BitLocker Password: Set or Change It in Windows

Setting a BitLocker password lets you unlock an encrypted drive with a password, while changing it replaces the password currently used for that drive. You’ll need Windows with BitLocker support, administrator access for some actions, and the drive’s current password or recovery key if it is already locked.

What You’ll Need

A Windows PC and an encrypted drive. BitLocker Drive Encryption is available on supported Windows editions; some devices instead provide Device Encryption with fewer management options.
Access to the drive. If it is locked, have its current password or its 48-digit BitLocker recovery key ready.
Administrator permission if Windows asks for it when changing protection settings.
A safe place to store the new password and recovery key separately from the encrypted drive.

Step-by-Step

Check which drive you want to manage. Open File Explorer, select This PC, and note the drive letter. A BitLocker password can apply to an external or fixed data drive. The Windows system drive typically unlocks at startup using a TPM, PIN, or recovery key rather than a password prompt; changing a startup PIN is a different task.
Open BitLocker management. Open Start, search for Manage BitLocker, and select it. If the result is unavailable, open Control Panel, choose System and Security, then BitLocker Drive Encryption. On some Windows editions this control panel page is not available.
Choose a method for a new password. If the drive is not encrypted, select Turn on BitLocker beside it and follow the setup wizard. When prompted for how to unlock the drive, select the password option, enter a strong password, and enter it again to confirm. If you do not see a password choice, check that you selected a data drive and that your Windows edition and device support BitLocker password unlock.
Save the recovery key when prompted. BitLocker offers ways to back it up, such as saving it to your Microsoft account, a file, or printing it; available options depend on the device and organization policy. Keep a copy somewhere you can reach if the drive is unavailable, not only on that drive. The recovery key is not the password: it is a separate recovery method.
Finish encryption and check its status. Choose whether to encrypt only used space or the entire drive, then select the encryption mode offered. Follow the wizard’s prompts, including any restart request. Keep the device powered and do not unplug an external drive during encryption. In Manage BitLocker, wait until the drive shows that encryption is complete before relying on it as protected.
Change the password on an unlocked drive. In Manage BitLocker, find the drive and choose Change password. Enter the current password, then the new password twice, and confirm. If the current password is forgotten but the drive is unlocked, look for Back up your recovery key and any recovery or password-change options shown for that drive; Windows interface choices vary. Do not turn off encryption just to replace a forgotten password.
Change it from File Explorer if needed. Right-click the unlocked encrypted drive and choose Change BitLocker password, if that command appears. Enter the old password and the new password twice. If the command is absent, use Manage BitLocker or the Windows command-line method described in Troubleshooting.
Test the new password. Safely eject an external drive, reconnect it, and unlock it with the new password. For an internal data drive, lock it using the available BitLocker controls, then unlock it again. Do not test by restarting or changing startup security settings unless you specifically intend to manage Windows startup authentication.

Common Mistakes

Confusing the password with the recovery key. A password is the normal unlock method you chose. The 48-digit recovery key is a backup for situations such as forgotten credentials or changed security conditions.
Looking for a password option on the Windows startup drive. Startup authentication commonly uses the computer’s TPM, a PIN, or a recovery key. It is not necessarily controlled by a drive-password option.
Saving the only recovery copy on the encrypted drive. If the drive cannot unlock, you may be unable to access that copy. Keep it in a separate, secure location.
Unplugging a drive during encryption or decryption. Wait for the process to finish and use Windows’ safe removal option before disconnecting external storage.
Assuming every Windows PC has the same controls. Edition, device configuration, and work or school policies can change which options are available.

Tips

Choose a unique password that is difficult to guess but that you can enter accurately. Avoid reusing a password from another account.
Check that the recovery key is readable and associated with the correct drive. A device can have multiple recovery keys, so compare the key ID shown on screen when Windows requests recovery.
Keep a laptop connected to power during encryption. For a large drive, allow time for the process to finish before travelling or disconnecting storage.
If the drive contains sensitive data, remember that encryption protects data when the drive is locked; it does not replace account security, backups, or safe handling while the drive is unlocked.

Troubleshooting

Manage BitLocker is missing: Your Windows edition may not include the full BitLocker management interface, or your device may use Device Encryption. Search Settings for Device encryption and check its status. On a managed work or school computer, contact the administrator rather than trying to override policy.

The drive asks for a recovery key: Enter the 48-digit key matching the recovery key ID shown on screen. Check the account or backup location where the key was saved, or ask the organization that manages the device. Do not share the key publicly. If no matching key exists, Windows cannot use a password to bypass recovery.

You forgot the current password: If the drive is locked, unlock it with its recovery key, if available, then use the password-change option. If it is already unlocked, back up important files and check Manage BitLocker for recovery or password options. A recovery key may restore access, but it does not automatically reveal the old password. Avoid formatting the drive unless you accept losing its contents.

The password-change option is unavailable: Make sure the drive is encrypted and unlocked, then try Manage BitLocker instead of File Explorer. If Windows permits command-line management, open Terminal or Command Prompt as administrator and run manage-bde -changepassword X:, replacing X: with the correct drive letter. Follow the prompts and verify the letter carefully. Organization policies may block this action.

The password is rejected: Check keyboard layout, Caps Lock, and whether you are entering the drive password rather than the Windows sign-in password. If the correct password still fails, use the matching recovery key instead of repeatedly guessing.

Frequently Asked Questions

Can I set a BitLocker password after encryption?
Yes, if the drive and Windows configuration support password unlock. Open Manage BitLocker and look for an option to add or change a password for that drive.

Can I change a BitLocker password without the old one?
If the drive is unlocked, Windows may offer a recovery-based option. If it is locked, you generally need the correct password or recovery key to regain access before changing credentials.

Is my recovery key the same as my BitLocker password?
No. The password is your chosen unlock credential; the recovery key is a separate 48-digit backup code.

Can I use a password for my Windows C: drive?
Startup-drive unlocking is generally managed through TPM, PIN, or recovery-key settings, not the same password option used for data drives. Do not change startup protection without understanding the prompts.

Does changing the password decrypt the drive?
No. Changing the unlock password does not turn off encryption or remove the encrypted data protection.

What if my organization controls BitLocker?
Some options may be restricted and recovery keys may be managed centrally. Contact your IT administrator for the approved password or recovery process.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →