BitLocker Recovery - Unlock a Drive in Windows 8

How to Unlock a Drive using BitLocker Recovery in Windows 8 and 8.1


information   Information
There are several reasons that might make a PC go into recovery mode. For example, your organization might have a password security policy that locks you out after a certain number of failed attempts to sign in. Or perhaps your PC encountered a hardware malfunction, an unexpected configuration change, or another security event. Requiring a recovery key helps ensure that only an authorized person can unlock your PC and restore access to your encrypted data.

This tutorial will show you how to use BitLocker recovery to unlock an encrypted OS drive, fixed data drive, and removable data drive in Windows 8 when you are not able to do so normally say using the password or USB flash drive.

Tip   Tip
If you were signed in to your Microsoft account when you encrypted a drive with BitLocker, then you can get your recovery key from your OneDrive at the link below.


Microsoft account: BitLocker recovery keys






OPTION ONE

How to Unlock a Windows 8 OS Drive with BitLocker Recovery


1. Do step 2 or 3 below depending on what you set to unlock your OS drive with.​
2. If to Insert a USB Flash Drive
A) At boot when prompted to plug in the USB flash drive that contains the startup key, click/tap on Press Esc for BitLocker recovery, and go to step 4 below. (see screenshot below)​
Recover_BitLocker_OS_Drive_USB-1.jpg
3. If to Enter a Password
A) At boot when prompted to enter the password, click/tap on Press Esc for BitLocker recovery, and go to step 4 below. (see screenshot below)​
Recover_BitLocker_OS_Drive-3.jpg
4. In BitLocker recovery, look to see what the first part of the Recovery key ID number (ex: 8BCDC640) is. This number is what you will use to reference the correct BitLocker recovery key to enter. (see screenshot below)​
Recover_BitLocker_OS_Drive-2.jpg
5. Do step 6, 7, or 8 below depending on how you backed up your BitLocker recovery key for this drive.​
6. If you Printed the Recovery Key
A) Find the print out, and go to step 9 below.​
7. If you Saved the Recovery Key to a File or USB Flash Drive
A) On another PC, open the file or USB drive, open the BitLocker Recovery Key..... file that has the same first part of the Recovery key ID number (ex: 8BCDC640) from step 4 above, and go to step 9 below. (see screenshots below).​
Recover_BitLocker_OS_Drive-5.jpg
Recover_BitLocker_OS_Drive-6.jpg
8. If you Saved the Recovery Key to your Microsoft Account Online
A) On another PC, go to the link below to sign into your Microsoft Account online and view your saved BitLocker recovery keys.​
B) Expand the computer name (ex: BRINK-VM) arrow for the one you want to unlock, and look for the BitLocker recovery key that is for the same first part of the Recovery key ID number (ex: 8BCDC640) from step 4 above, and go to step 9 below. (see screenshot below)​
Recover_BitLocker_OS_Drive-7.jpg
9. Enter the full 48 digit BitLocker recovery key, and press Enter. (see screenshot below step 4)​
10. If successful, the OS drive should now be unlocked to allow Windows 8 to start.​
Note   Note
If you do not have a BitLocker recovery key available, then you will not be able to unlock the OS drive to gain access. Instead, you will need to either reset Windows 8 as per the instructions below.

Note   Note

warning   Warning
Only choose this option as a last resort because it will delete your personal data from the PC. While BitLocker helps protect your data against unauthorized access, it also prevents you from ever accessing your data again if you are unable to unlock it.

A) From the boot screen at step 4 above, keep pressing any Press Esc for more recovery options links until you see Skip this drive instead.​
NOTE: If this is an OEM PC that came with Windows 8 preinstalled, then you may be able to click/tap on a Learn more about resetting your PC button to restore your PC back to factory default.​
B) Click/tap on any Skip this drive links until you are on the system recovery options screen at boot.​
C) You will now be able to click/tap on Troubleshoot and Reset your PC to be able to reset Windows 8.​
NOTE: If this is an OEM PC that came with Windows 8 preinstalled, then you may be able to click/tap on Repair and Restore, Other repair options, and Factory Reset to then follow the instructions to restore your PC back to factory default.​
BitLocker_Reset-1.jpg

11. If unsuccessful, then you could try using the BitLocker Repair Tool to recover the drive.​





OPTION TWO

How to Unlock a Fixed or Removable Data Drive with BitLocker Recovery


1. In Windows 8, open the locked data drive to have it prompt you to enter the password to unlock it, and click/tap on More options. (see screenshot below)​
Recover_BitLocker_Data_Drive-1.jpg
2. Click/tap on Enter recovery key. (see screenshot below)​
Recover_BitLocker_Data_Drive-2.jpg
3. Look to see what the first part of the recovery key ID number (ex: 009C713F) is. This number is what you will use to reference the correct BitLocker recovery key to enter. (see screenshot below)​
Recover_BitLocker_Data_Drive-3.jpg
4. Do step 5, 6, or 7 below depending on how you backed up your BitLocker recovery key for this drive.​
5. If you Printed the Recovery Key
A) Find the print out, and go to step 8 below.​

