How to Fix Windows Asking for BitLocker Key to Sign-in?

Typically, Windows will request the BitLocker key when it notices unauthorized access or after you make certain changes in the hardware and software of the system, but recently users have reported that Windows is asking to provide the key every time they attempt to sign into Windows. This key consists of 48-digit numbers.

If Windows is requesting you To provide the BitLocker key,  here are a few reasons as to how BitLocker might be Automatically enabled on your system:

  • Your device meets the requirements of device encryption by the system automatically enabling BitLocker.  when this happens, Windows automatically save you or elsewhere that they may have saved it in, such as the Notepadrecovery key in your Microsoft account.
  • You are using a shared computer,  the owner or administrator who has enabled device encryption for BitLocker.  if this scenario is applicable,  you can either find the key in the Microsoft account of the administrator or find it in an app they might have saved it in, such as Notepad.
  • If you are using the computer provided by your organization or your school,  then they may have enabled the device encryption. You can ask the organization for the respective key.

1. Look For Your BitLocker Key

The first troubleshooting method we recommend is looking for your BitLocker key.  as we mentioned earlier it can be located in different areas depending upon the situation. 

Here are some of the familiar places you can try finding your BitLocker key in:

  • Your Microsoft Account – If you are not using a shared computer or your computer is not owned by any organization,  then the best way to resolve the issue is to look for a better locket key in your Microsoft account.  You might be facing the issue because your device meets the device encryption requirements by Windows. Use this link to look for the recovery key.
  • If you activated BitLocker yourself, you might have saved the key on your notepad, your phone, and a USB flash drive in the form of a text file.  if you saved it in a USB device,  then plug the USB into your computer to allow the computer to read the text file.
  • If you’re using a  shared computer or a device provided by your organization,  then approach the administrator and ask them to provide you with the BitLocker recovery key. Once they do that, You can save the key somewhere safe or disable device encryption by following the steps mentioned later in this guide. 

2. Disable BitLocker (If You Can Log Into Windows)

If you can sign into Windows without any problems,  then the best way to stop Windows from asking you for a BitLocker recovery key every time you try to log in is by disabling the BitLocker using the Control Panel. 

This method works for both Windows 10 and Windows 11 users:

  1. Press Win + I keys together to open Settings.
  2. Choose Privacy & security from the left pane.
  3. Move to the right side of the window, head over to the Security section.
  4. Choose Device Encryption.

    Access the device encryption of Windows
  5. Disable the toggle for Device encryption.
  6. Click Yes in the User Account Control prompt.
  7. In the following window, click on the Bitlocker drive encryption option.

    Disable Device Encryption
  8. Disable it as well. 

3. Unlock the Drive in WinRE Environment

In case you cannot use the BitLocker recovery key by following the steps mentioned above,  you can also unlock the targeted drive in the recovery environment of Windows.

We will be booting in Windows using the Windows installation media in this method.  Follow the steps mentioned below to proceed:

  1. Boot Windows using the installation media, whether in DVD or USB form.
  2. In the following window,  click on Next.

    Click on the Next button
  3. Now, choose Repair your computer.

    Choose to repair your computer
  4. When asked for a recovery key, click on Skip this Drive.
  5. Next, choose Troubleshoot > Advanced options.
  6. Click on Command Prompt from the list of options available.

    Access Command Prompt in the Advanced options
  7. In the command prompt window,  execute the following command. This command will list all the drives with their BitLocker status.

    manage-bde -status 
    Execute the entered command
  8. Once you have identified the drive letter of the encrypted drive,  execute the command mentioned below.  make sure you replace ‘Drive letter’ and ‘Recovery key’ with their respective counterparts.

    manage-bde –unlock drive-letter: -rp 48-digit-numerical-recovery-key
  9. Once this command is executed execute the following command to ensure that the encryption status of the driver is 0%.

    manage-bde -status
    Check the encryption status of the drive
  10. To disable the BitLocker encryption on the targeted drive,  execute the following command:

    Disable-BitLocker -MountPoint "drive-letter:"
  11. Next, execute this command:

    manage-bde -off drive letter:
  12. Finally, execute the following command to make sure that the drive is completely decrypted:

    manage-bde -status
    Check the status of the drive

You can now remove the Windows installation media and boot into Windows normally without the BitLocker issue.

4. Reset Your PC

Finally, if none of the methods mentioned about has managed to fix the issue for you,  then you can proceed with deleting the encrypted drive entirely and reinstalling the Windows operating system. However, since this method involves removing a drive, all the data stored in that drive will be lost, and you will be starting from scratch. 

If you want to proceed, follow these steps:

  1. Boot Windows using the installation media, whether in DVD or USB form.
  2. In the following window,  click on Next.
  3. Now, choose Repair your computer.
  4. When asked for a recovery key, click on Skip this Drive.
  5. Next,  choose Troubleshoot > Advanced options.
  6. Click on Command Prompt from the list of options available.
  7. In the Command Prompt window, execute the following command:

    diskpart
  8. Now, execute the following command to view all the volumes on the system:

    list volume
    View the volumes in the system
  9. Next, execute this command to pick the largest volume. Make sure you replace ‘Volume number’ with the number of the selected volume.

    select volume number
  10. To delete the volume, execute this command:

    delete volume override
    Remove the volume
  11. Finally, type exit and hit Enter.
  12. Restart your PC with the installation media and perform a clean installation.

Hopefully, this will resolve the BitLocker issue once and for all. 

ABOUT THE AUTHOR

Zainab Falak


Zainab Falak is a highly educated professional with a background in actuarial science and a strong passion for technology. Her expertise lies in the field of data analytics and she is a proficient programmer in languages such as Python and R. At Appuals, Zainab shares her extensive knowledge of Windows 8, 10, and 11, covering a broad range of topics related to these operating systems. Zainab's ability to effectively communicate technical concepts in a clear and concise manner has earned her recognition and respect in the tech community. She is committed to staying up-to-date with the latest developments in the field and providing readers with insightful and informative content.