Open the recovery-key page directly in a private browser window, then match the first eight digits of the Recovery Key ID displayed on the locked PC to the corresponding 48-digit key.
1. Retry the portal without the failing session
On another phone or computer:
- Open an InPrivate/Incognito window.
- Temporarily disconnect any VPN.
- Go directly to https://account.microsoft.com/devices/recoverykey.
- Sign in with the Microsoft account used when the PC was configured.
- If the TraceID error continues, try:
- Another browser.
- Another network, such as a mobile hotspot.
- Any other Microsoft account that may have been used on the PC.
These steps have resolved similar Microsoft account recovery-page and authentication failures reported in Microsoft Q&A.^1^ The recovery key can also remain available at the direct address even when the account’s normal Devices page does not display correctly.^2^
2. Match the correct key
On the BitLocker screen, record the first eight digits of the Recovery Key ID. This is an identifier, not the recovery key itself.
Compare that ID with the keys shown online and enter the matching 48-digit recovery key. Microsoft documents these additional possible storage locations:^3^
- A different Microsoft account used to set up the PC.
- The account of the person who originally enabled BitLocker.
- A printed copy.
- A USB flash drive.
- A saved text file.
Starting with Windows 11 version 24H2, the recovery screen may also show a hint identifying the associated Microsoft account.^3^
3. If this is a work or school device
Try the work or school recovery route from another device:
- Go to https://aka.ms/aadrecoverykey.
- Sign in with the relevant work or school account.
- Select Devices and expand the affected device.
- Select View BitLocker Keys.
- Match the Recovery Key ID.
If that option is unavailable or also returns an error, contact your organization’s IT help desk. For Microsoft Entra joined or Intune-managed devices, an authorized administrator can retrieve the key from Microsoft Entra ID or the device properties in the Microsoft Intune admin center. For domain-joined devices, an administrator with appropriate access can retrieve it from Active Directory.^4^
4. Escalate a persistent TraceID portal failure
For a personal Microsoft account, open the Get Help app on another Windows device, search for Microsoft account support, and choose the available Contact Support option. Provide:
- The TraceID displayed by the portal.
- The approximate date, time, and time zone of the error.
- The affected Microsoft account address.
- The browser and network used.
- The private-window, alternate-browser, VPN, and alternate-network tests already completed.
- A screenshot that does not expose the 48-digit key.
Support can investigate the portal or account-access failure. However, Microsoft Support cannot retrieve, recreate, or bypass a BitLocker recovery key that was never backed up.^3^
If no key can be found
Without the matching recovery key, the encrypted data cannot be accessed through a supported recovery method. The remaining option is to reset the device using Windows Recovery; resetting removes the files on the encrypted drive.^3^
References
- BitLocker recovery site aka.ms/myrecoverykey is not working - Microsoft Q&A
- unable to retrieve my bitlocker keys - Microsoft Q&A
- Find your BitLocker recovery key | Microsoft Support
- BitLocker recovery process