6. If you Saved the Recovery Key to a File or USB Flash Drive
A) Open the file or USB drive, open the BitLocker Recovery Key..... file that has the same first part of the Recovery key ID number (ex: 009C713F) from step 3 above, and go to step 8 below. (see screenshots below).​
Recover_BitLocker_Data_Drive-4A.jpg
Recover_BitLocker_Data_Drive-4B.jpg

7. If you Saved the Recovery Key to your Microsoft Account Online
A) Go to the link below to sign into your Microsoft Account online and view your saved BitLocker recovery keys.​
B) Expand the computer name (ex: BRINK-PC) arrow for the one you want to unlock, and look for the BitLocker recovery key that is for the same first part of the Recovery key ID number (ex: 009C713F) from step 3 above, and go to step 8 below. (see screenshot below)​
Recover_BitLocker_Data_Drive-5.jpg

8. Enter the full 48 digit BitLocker recovery key, and press Enter. (see screenshot below step 3)​
9. If successful, the data drive should now be unlocked.​
Note   Note
If you do not have a BitLocker recovery key available, then you will not be able to unlock the data drive to gain access.

Note   Note

You could format the data drive to decrypt it and be able to use it again, but you will lose all data on it.​


10. If unsuccessful, then you could try using the BitLocker Repair Tool to recover the drive.​






OPTION THREE

How to Unlock a Data Drive with BitLocker Recovery in Command Prompt


NOTE: You must be signed in as an administrator to be able to do this option. This will apply to fixed and removable data drives.
2. In the elevated command prompt, type the command below, and press Enter.​
NOTE: This will let you see what the Numerical Password (aka: recovery key ID) number (ex: 009C713F) is for this drive. This number is what you will use to reference to enter the correct BitLocker recovery key at step 7 below.​
manage-bde -protectors F: -get
NOTE: Substitute F in the command with the drive letter of the locked data drive you want to unlock.​
BitLocker_Recovery_Command-1.jpg
3. Do step 4, 5, or 6 below depending on how you backed up your BitLocker recovery key for this drive.​
4. If you Printed the Recovery Key
A) Find the print out, and go to step 7 below.​

5. If you Saved the Recovery Key to a File or USB Flash Drive
A) Open the file or USB drive, open the BitLocker Recovery Key..... file that has the same first part of the Recovery key ID number (ex: 009C713F) from step 2 above, and go to step 7 below. (see screenshots below).​
Recover_BitLocker_Data_Drive-4A.jpg
Recover_BitLocker_Data_Drive-4B.jpg

6. If you Saved the Recovery Key to your Microsoft Account Online
A) Go to the link below to sign into your Microsoft Account online and view your saved BitLocker recovery keys.​
B) Expand the computer name (ex: BRINK-PC) arrow for the one you want to unlock, and look for the BitLocker recovery key that is for the same first part of the Recovery key ID number (ex: 009C713F) from step 2 above, and go to step 7 below. (see screenshot below)​
Recover_BitLocker_Data_Drive-5.jpg

7. In the elevated command prompt, type in the command below with the 48-digit Bitlocker recovery key. (see screenshot below)​
NOTE: Substitute F in the command below with the drive letter of the locked drive you want to unlock, and substitute BitLocker Recovery Key in the command below with the actual 48 digit BitLocker recovery key from step 4, 5, or 6 above.
manage-bde -unlock F: -rp BitLocker Recovery Key
For example: If I wanted to unlock the F data drive with the 261173-522599-237072-583517-442068-316811-199375-623755 BitLocker recovery key number, I would type this below exactly and press Enter.​
Code:
manage-bde -unlock [COLOR=#ff0000][B]F[/B][/COLOR]: -rp [COLOR=#ff0000][B]261173-522599-237072-583517-442068-316811-199375-623755[/B][/COLOR]
BitLocker_Recovery_Command-2.jpg

8. If successful, the data drive should now be unlocked.​
Note   Note
If you do not have a BitLocker recovery key available, then you will not be able to unlock the data drive to gain access.

Note   Note

You could format the data drive to decrypt it and be able to use it again, but you will lose all data on it.​


9. If unsuccessful, then you could try using the BitLocker Repair Tool to recover the drive.​



That's it,
Shawn


 

Attachments

  • BitLocker.png
    BitLocker.png
    18 KB · Views: 543
Last edited by a moderator:
Windows 10 bitlocker protected drive is not working.

Hi,
Shawn,

I appreciate your effort. Your post is really helping me out. I am applying 3rd method. The following error came up.
capture-20160718-122637.png

This is my case history:

I have Windows 10 and BitLocker enabled.

HDD, Seagate 3TB, partitioned into 5 drives.

I did this mistake, I created a bootable USB by easy bcd and tested on host window during boot. Reached to the point where windows setup asks for disk selection, I clicked on the drive(setup says drive encrypted and can't continue) but didn't go further.

Then I boot nothing shows up.

Tried to connect 3tb hard to another PC to unlock drive but it's not accepting the correct password and recovery key.

I made windows image before encryption. After restoring that 2nd and 4th drives are not accessible, 5th is formatted and 3rd drive data is intact with minor data loss.

