- Software and digital services
- Operating system
BitLocker recovery
Windows BitLocker recovery on PC: 48-digit key required
Risk level
High
Professional inspection is recommended.
Urgency
High
Quick answer
BitLocker is asking for your 48-digit recovery key because it could not automatically unlock your encrypted drive at startup. Note the first 8 digits of the recovery key ID and look up your key in your Microsoft account, work or school account, printout, or USB flash drive.
Safety first
Stop and check this first
- Nobody can or should bypass BitLocker or disable TPM or Secure Boot to avoid this prompt; a visiting technician must never ask you to send your 48-digit key in a plain chat message nor store it, and resetting Windows without the key removes all of your files.
Safe checks you can perform
- Write down the first 8 digits of the recovery key ID
- Look up the key in your Microsoft or work or school account
- Check your printed copy or saved USB flash drive
- Undo recent docking, peripheral, or boot order changes
Leave these tasks to a qualified professional
- Do not attempt this professional task: Retrieve recovery information through your organization's IT admin
- Do not attempt this professional task: Suspend BitLocker before planned work or run an official Windows reset
What a technician must be able to justify
Technician visit
These are the steps they must carry out and show you. Tick them as they work: if steps are skipped, do not accept a part swap.
These are not instructions for opening or handling the equipment yourself. They are the checks that should support a technical conclusion.
Retrieve recovery information through your organization's IT admin
What they doFor devices joined to Microsoft Entra ID or Active Directory, IT support retrieves the 48-digit password from the Microsoft Entra admin center, Microsoft Intune admin center, or ms-FVE-RecoveryInformation objects in AD DS, or unlocks the drive with a Data Recovery Agent (DRA) certificate.
They must show youthat the 8-digit key ID or recovery GUID matches your screen, without asking you to send the 48-digit key in a plain chat message or storing it outside official directory services.
In writingthe root cause that triggered recovery mode and whether the recovery password was rotated or backed up.
Suspend BitLocker before planned work or run an official Windows reset
What they doBefore any planned BIOS, UEFI firmware, or motherboard upgrade, a technician should temporarily suspend BitLocker protection via PowerShell or manage-bde.exe and resume it afterwards; if a key is permanently lost and changes cannot be undone, the only official option is a Windows recovery reset.
They must show youthe BitLocker protection state before and after planned maintenance, or the official Windows recovery reset screen before proceeding.
In writingconfirmation that BitLocker was suspended and resumed for the upgrade, or your signed approval acknowledging that resetting the device removes all files.
Before accepting a part or repair
Nothing has been shown yet. Do not accept a part swap based on the code alone.
Follow these steps
Note: Follow the documented order. An error code identifies the affected system, but it does not prove by itself which part has failed.
Write down the first 8 digits of the recovery key ID
- Who:
- you at the locked screen.
- How:
- note the first 8 digits of the recovery key ID displayed on the screen; on Windows 11 version 24H2 also check the on-screen hint showing the associated Microsoft account.
- Result that matters:
- knowing which 48-digit recovery key matches the locked volume when you have more than one.
- If the prompt is shown by Windows RE and you need accessibility tools:
- press WIN + CTRL + Enter for Narrator or tap a text input box for the on-screen keyboard.
- If someone else set up the PC or turned on encryption:
- remember the key might live in that person's Microsoft account.
- Evidence to keep:
- photo of the 8-digit key ID and any account hint on screen.
Evidence: Find your BitLocker recovery key · BitLocker recovery overview
Look up the key in your Microsoft or work or school account
- Who:
- you from another phone or computer.
- How:
- open a web browser on another device and visit https://aka.ms/myrecoverykey for your Microsoft account, or https://aka.ms/aadrecoverykey under Devices, View BitLocker Keys for a work or school account.
- Result that matters:
- finding the 48-digit recovery password paired with the 8-digit key ID.
- If you find the matching key ID:
- type the 48-digit number into the recovery screen to unlock the drive.
- If an organization manages the PC and you cannot see the key directly:
- contact that organization's IT support.
- Evidence to keep:
- note of which official account held the matching key ID, without sending the key over chat.
Evidence: Find your BitLocker recovery key
Check your printed copy or saved USB flash drive
- Who:
- you with your saved device papers.
- How:
- look where you keep important papers for a printout made when BitLocker was activated, or plug in your saved USB flash drive; if the key was saved as a text file on the USB drive, read that text file on another computer.
