If the laptop is showing the BitLocker recovery screen, the supported way to start Windows is to enter the 48-digit BitLocker recovery key. If the key is correct, Windows starts normally.
What to do:
- Enter the recovery key on the BitLocker screen
- Hyphens are optional.
- If accepted, the device boots into Windows.
- Check where the recovery key may be stored
- Microsoft Entra ID: if the device is managed by work or school, sign in to
https://myaccount.microsoft.com, open Devices, select the Windows device, and choose View BitLocker Keys. - It may also have been saved to a USB device, printed, or stored in AD DS.
- Microsoft Entra ID: if the device is managed by work or school, sign in to
- If the recovery screen shows a Secure Boot error
- For
E_FVE_SECUREBOOT_DISABLED, re-enable Secure Boot in firmware/BIOS and reboot. This might stop the recovery prompt. - For
E_FVE_SECUREBOOT_CHANGED, a recovery method is required to unlock the device.
- For
- If the device is locked out after too many PIN attempts
- Use the recovery key.
- Or wait for the unlock period to expire and then enter the correct PIN.
- From the BitLocker entry screen, pressing Esc can expose other recovery options, including Command Prompt. From there,
manage-bdecan unlock the drive or turn off BitLocker. Warning: turning off BitLocker or changing drive protection affects disk security and should only be done if the recovery key is available.
- If Windows still does not boot after recovery attempts
- Windows RE may start automatically after two boot failures.
- If Windows RE is started manually, the BitLocker recovery key is required to unlock the drive.
- If the drive is severely damaged and normal recovery does not work,
repair-bde.execan be used to recover data from a BitLocker-encrypted drive. Warning: this is an advanced recovery tool intended for damaged drives, and other repair options in Windows RE should be tried first.
- If the recovery key cannot be found
- The drive cannot be unlocked without the correct recovery key.
- If no recovery key is available, the remaining option is typically to reset or reinstall Windows, which causes data loss.