I ran testdisk-7.0 and found no drive in the quick search. The log file is pasted below.

View attachment Test disk result.txt

Code:
Fri Jul 1 23:56:11 2016
Command line: TestDisk
 
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
[url=http://www.cgsecurity.org]CGSecurity - Data recovery: TestDisk & PhotoRec[/url]
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=2199023255552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=801567145984
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=2199023255552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=801567145984
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C=536481890304
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
 
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
 
Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.
 
filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.
 
Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1232570679296
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=801564000256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=214748364800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=214746267648
Hard disk list
Disk /dev/sda - 2199 GB / 2048 GiB - CHS 267349 255 63, sector size=512
Disk /dev/sdb - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512
Drive C: - 536 GB / 499 GiB - CHS 65223 255 63, sector size=512
Drive F: - 1232 GB / 1147 GiB - CHS 149851 255 63, sector size=512
Drive G: - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512
Drive H: - 214 GB / 200 GiB - CHS 26108 255 63, sector size=512
Drive I: - 214 GB / 199 GiB - CHS 26108 255 63, sector size=512
 
Partition table type default to None
Drive F: - 1232 GB / 1147 GiB
Partition table type: Intel
 
Analyse Drive F: - 1232 GB / 1147 GiB - CHS 149851 255 63
Current partition structure:
 
Partition sector doesn't have the endmark 0xAA55
 
search_part()
Drive F: - 1232 GB / 1147 GiB - CHS 149851 255 63
 
Results
 
interface_write()
 
No partition found or selected for recovery
simulate write!
 
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
 
TestDisk exited normally.
Note:

How can I repair BitLocker/boot sector on 2nd drive?

Thanking you anticipation.
 
Last edited by a moderator:
Hello Jillian, and welcome to Eight Forums. :)

You might see if you may be able to use the BitLocker Repair Tool in the tutorial below to hopefully recover your drive.

BitLocker Repair Tool - Recover Drive in Windows 7 and 8


Hi,
Brink,

On given link, the drive shows BitLocker encryption sign but in my case not.

I tried cmd recovery before but no luck.

Here you can see my drives status in the screenshot.
capture-2016187.png
Thanks.
 
Jillian,

The drives's icons don't indicate that they are encrypted by BitLocker in that screenshot. Are you able to open them now?
 
Jillian,

The drives's icons don't indicate that they are encrypted by BitLocker in that screenshot. Are you able to open them now?

I am not able to open them. Before the issue bitlocker logo was visible.

[FONT=&quot]My drive is not capable of h/w encryption. Here is its model[/FONT]
[FONT=&quot]ST3000DM001.[/FONT]


[FONT=&quot]Can TPM effect non-OS drives?

Thanks.[/FONT]
 
What happens when you try to open them? Any error messages?

For now, it wouldn't hurt to double check their BitLocker status using the tutorial below.

http://www.eightforums.com/tutorials/41484-bitlocker-status-check-drive-windows.html

If you have a TPM, it can be used to unlock or decrypt BitLocker for only a OS drive.

[FONT=&amp]
[/FONT]
It says you need to format that drive before use.

[FONT=&amp]I repaired Bitlocker using the following command[/FONT]
[FONT=&amp]
[/FONT]
[FONT=&amp]repair-bde H: J: -rp KEY -f -lf I:\log.txt[/FONT]
[FONT=&amp]
[/FONT]
[FONT=&amp]The following errors showed up
[/FONT]repair status.png
chkdisk status.png[FONT=&amp]
[/FONT]
[FONT=&amp]

Log file link is also given below.
log.txt :: Free File Hosting - File Dropper: File Host for Mp3, Videos, Music, Documents.
Thanks.
[/FONT]
 
The log is showing that it failed to decrypt data at several offsets on the drive.

I hate to say it, but it looks like the data has been permanently loss. :(

You should be able to format the hard drive to be able to use it again, but the data will be gone.

Do you have backups of the data?
 
Not backup type data.

But I want to learn any solution if possible. If it happens to valuable data then I definitely need it.
 
What are mbr and boot sector etc called for hdd. I mean what's relation.
Any link to this will good. I just not able to think what phrase to enter in GOOGLE.

I really appreciate your efforts.

I am thinking when I restored c, windows re-created all drives, mbr and boot sector of Bitlocker drives is disturbed. Backup was before encryption.
 
Last edited:
Can you confirm there is no issue with partition table?

Why one drive that was also encrypted out of 5 have data and readable?

Thanks.
 
Last edited:
Update to the case.
I ran below commands.
J:

Bootrec /FixMBR


Bootrex /FixBoot


Chkdsk J: /f chkdisk log.png
Looking for your expert opinion.

I think there is a software by Norton to remove bad starting sectors of a drive to read remaining data.

Thanks.
 
Last edited:
That may help normally, but I'm not sure when you have BitLocker involved. Hopefully someone may know more than me on this to further help.
 
Jillian,

It looks like the drive is toast. You may be able to format it to be able to use it again, but you will lose all data on it.
 
Back
Top