Skip to main content

Unlock a BitLocker drive

A drive encrypted with BitLocker stays locked in the recovery environment until you unlock it. Only then can O&O BlueCon find and service the Windows installation on it.

Prerequisites: one of the drive's key protectors – usually the 48-digit BitLocker recovery key.

Why you need the recovery key​

Many computers with Windows 10 or Windows 11 unlock their drive with the TPM (Trusted Platform Module) alone. You never enter a password, and Windows 11 often turns on this device encryption automatically. The TPM releases the key only when the computer starts its own Windows in the usual way. When it starts O&O BlueCon from a USB drive, the TPM keeps the key, so the drive stays locked.

This protects your data: anyone who starts the computer from another medium cannot read the drive. To service it with O&O BlueCon, you prove that you are allowed to access it with the recovery key.

Find the recovery key​

The recovery key was saved when BitLocker or device encryption was turned on:

  • Microsoft account: sign in on another device at aka.ms/myrecoverykey. The list shows each key with its key ID.
  • Company computers: your IT department usually stores the key in Active Directory or Microsoft Entra ID.
  • Printout or file: if you printed the key or saved it to a file or USB drive when turning on BitLocker.

When there are several keys, the Recovery key ID in the unlock window shows you which one belongs to this drive.

Unlock the drive​

  1. In the start wizard, click Change in the Target row.
  2. Open the BitLocker tab. It lists the encrypted drives with their status and protectors.
  3. Select the drive and click Unlock.
  4. In Unlock your drive, select the key protector:
    • NumericalKey – enter the recovery key in the eight fields. The window shows the Recovery key ID, which helps you find the right key.
    • Password – enter the BitLocker password. Show displays it.
    • ExternalKey – select the removable drive that contains the key file.
  5. Click OK.
  6. Click Close.

Result​

The drive is unlocked until O&O BlueCon is ended. The start wizard searches it for a Windows installation again and updates the Target row.

If the drive cannot be unlocked, O&O BlueCon shows an error with a code. Check that the recovery key belongs to this drive by comparing the recovery key ID.

No access without a key

O&O BlueCon cannot open a BitLocker drive without a valid key protector. Protectors that need the TPM together with a PIN or a startup key are not offered in the recovery environment; use the recovery key instead.

Next steps​

Prepare the target system