How to Change or Reset the BitLocker Password of a Drive in Windows 8


information   Information
In Windows 8, administrative privileges are still required to configure BitLocker, however standard users are allowed to change the BitLocker PIN or password for the operating system volume or the BitLocker password for fixed and removable data volumes by default. This gives users the ability to choose PINs and passwords that correspond to a personal mnemonic instead of requiring the user remember a randomly generated character set and allows IT professionals to use the same initial PIN or password setting for all computer images. This also presents the opportunity for users to choose passwords and PINs that are more susceptible to password guessing, dictionary attacks, and social engineering attacks and gives users the ability unlock any computer that still uses the original PIN or password assignment.

Standard users are required to enter the current PIN or password for the drive to change the BitLocker PIN or BitLocker password. If a user enters an incorrect current PIN or password, the default tolerance for retry attempts is set to 5. Once the retry limit is reached, a standard user will not be able to change the BitLocker PIN or BitLocker password. The retry counter is set to zero when the computer is restarted or when an administrator resets the BitLocker PIN or BitLocker password.

For more information, see: What's New in BitLocker


This tutorial will show you how to change or reset the BitLocker password of an unlocked encrypted OS drive, fixed data drive, or removable data drive in Windows 8.

Note   Note
By default, BitLocker passwords will need to be at least 8 characters long to meet minimum length requirements. Be sure to write down this password, and keep it somewhere safe in case you need or forget the password in the future.

If you would like to prevent standard users from being able to change the BitLocker PIN or password, then see:

How to Allow or Prevent Standard Users from Changing BitLocker Password or Pin in Windows 8





OPTION ONE
Change or Reset BitLocker Password in Manage BitLocker Settings

1.
Do step 2, 3, or 4 for how you would like to start.

2. Open the Control Panel (icons view), click/tap on BitLocker Drive Encryption icon, and go to step 5 below.

3. In File Explorer, open Computer, right click or press and hold on an unlocked encrypted drive letter, click/tap on Manage BitLocker, and go to step 5 below. (see screenshot below step 4)

4. In File Explorer, open Computer, select (highlight) an unlocked encrypted drive letter, click/tap on Manage (Drive Tools) tab, click/tap on BitLocker icon in the ribbon, click/tap Manage BitLocker, and go to step 5 below. (see screenshot below)

Click image for larger version

5. Under Operating system drive, Fixed data drives, or Removable data drives - BitLocker To Go, click/tap on an arrow to expand the drive letter you want to change or reset the password of, and click/tap on the Change password link. (see screenshot below)

Note   Note
If you configured the OS drive to be unlocked by a USB flash drive instead of a password, then you will not be able to change the password of the OS drive. Instead, you will see these options for an OS drive.

Name:  USB.jpg
Views: 21712
Size:  27.3 KB


Click image for larger version


6.
Do step 7 or 8 below for what you would like to do.


7. To Change the BitLocker Password of the Drive/Volume
NOTE: By default, both a standard user and administrator will be able to do this option. See the blue Note box at the top if the tutorial for more details.

A) Enter the current (old) password, type in the new password twice, and click/tap on Change password. (see screenshot below)

Name:  BitLocker_Change_Reset_Password-3A.jpg
Views: 22213
Size:  47.7 KB

B) When the password has been successfully changed, click/tap on Close, and go to step 9 below. (see screenshot below)

Name:  BitLocker_Change_Reset_Password-3B.jpg
Views: 21876
Size:  54.1 KB

8. To Reset the BitLocker Password of the Drive/Volume
NOTE: You must be signed in as an administrator to be able to do this option.

A) Click/tap on the Reset a forgotten password link. (see screenshot below)

Name:  BitLocker_Change_Reset_Password-3A.jpg
Views: 22213
Size:  47.7 KB

B) If prompted by UAC, click/tap on Yes.

C) Type in a new password twice, and click/tap on Finish. (see screenshot below)

Name:  BitLocker_Change_Reset_Password-4A.jpg
Views: 21685
Size:  47.0 KB

D) When the password has been successfully changed, click/tap on OK, and go to step 9 below. (see screenshot below)

Name:  BitLocker_Change_Reset_Password-4B.jpg
Views: 21544
Size:  16.3 KB

9. When finished, you can close the BitLocker Drive Encryption CP window if you like. (see screenshot below step 5)







OPTION TWO
Change or Reset BitLocker Password in Command Prompt

1. Open an elevated command prompt.

2. In the elevated command prompt, type the command below, and press Enter. (see screenshot below)
NOTE: Substitute E in the command below with the drive letter of the unlocked encrypted drive that you want to reset and change the password of.

manage-bde -changepassword E:

3. Type in a new password twice pressing Enter after each time to change and confirm the password. (see screenshot below)
NOTE: The characters will not be displayed as you type in the new password.

4. When the password has been successfully changed, you can close the command prompt if you like. (see screenshot below)

Click image for larger version



That's it,
Shawn


Related Tutorials