Reset Forgotten BitLocker Password in Windows 10

If you’ve forgotten your BitLocker password on Windows 10, you can still regain access to your drive by using the 48-digit recovery key, which was created when you first enabled encryption. This guide walks you through the recovery process, including where to find the key and how to reset the password once you’re back in.

What You’ll Need

• Your 48-digit BitLocker recovery key (check your Microsoft account, a saved text file, a printed copy, or a USB drive).
• Access to the Windows 10 login screen of the encrypted drive.
• Administrator privileges on the PC (to change the password after recovery).

Step-by-Step

1. Power on your PC and attempt to unlock the drive. When Windows starts, you’ll see the BitLocker recovery screen asking for the recovery key. If you’re already logged in but the drive is locked (e.g., an external drive), open File Explorer, right-click the locked drive, and select “Unlock Drive.”
2. Find your recovery key. The 48-digit key is usually stored in one of these places:
   • Microsoft account: Go to account.microsoft.com/devices/recoverykey on any device, sign in with the Microsoft account you used on the PC, and look under the device name.
   • Printed copy: Check any papers you saved when BitLocker was first set up.
   • Saved file: Search your files for a .txt file named “BitLocker Recovery Key” or similar.
   • USB flash drive: If you saved the key to a USB drive, plug it in and open the file.
   • Work or school account: If the device is managed by an organization, contact your IT administrator.
3. Enter the recovery key. Type the 48-digit key exactly as shown (hyphens are optional). Click “Unlock” or press Enter. Windows will then boot normally.
4. Log in to Windows. After unlocking, sign in with your usual Windows password or PIN.
5. Open Command Prompt as administrator. Click the Start button, type “cmd,” right-click “Command Prompt,” and select “Run as administrator.” Click “Yes” when prompted.
6. Reset the BitLocker password. In the Command Prompt window, type the following command and press Enter:

   manage-bde -changepassword C:

   Replace C: with the drive letter of your encrypted drive (e.g., D: for external drives). If your drive uses a different letter, adjust accordingly.

7. Follow the prompts. The command will ask you to enter a new password (twice). Type a strong, memorable password and confirm it. The password must meet the complexity requirements set by your system (usually at least 8 characters with uppercase, lowercase, numbers, and symbols).
8. Verify the change. Once the command completes, you’ll see a message like “Password changed successfully.” You can now use the new password to unlock the drive in the future.
9. Optional: Back up your new recovery key. After changing the password, it’s wise to update your recovery key backup. Open Control Panel > BitLocker Drive Encryption, click “Back up your recovery key,” and save it to a safe location.

Common Mistakes

• Typing the recovery key incorrectly. The key is case-sensitive and includes digits only. Double-check each digit, especially 0 vs O and 1 vs I.
• Using the wrong recovery key. If you have multiple devices, make sure you’re using the key associated with the correct device. Check the device name in your Microsoft account.
• Changing the password on the wrong drive. Ensure you’re changing the password for the drive that was locked, not the system drive if you have multiple encrypted drives.
• Skipping the administrator prompt. The manage-bde command requires elevated privileges. If you don’t run Command Prompt as administrator, you’ll get an access denied error.
• Forgetting to update the recovery key backup. If you lose the new password later, you’ll need the recovery key again. Always back it up after changing the password.

Tips

• Store your recovery key in multiple places. Keep a copy in your Microsoft account, a printed copy in a safe, and a USB drive in a drawer. This prevents a single point of failure.
• Use a password manager. Consider using a reputable password manager to store your BitLocker password and recovery key securely.
• Test your recovery key. Once in a while, try using the recovery key on a test basis (e.g., by locking the drive and unlocking it with the key) to ensure it works.
• Keep your Microsoft account credentials secure. Since the recovery key is often stored there, protect your Microsoft account with two-factor authentication.

Troubleshooting

• Recovery key not found in Microsoft account. If you don’t see the key, try signing in with a different Microsoft account (e.g., a work or school account). Also check the device list — the key may be under a different device name.
• Recovery key not accepted. Make sure you’re entering the correct 48-digit key. If it still fails, try restarting the PC and entering the key again. If the key is truly invalid, you may have lost the only copy — in that case, you may need to reinstall Windows (which will erase the drive).
• manage-bde command not recognized. This command is available in Windows 10 Pro and Enterprise editions. If you’re on Windows 10 Home, use the Control Panel method instead: go to Control Panel > BitLocker Drive Encryption, click “Change password” next to the drive.
• Password change fails with error. Ensure the drive is unlocked (you can access its files). If the drive is locked, unlock it first with the recovery key or the current password before running the command.
• Forgot the recovery key and can’t get in. If you have no recovery key and no backup, the data is permanently inaccessible. Your only option is to format the drive (which erases all data) and reinstall Windows. This is why backups are critical.

Frequently Asked Questions

Can I reset a BitLocker password without the recovery key?

No. Without the recovery key, you cannot unlock the drive or reset the password. The recovery key is the only backdoor. If you lost it, you’ll need to format the drive, losing all data.

Where is the BitLocker recovery key stored by default?

By default, Windows 10 offers to save the key to your Microsoft account, a USB drive, a file, or a printed copy. The most common location is your Microsoft account at account.microsoft.com/devices/recoverykey.

Can I use a PIN instead of a password for BitLocker?

Yes, you can set a PIN for the system drive if you have a TPM chip. However, the password is still used for other drives. The process to change a PIN is similar, using manage-bde -changepin C:.

Will resetting the password affect my files?

No. Changing the password does not alter any data on the drive. It only changes the authentication method for unlocking the drive.

How long is the recovery key?

The recovery key is 48 digits long, divided into eight groups of six digits each. It is not case-sensitive, but it must be entered exactly as shown.

Can I disable BitLocker after recovering access?

Yes. Once you’re back in, you can go to Control Panel > BitLocker Drive Encryption and click “Turn off BitLocker” to decrypt the drive. This will remove the encryption and the need for a password.

Related

• Fix Moisture Detected Error on Samsung Galaxy
• Install Microsoft Updates & Verify KB Numbers
• What Is Windows PE? A Plain Guide to the Recovery Tool