BitLocker and Recovery Key in Windows 10 and Windows 11

Question

Hi,

When I purchased the laptop, by default, its device encryption is enabled.
And its drive has lock symbol. It means laptop’s drive is encrypted with BitLocker.

I read and heard, decrypting encrypted drive is not recommended and decrypting process take a lot of time.

In any scenario, BitLocker recovery key can be required.
To find BitLocker recovery key, I found the link https://account.microsoft.com/devices/recoverykey.

Please let me know,

1. If no Microsoft account is linked, how to find BitLocker recovery key?
2. If more than one Microsoft account is linked, from which account recovery key can be found?
3. Initially the laptop was linked with a Microsoft account, then de-linked. In this scenario, how recovery key can be found?
4. If don’t know which Microsoft account was linked or because of any reason the Microsoft account is not accessible, how recovery key can be found?
5. By anyway, if recovery key can’t be found what can be done?
6. In the link https://account.microsoft.com/devices/recoverykey. I found two Recovery key with Key ID, Recovery Key, Drive and Key update date. Please let me know, which should I use, what about OSV and FDV in Drive?
7. Does Recovery key have any validity?
8. If it’s deleted from the link https://account.microsoft.com/devices/recoverykey, how much time it takes for next key?

I request, please resolve my all above queries.

With Regards
NndnG

Answer 1

Hi there,

If you are unable to locate a required BitLocker recovery key and are unable to revert a configuration change that might have caused it to be required, you'll need to reset your device using one of the Windows 10 recovery options. Resetting your device will remove all of your files.

Bitlocker passwords/encryption keys don't expire.

BitLocker recovery: known issues https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/ts-bitlocker-recovery-issues

I hope this information helps. If you have any questions please let me know and I will be glad to help you out.

--------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 2

@NndnG

This might be a bit lengthy, but I hope these are these are the answers you are looking for.

HOW TO LOCATE BITLOCKER KEY

CORPORATE OWNED DEVICES
AD Users and Computers
Need extra RSAT Module installed. This is under “optional features” in Windows 10 or 11 or “Feature Administration Tools” in Windows Server.
All you need to do is find the computer account in AD and double click it. If you’ve got that extra feature installed, you’ll have a “BitLocker Recovery” tab that will show you the key. You can also search for the key ID by right-clicking on the root of the domain and choosing “Find BitLocker recovery password.”

BOTH DEVICES
Go to https://myaccount.microsoft.com
Log in with work or school account
You should see heading for “Devices”. Click on “Manage Devices” link. If you can see your computer in the list of devices, click on it to expand it, and see if there’s a button to “View BitLocker Keys”. Click it, check the key ID her matches the ID displayed on your recovery screen, and click “Show recovery key.”

PERSONAL DEVICE
If you have a Microsoft account
Go to https://account.microsoft.com/devices
Sign in with your personal account. Click on the link for “Devices” and look for your computer in the list. You may have to expand it first. Click on the See Details link. You should see “BitLocker data Protection” section. Click “Manage recover keys”

To Back up BitLocker Recovery Key
From Start Menu type “Manage BitLocker”
Here there is an option to “Backup BitLocker”. There are options to save to USB, file, an account or print.

WHEN ALL ELSE FAILS
You can get your BitLocker key from an elevated Command Prompt.
Open a Command Prompt as Administrator.
Type: manage-bde -protectors -get c:
(c: is the letter for the drive you want the key for)
Look for the line that says:
Numerical Password: this is the ID that is shown on your BitLocker Recovery screen
Password: “this will be your 48 digit BitLocker key”
Write this key down do not store it on your computer because if you are locked out, you will not be able to retrieve it.

Answer 3

should I use, what about OSV and FDV

OSV is for primary drive, FDV is for secondary.

If it’s deleted from the link how much time it takes for next key?

Nothing until you back it up again.

When I purchased the laptop, by default, its device encryption is enabled

Maybe the seller but I wouldn't hold much hope for this.

Also check in Azure AD\Devices for keys in case you have linked a work / school account.
https://support.microsoft.com/en-us/windows/finding-your-bitlocker-recovery-key-in-windows-6b71ad27-0b89-ea08-f143-056f5ab347d6

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

@Limitless Technology @Dave Patrick and @Tricia-1966

I am thankful to all who responded my question. And I sorry for replying back late.

I have another computer also and I checked Recovery key for both computers at https://account.microsoft.com/devices/recoverykey.

Both computers have two volumes. For one computer, I see two Key ID and Recovery Key

And for another computer I three Key ID and Recovery Key. I couldn’t understand. Why?

With Regards
NndnG