Why one backup is not enough
BitLocker keys are 48 digits with no room for error. If your only copy is on a USB stick that fails, or in a Microsoft account you can no longer sign into, your data is gone.
Aim for three copies in three different forms — that's the standard 3-2-1 backup rule, applied to your key.
Step 1: Save it to your Microsoft account
Open Manage BitLocker → Back up your recovery key → Save to your Microsoft account.
Verify it later by visiting
aka.ms/myrecoverykey on a different device — you should see the key listed against your PC's Recovery key ID.Important
Make sure your Microsoft account itself has 2FA enabled (Account → Security). If you lose access to it, you lose the key.
Step 2: Save it to your password manager
Open Bitwarden, 1Password, Proton Pass or your preferred manager. Create a new Secure Note titled 'BitLocker key — <your PC name>' and paste the 48-digit key plus the Recovery key ID.
This is the copy you will actually find in a hurry, two years from now.
Step 3: Print a paper copy
From Manage BitLocker → Back up your recovery key → Print the recovery key.
Store it with your passport, birth certificate or other 'important documents' folder. Not in your laptop bag.
Step 4: Save to a USB stick (optional)
If you encrypt anything other than the system drive (external drives, secondary SSDs), keep a copy of those keys on a small USB stick that lives in a drawer.
Never store a recovery key on the same encrypted drive it unlocks.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers