Windows won’t start

Unexpected BitLocker recovery key screen at startup

Instead of the normal login screen, Windows shows a blue screen asking for a 48-digit BitLocker recovery key. This happens when Windows thinks the security state of the PC has changed and locks the encrypted drive as a precaution.

Difficulty
Easy
Time
5–20 minutes
DIY cost
$0
Pro cost
$0–$100

Symptoms

  • Blue screen asks for a recovery key before Windows loads
  • Screen references a Key ID
  • Normal password doesn't work here, only the recovery key
  • Often follows a BIOS update, hardware change, or disconnecting a laptop battery

Likely causes

  • CommonRecent BIOS/UEFI firmware updateBitLocker treats firmware changes as a potential tampering signal and re-locks the drive.
  • CommonChanged boot order or Secure Boot settingAny change to how the PC boots can trigger this check.
  • PossibleHardware change such as a new battery, RAM, or motherboard componentBitLocker ties encryption to the hardware configuration it first saw.
  • Less commonDocking or undocking a laptop, or connecting to a new external display setupIn rare cases this shifts detected hardware enough to trigger a lock.
  • PossibleTPM chip reset or clearedClearing the Trusted Platform Module invalidates the key it was storing.

What to do

  1. Look for the recovery key: check your Microsoft account online at account.microsoft.com/devices/recoverykey if you're signed into Windows with that account.
  2. If it's a work or school PC, contact your IT department; they can look up the key tied to the device.
  3. If you saved the key to a USB drive, printed it, or wrote it down when BitLocker was first turned on, enter it exactly as shown, including dashes.
  4. Once unlocked, Windows will boot normally; go to Settings > Privacy & Security > Device encryption to review or temporarily suspend BitLocker before doing more firmware or hardware changes.
  5. To avoid this in the future, suspend BitLocker from Windows before BIOS updates or hardware changes, then resume it afterward.
  6. If you cannot find the recovery key anywhere, the data on the drive cannot be accessed without it; there's no bypass.
  7. If truly locked out, you'll need to reset the PC, which erases the encrypted drive, unless a recovery key can still be located.

When to call a pro

If you cannot find the recovery key through your Microsoft account, work IT, or saved records, a data recovery specialist has no way around BitLocker encryption either; the key is the only way in.

Safety

Generally low risk

Generally low risk for a careful person. Stop if anything looks different from what this guide describes.

Related guides

Operator provides AI-generated troubleshooting information. It can be wrong. For safety-critical, electrical, gas, structural, medical, automotive safety, or other high-risk problems, consult a qualified professional.