Common triggers
BitLocker watches for things that could indicate someone tampering with your PC. Most prompts are caused by harmless events:
- A BIOS / UEFI / firmware update from your laptop manufacturer.
- A Windows feature update that touched the boot configuration.
- Replacing or moving the SSD into another machine.
- Plugging in a new boot device or changing UEFI boot order.
- Clearing or resetting the TPM chip.
- Five wrong PIN attempts on a BitLocker-with-PIN setup.
Step 1: Confirm it really is BitLocker
A genuine BitLocker prompt is plain blue, says BitLocker recovery at the top, asks for a 48-digit recovery key in 8 groups of 6 digits, and shows a Recovery key ID at the bottom.
Anything fancier (logos, phone numbers, payment requests) is a scam imitation, not BitLocker.
Good to know
The Recovery key ID is what you use to find the right key in your Microsoft account. Note it down before doing anything else.
Step 2: Try the obvious sources first
Microsoft account: sign in at
aka.ms/myrecoverykey from any other device.Work or school: ask your IT team — they may have it stored in Azure AD or Active Directory.
Saved file or printout: when BitLocker was first turned on, you were prompted to save the key somewhere. Check OneDrive, USB sticks and printed documents.
Step 3: If you cannot find the key
Without the key, the data on the drive is not recoverable — that is the whole point of full-disk encryption.
Your only option is to boot from a Windows installation USB and reinstall Windows, which wipes the drive.
Important
If the prompt is repeating after every reboot once you do unlock it, follow the Resolve guide to suspend BitLocker, complete the firmware update, then re-enable it.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers