welcome. Glad I can help answer your questions.

Regardin your relative's PC, bitlocker asks typically are triggered by certain events - such as hardware change, bios update, repeated entries of wrong pin/password, etc. If the computer is no longer asking for bitlocker, it is rare, but can be due to potential hardware change that might have recovered itself, such as a loose connection somewhere? I would strongly suggest that they disable bitlocker, and leave it disabled if they don't need it, or re-enable it and make sure to check that the key is saved in their Microsoft account in case it happens again.

Answer 2

On the BitLocker recovery page, each entry is tied to a specific encrypted volume and has:

A Key ID (used to match what the device shows on the recovery screen)
A Recovery key (the 48‑digit number you type in)
A Drive type column such as OSV or FDV

These abbreviations mean:

OSV = Operating System Volume (the Windows system drive on that device)
FDV = Fixed Data Volume (an internal data drive/partition that is not the OS drive)

To determine which key belongs to which physical device:

Use the recovery screen Key ID (most reliable)
- When a device asks for a BitLocker key, it shows a Recovery key ID (first 8 digits are highlighted in the documentation).
- On the BitLocker recovery page in the Microsoft account, find the entry whose Key ID starts with those same 8 digits.
- That entry’s 48‑digit Recovery key is the correct one for that specific volume on that specific device.
Use OSV/FDV to understand which drive on that device
- For each device name:
  - The entry with OSV is the system (C:) drive for that device.
  - Any entry with FDV is a secondary internal data drive/partition on that device.
When multiple devices share the same name
- The Microsoft account page cannot distinguish devices that share the same name except by Key ID.
- The only supported way to know which is which is:
  - Wait until a specific device shows the BitLocker recovery screen.
  - Note the Recovery key ID shown there.
  - Match that ID to the correct entry on the BitLocker recovery page.
If the key was printed or saved to file
- The BitLocker recovery screen can show hints about where the key was saved (for example, Microsoft account, printout, or text file), based on metadata stored when BitLocker was set up.
- If the hint says it is saved to the Microsoft account, use the Key ID matching method above.
If the key cannot be found
- If the correct recovery key cannot be located for a device and its drive is locked, the only supported option is to reset the device using Windows recovery options, which erases all files on that drive.

In summary: OSV/FDV tell which type of drive (system vs data), but the Recovery key ID shown on the device’s BitLocker screen is the only reliable way to map each entry in the Microsoft account to a specific desktop or laptop.

References:

Share via

BitLocker keys

2 answers

Your answer