Windows
5 articles with this tag
Asked for a BitLocker recovery key? How to find the 48-digit key, and what you can do if you can't
A BitLocker recovery key is a 48-digit number Windows asks for when it can't unlock the drive automatically — after a BIOS/UEFI update, a TPM change, a change to the boot configuration and similar events. On a personal PC, sign in at https://aka.ms/myrecoverykey with your Microsoft account and look for the key whose ID matches the first 8 digits of the recovery key ID on screen. For work or school PCs, use https://aka.ms/aadrecoverykey or ask IT. Microsoft says its support cannot retrieve, provide or recreate a lost recovery key; without it, the only options are to undo the change that triggered recovery or to reset the PC, which removes all files. This site's view: a recovery key is something to locate before trouble, not after. Treat anyone who asks you for the key by phone or message as a scammer.
How to turn off BitLocker: decide whether suspending is enough, and save the recovery key first
Turning off BitLocker fully decrypts the drive. Microsoft says decryption should happen when protection is no longer needed, not as a troubleshooting step. For BIOS or firmware updates, Suspend protection is enough. Save the recovery key outside the PC first; on Pro use Turn off BitLocker in Control Panel or manage-bde -off, on Home switch off Device encryption in Settings. Don't decrypt work or school PCs yourself. To sell or give away a PC, don't decrypt: reset it with Remove everything and Clean data.
Still on Windows 10? The security risks of running it after end of support
Regular support for Windows 10 Home/Pro-family 22H2 ended on October 14, 2025. Official guidance checked on October 16, 2026 lists consumer ESU through October 12, 2027, with automatic continuation for existing enrollees. Check enrollment and updates on the device, review regional conditions, and prioritize migration to an OS that receives updates. LTSC/IoT and commercial ESU are separate.
What is BitLocker: Windows disk encryption that protects data on a lost or stolen device
BitLocker is Windows' built-in disk encryption. It protects data when the PC is off or the drive is removed, turning a theft or loss into ciphertext. The main thing to get right is the recovery key: lose it and you lock yourself out. It does not protect a running, logged-in PC, so pair it with a strong login and auto-lock.
BitLocker vs 'Device encryption' — the same technology, full version vs automatic lite
BitLocker and Device encryption share the same encryption engine. Device encryption = the automatic, lite version that works on Home (auto-on with a Microsoft account, recovery key auto-escrowed, minimal options). BitLocker = the full version on Pro+ (startup PIN, external-drive encryption via To Go, fine control). For individuals, being auto-encrypted plus knowing where the recovery key is is usually enough. The state matters more than the name.