Introduction

If your computer is showing a blue screen asking for a BitLocker recovery key, you can retrieve it yourself using your Microsoft 365 account. This key is automatically saved to your organization's Microsoft account when your computer is set up.

Requirements

You'll need the following on hand:

• A second device (your phone, tablet, or another computer)
• Your work Microsoft 365 email and password
• An internet connection on that second device

Step-by-Step Instructions

Why Is My Computer Asking for This?

BitLocker may prompt for a recovery key after events like too many failed login attempts, a hardware change, a BIOS or firmware update, a TPM chip issue, or certain Windows updates. It's a security feature — it just needs to verify you're authorized to access the drive.

Step 1 — Open a browser on your second device

• On your phone or another computer, open any web browser and go to:
  myaccount.microsoft.com

Step 2 — Sign in with your work account

• Enter your work email and password — the same credentials you use for Outlook and Teams. If your organization uses multi-factor authentication (MFA), approve the prompt in your authenticator app when it appears.

Step 3 — Go to Devices

• Once signed in, click Devices in the left-hand navigation menu. This will display all devices registered to your Microsoft 365 account.

Step 4 — Find your locked computer

• Look for your computer by name. It typically appears as a hostname (for example, ALPHA-LT-003). If you're unsure which device is yours, check the BitLocker screen on your locked computer — it may display the computer name or a Key ID to help you identify the right entry.

Step 5 — View your BitLocker recovery key

• Click the device, then click View BitLocker Keys (sometimes labelled Get BitLocker Keys). Your 48-digit recovery key will appear. It is formatted as 8 groups of 6 digits separated by dashes, like this:
  
  123456-789012-345678-901234-567890-123456-789012-345678
   
• Take a photo of the key or write it down before going back to your locked computer.

Step 6 — Enter the key on your locked computer

• On the blue BitLocker screen, type in the 48-digit recovery key. You do not need to type the dashes — the cursor moves between groups automatically. Use the arrow keys if you need to go back and correct a group. Press Enter when finished.
   
• Your computer should now boot normally.

Tips and Best Practices

• The key isn't showing up in the portal
  • If you don't see a "View BitLocker Keys" option, or the key isn't listed, it may not have been backed up to Microsoft 365.
  • This can happen with older devices or recently re-enrolled machines. Contact ALPHA IT for assistance.
     
• The key isn't being accepted on the locked screen
  • If your portal shows more than one key (from previous encryption cycles), try the most recently saved key first. If none of the keys work, contact IT Support immediately and have the Key ID from the BitLocker screen ready.