Error codes

BitLocker recovery

The PC asks for a recovery key at boot

What it means

BitLocker saw a change it does not trust, such as a firmware update or a TPM reset, and locked the drive until you prove you own it.

Common causes

• BIOS or firmware update
• Secure Boot or TPM settings changed
• The drive was moved to another PC

How to fix it

1. Find the recovery key at aka.ms/myrecoverykey with the Microsoft account the PC was set up with, or use the key your work account or printout has.
2. If the key is not in your account, ask the work or school account that manages the PC; they may hold it.
3. After unlocking, suspend BitLocker before any firmware change: Control Panel > BitLocker Drive Encryption > Suspend protection.
4. Never clear the TPM to skip the prompt unless you have the key or do not need the data.