- Result that matters:
- retrieving the offline 48-digit number or the .bek key file on removable media.
- If you locate the printout or USB file:
- enter the 48 digits or follow the on-screen instructions after plugging in the flash drive.
- If you cannot find the key anywhere and cannot undo the change that triggered recovery:
- you must reset the device using Windows recovery options, which removes all of your files.
- Evidence to keep:
- checklist of offline locations verified before considering a full reset.
Evidence: Find your BitLocker recovery key · BitLocker recovery overview
Undo recent docking, peripheral, or boot order changes
- Who:
- you with the computer powered off.
- How:
- if the prompt appeared right after attaching a docking station, external graphics card, or moving a CD or DVD drive ahead of the hard drive in BIOS, undo that change and restart.
- Result that matters:
- seeing whether the TPM validates the original startup state without requiring the recovery password.
- If Windows boots normally after undoing the change:
- back up your BitLocker recovery key immediately while signed in.
- If the recovery screen still appears:
- never disable the TPM or Secure Boot to dodge the prompt, use your official recovery key.
- Evidence to keep:
- note of which peripheral or boot order setting was reverted.
Evidence: Find your BitLocker recovery key · BitLocker recovery overview · Device Encryption in Windows
Still not solved
If the error persists, stop here. See what the technician must do and show you.
Where this code applies
A code is meaningful only inside the right product and version context.
Primary scope
- System
- Software and digital services
- Brand
- Microsoft Windows
- Product type
- Operating system
Known code variants
- 48-digit BitLocker recovery key
- BitLocker recovery key
- BitLocker recovery mode
- BitLocker recovery screen
- clave de recuperación de 48 dígitos
- Enter the recovery key for this drive
- Escribir la clave de recuperación de BitLocker
- pantalla de recuperación de BitLocker
- Recuperación de BitLocker
What it means
Microsoft explains that the BitLocker recovery screen appears when Windows 10 or Windows 11 cannot unlock an encrypted drive automatically due to a hardware change, BIOS or UEFI firmware upgrade, docking or undocking a laptop, entering the wrong PIN too many times, or changes to the TPM or boot order. Nobody can or should bypass this lock: even Microsoft Support cannot retrieve, provide, or recreate a lost key. Seeing this prompt by itself never proves your drive or motherboard is faulty; it strictly requires supplying your own recovery key through official channels.
Warnings and stop conditions
- Highsource verified
Nobody can or should bypass BitLocker or disable TPM or Secure Boot to avoid this prompt; a visiting technician must never ask you to send your 48-digit key in a plain chat message nor store it, and resetting Windows without the key removes all of your files.
Evidence: Find your BitLocker recovery key · BitLocker recovery overview · Device Encryption in Windows
Symptoms and causes
Probable causes · in order
- BIOS or UEFI upgrade, docking, or boot order changeCommon
Microsoft lists BIOS or UEFI firmware upgrades, docking or undocking a portable computer, placing a CD or DVD drive before the hard drive, or PCR7 binding changes as common recovery triggers.
Evidence: BitLocker recovery overview · Device Encryption in Windows
- Too many wrong PIN attempts or TPM state changesPossible
Entering an incorrect PIN too many times, exceeding failed sign-in thresholds, or turning off, disabling, deactivating, or clearing the TPM forces BitLocker to ask for the 48-digit password.
Evidence: BitLocker recovery overview
- Manual Windows RE startup or modified recovery environmentPossible
When Startup Repair cannot run automatically after two boot failures and Windows RE is booted manually from a repair disk or with the TPM disabled, drives stay locked until the key is entered.
Evidence: BitLocker recovery overview
Virtual technician
Does BitLocker recovery still appear after these checks?
Answer a few questions to narrow down the likely cause and the safest next action. Guidance only - it never replaces a professional.
Sources and technical references
- 1
Find your BitLocker recovery key
Microsoft · 2026 · official_doc
- 2
Buscar la clave de recuperación de BitLocker
Microsoft · 2026 · official_doc
- 3
Microsoft · 2026 · official_doc
- 4
Introducción a la recuperación de BitLocker
Microsoft · 2026 · official_doc
- 5
Microsoft · 2026 · official_doc
- 6
Cifrado del dispositivo en Windows
Microsoft · 2026 · official_doc
Was this entry useful?