How to Change BitLocker PIN or Password in Windows 10

This guide shows you how to change the BitLocker PIN (used at startup) or the recovery password (used when Windows won’t start normally) on a Windows 10 PC. You’ll need administrative rights and, in most cases, access to the drive that is currently encrypted.

What You’ll Need

• An administrator account on the Windows 10 PC.
• The current BitLocker PIN (if you’re changing it) or the recovery password (if you’re changing that).
• Access to the drive that is encrypted (usually the C: drive).
• If you have a TPM (Trusted Platform Module) chip, you may need to temporarily suspend BitLocker protection before changing the PIN.

Step-by-Step

Change the BitLocker Startup PIN

1. Press Windows + I to open Settings, then go to System > About. Alternatively, open Control Panel and select BitLocker Drive Encryption.
2. In the BitLocker Drive Encryption window, find the drive that has BitLocker enabled (usually C:). Click Change PIN (if available) or Change startup key (if you use a USB key instead of a PIN). If you don’t see these options, your system may not be using a PIN – see the note below.
3. If prompted by User Account Control, click Yes.
4. Enter your current PIN in the first field, then type your new PIN twice in the next two fields. The PIN must be at least 6 digits (or characters, depending on your system’s policy).
5. Click Change PIN. You’ll see a confirmation message. Your new PIN is now active.

Note: If you don’t see “Change PIN,â€� your computer may be using a TPM-only protection (no PIN). To add or change a PIN in that case, you must first disable BitLocker protection temporarily, then enable it again with a PIN. See the Troubleshooting section below.

Change the BitLocker Recovery Password

The recovery password is a 48-digit number used to unlock the drive if Windows fails to start normally. You can change it from the BitLocker management console.

1. Open Control Panel and go to BitLocker Drive Encryption.
2. Click Manage BitLocker next to the drive that is encrypted.
3. In the BitLocker Drive Encryption management window, click Back up your recovery key or Change recovery password (the exact wording may vary).
4. Choose how you want to back up the new recovery password: save to a file, print it, or save to your Microsoft account. The system will generate a new 48-digit recovery password and save it to your chosen location.
5. Keep the new recovery password in a safe place. The old one will no longer work.

Change the BitLocker Password (for Data Drives)

If you have a secondary drive (like D:) that uses a password to unlock, the steps are slightly different:

1. In the BitLocker Drive Encryption window, click Unlock drive if it’s locked, then enter the current password.
2. Click Change password next to that drive.
3. Enter the current password, then the new password twice. Click Change password.

Common Mistakes

• Forgetting the current PIN or password: You cannot change it without the current one. If you’ve forgotten it, you’ll need the recovery key to unlock the drive first.
• Using a PIN that’s too short: Windows requires at least 6 digits for a startup PIN. Some systems may require more.
• Not having administrator rights: You must be logged in as an administrator to change BitLocker settings.
• Changing the PIN while BitLocker is suspended: If you suspend protection, you must resume it before changing the PIN, or the change may not take effect.
• Losing the new recovery password: If you change the recovery password and lose the new one, you’ll be locked out of the drive if you ever need it.

Tips

• Always back up your recovery key before changing anything. Even if you’re only changing the PIN, having a current recovery key is a safety net.
• Use a PIN that’s easy to remember but hard to guess – avoid birthdays or sequential numbers.
• If you’re using a Microsoft account, you can also view your recovery key online at account.microsoft.com/devices/recoverykey.
• Consider using a startup key (USB) instead of a PIN if you want a more secure option, but note that you’ll need the USB every time you boot.

Troubleshooting

“Change PIN� option is grayed out or missing

This usually means your system uses TPM-only protection without a PIN. To add a PIN:

1. Open an elevated Command Prompt (right-click Start > Command Prompt (Admin) or Windows PowerShell (Admin)).
2. Type manage-bde -protectors -disable C: and press Enter. This suspends BitLocker protection temporarily.
3. Now go to Control Panel > BitLocker Drive Encryption and click Change PIN – it should now be available. Set a new PIN.
4. After setting the PIN, re-enable protection by typing manage-bde -protectors -enable C: in the elevated prompt.

You forgot your current PIN

You cannot change the PIN without the current one. However, you can use the recovery key to unlock the drive, then change the PIN from the BitLocker management console. To unlock with the recovery key:

1. Restart your computer. At the BitLocker recovery screen, press Enter to see the recovery key prompt.
2. Enter the 48-digit recovery key. Windows will boot normally.
3. Once logged in, you can change the PIN as described above.

BitLocker asks for a recovery key after changing the PIN

This can happen if the BIOS/UEFI settings were changed or if the TPM was cleared. If you have the recovery key, enter it. Then, to avoid future prompts, consider resetting the TPM (from BIOS) and re-setting up BitLocker.

The new PIN doesn’t work at startup

Make sure you’re using the correct keyboard layout (e.g., if you use a non-US layout, the PIN may be entered differently). Also, ensure you’re typing the correct number of digits. If all else fails, use the recovery key to boot, then disable and re-enable BitLocker to set a fresh PIN.

Frequently Asked Questions

Can I change my BitLocker PIN without the current PIN?

No, you need the current PIN to change it. If you’ve forgotten it, you must use the recovery key to unlock the drive first, then you can change the PIN.

What’s the difference between a BitLocker PIN and a password?

A PIN is used at startup (before Windows loads) and is typically numeric. A password is used to unlock a data drive (like D:) after Windows is running. The recovery password is a 48-digit emergency key.

How long does it take for the PIN change to take effect?

Immediately. Once you click “Change PIN,� the new PIN is active on the next restart.

Can I use letters in my BitLocker PIN?

Yes, if your system’s policy allows it. By default, Windows allows alphanumeric PINs if you enable that feature via Group Policy or manage-bde. The default is usually numeric only.

Will changing my PIN affect my recovery key?

No, changing your PIN does not change the recovery key. However, if you change the recovery password, the old one becomes invalid.

What should I do if I lose my recovery key?

If you lose the recovery key and can’t boot Windows, you may lose access to your data. It’s crucial to back it up to your Microsoft account, a file, or a printout. If you have no recovery key, you may need to format the drive, which erases all data.

Related

• Fix “The Parameter Is Incorrect” Error in Windows
• How to Check Which ChatGPT Model Answered Your Prompt
• Fix Application Error 0xe0434352 on Windows