Summary A BitLocker recovery key is needed when BitLocker can’t automatically unlock an encrypted drive in Windows. This is a 48‑digit number that lets you regain access to your drive. You might be prompted for the BitLocker recovery key during startup, due to a security risk or hardware change:

A BitLocker recovery key is needed when BitLocker can’t automatically unlock an encrypted drive in Windows. This key, which is a 48-digit number, is used to regain access to the drive. You might be prompted for the BitLocker recovery key during startup, due to a security risk or hardware change:

Overview This page guides administrators and support professionals in diagnosing and resolving Secure Boot–related issues on Windows devices. Topics include Secure Boot certificate update failures, incorrect Secure Boot states, unexpected BitLocker recovery prompts, and boot failures following Secure Boot configuration changes.

Provides advanced steps to fix the BitLocker recovery key prompt issue that occurs after you install the August 2018 UEFI update on the 13-inch Surface Book 2 13" device.

Can I set up Surface turns on but is stuck on the recovery? How do I reset Surface using a usb recovery drive? How should I check the configuration? If your Surface turns on and you see a Recovery screen for the Boot Configuration Data or BCD file, do the following steps. These steps work for all Windows devices.

How does BitLocker work in Windows? How do I back up my BitLocker recovery key? What is BitLocker in Windows? BitLocker is a Windows security feature that protects your data by encrypting your drives. This encryption ensures that if someone tries to access a disk offline, they won’t be able to read any of its content.

Startup Repair is a built-in Windows recovery tool that helps fix issues preventing the operating system from starting. It runs from the Windows Recovery Environment (WinRE) and automatically diagnoses and repairs common startup problems such as corrupted system files or boot configuration errors.

This article describes how to modify the Windows startup behavior, and the available options. Change startup settings Note If you’ve encrypted your device, you’ll need your BitLocker key to complete this task. If you don’t know your BitLocker key, see Find your BitLocker recovery key.

For more information, see Disable Secure Boot. BitLocker recovery To recovery from this situation, enter the BitLocker Recovery Key. On the BitLocker recovery screen, type the 48-digit recovery key (hyphens are optional). If correct, your device will start into Windows. For more information, see the following resources: BitLocker overview

If BitLocker is enabled on your device, you'll need your BitLocker recovery key to access most recovery options from WinRE. If your PC still won't start, try these options from the Windows Recovery Environment (WinRE):