Why you need a recovery password for BitLocker Drive Encryption

During startup, BitLocker Drive Encryption could detect a condition that prevents it from unlocking the drive Windows is installed on, or any other BitLocker-encrypted drives on the computer. For example, conditions might include disk errors, or a change to the basic input/output system (BIOS), or changes to any startup files. If one of these conditions occurs, you won't be able to log on and access your protected files until you unlock the drive by using your BitLocker recovery password. If you try to start the hard disk in a different computer, you will still need the BitLocker recovery password.

You should store the recovery password by printing it, saving it as a data file on removable media, or in a folder. Store the recovery password separate from your computer.

If you encrypt additional data drives, each will have its own recovery password that is different from the one for the drive that Windows is installed on, and which should be stored carefully as well.

You can only create this recovery password when you turn on BitLocker for the first time. After you create it, you can use the BitLocker Manage Keys feature to make additional copies.

Notes

• If your computer is part of a domain, domain policy might control which recovery password options are available.

• Assistive technology software that runs on Windows, such as screen-reading software, cannot read BitLocker startup screens because they are displayed during BIOS startup and before Windows runs. This includes screens used when you type a PIN or recovery password, and any BitLocker error messages.