Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (2024)

Table of Contents
How to Fix Bitlocker Asking Recovery Key on Each Boot? Update BIOS Change BIOS Configuration Re-enable Bitlocker Use Legacy BIOS Disable Secure Boot Scan for Malwares Windows Update Solve TPM Problems

Bitlocker is a data encryption tool in Windows that’s used to encrypt drives. Encrypted drives can only be accessed with the correct key, which is released by the Trusted Platform Module (TPM) while booting.

The TPM only releases this key if the hardware and software profiles match the initial setup. If the profiles do not match, you are shown the Bitlocker recovery console, which asks for the recovery key. As long as the initial and current profiles don’t match, Bitlocker keeps asking for the recovery key.

Aside from this, changes in boot drive preferences, buggy BIOS, or incorrect configuration of the decryption key and Platform Configuration Register (PCR) settings are other possible reasons for this problem.

How to Fix Bitlocker Asking Recovery Key on Each Boot?

Suspending and Resuming Bitlocker before attempting to make hardware or firmware changes on the system will save you from the prompt asks for the recovery key.

If you’re unaware of the recovery key, you may get stuck within the Bitlocker recovery setup. To get past the setup in such a scenario, you can find your recovery key within your Microsoft account using any other computer to log in.

Update BIOS

The discussed problem was confirmed to be occurring due to buggy BIOS. In some cases, older versions of BIOS were found incompatible with the TPM hardware module. Motherboard manufacturers tend to resolve such bugs and incompatibilities with updates.

Therefore, you can try updating BIOS in order to fix the issue.

See Also
PandaTVing's Content - Page 3<![CDATA[TruckersMP News]]>Insurance for Truck Drivers: What You Need to KnowHow to Fix a 400 Bad Request Error (Causes and Fixes)

  1. Press Windows + R key to open Run.
  2. Type msinfo32 to open System Information.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (1)
  3. Check values corresponding to Baseboard Manufacturers and Baseboard products. Note them as well.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (2)
  4. Now, go to your manufacturer’s official site and search for BIOS/firmware.
  5. Download, install and follow the onscreen instructions to update BIOS.

On many systems, specific OEM tools can be downloaded and used to ease this firmware updating process. Acer care center, Dell Support Assist, etc are some examples of OEM applications for the purpose.

Change BIOS Configuration

The USB Type-C and Thunderbolt cable connection have default boot support on BIOS. So, if you have connected any I/O device on your system using those cables, the BIOS is going to list it in the boot priority list and consider it as a change in system.

Bitlocker will automatically ask for the recovery key in order to log in. To fix it, Boot support for USB type-C and TBT cable can be disabled from BIOS unless really needed.

  1. Boot up your computer and press the BIOS key(Function keys like F2, F8, etc., usually) constantly before it starts.
  2. Head towards System Configuration > USB Configuration using arrow keys.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (3)
  3. Choose Disable for Type-C/Thunderbolt Boot as well as Pre-boot supports.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (4)
  4. Disable UEFI Network Stack .
  5. Enable Fast Boot.

Re-enable Bitlocker

Sometimes, the saved hardware/software profile won’t get updated within the PCR of TPM. So, each boot would be flagged as change in hardware profile, requiring the recovery key to gain access.

Decrypting and then, encrypting the drive afterward fixes the temporary glitch. Normally, running the manage-bde –protectors –disable C: and manage-bde –protectors –enable C: commands in admin-privileged Command Prompt would resolve the issue.

However, you can try changing BitLocker settings from the Group Policy Editor to ensure further resolution of the issue.

Step 1: Turn off Bitlocker

  1. Press Windows key and type Manage Bitlocker.
  2. Click on Turn off Bitlocker.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (5)
  3. Hit the Turn off Bitlocker button to confirm.

Step 2: Configure Group Policy

  1. Press Windows + R to open Run.
  2. Type gpedit.msc and hit Enter key.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (6)
  3. Expand Computer Configuration >Administrative Template>Windows Components, and then, Bitlocker Drive Encryption.
  4. Now, click on Operating System Drives.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (7)
  5. On the right side section, click on Configure TPM platform validation profile for native UEFI firmware configurations
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (8)
  6. Select Enabled radio button and untick all the options except these:
    PCR 0
    PCR 2
    PCR 4
    PCR 11
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (9)
  1. For slightly older systems with firmware including CSM, click Configure TPM platform validation profile for BIOS-based firmware configurations > Enabled and then proceed by unchecking other options than the PCR 0, 2, 4, 8, 9, 10, 11.
  2. Confirm with Apply and then, OK.

Now, you can turn on Bitlocker and expect to fix the issue.

See Also
Top 8 Ways to Fix ‘There Has Been an Error’ in Microsoft Store on Windows 11

Use Legacy BIOS

Many manufacturers have been pushing forwards UEFI BIOS mode on their products regardless of the TPM model. Though UEFI works well with both TPM 1.2 and TPM 2.0, sometimes the prior version shows compatibility issues with the latest UEFI mode. So, if that’s your case, you can switch to Legacy BIOS mode to check whether it solves the problem.

  1. Enter the BIOS setup menu and go to the Boot tab.
  2. Select Legacy from the Boot Mode.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (10)
  3. Press F10 or any onscreen to save the changes and exit.

Disable Secure Boot

The Secure Boot feature is by default enabled by manufacturers to protect the device from booting up using any unauthorized hardware or software components. So, if it’s enabled, only components trusted by the system manufacturer will be given access.

The feature shows issues when many linux operating systems and not-so-popular GPUs are tried to run. To avoid problems with it, you can try to disable the secure boot feature from BIOS.

  1. Enter the BIOS menu and go to the Boot tab or Security.
  2. Search for Secure Boot and change its state to Disabled.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (11)

Scan for Malwares

Malwares are capable of affecting kernel level process in a system. They can manipulate default behavior of your computer, which counts as a system profile change under TPM scan. If such profile change occurs on every active session, the recovery key is required following each reboot.

You should routinely check for threats on your system to be secure from the discussed issue and other security risks.

  1. Open Settings with Windows + I keys.
  2. Go to Privacy & security > Windows Security
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (12)
  3. Click on Virus & threat protection
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (13)
  4. Then, click on Scan options.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (14)
  5. Select Microsoft Defender Antivirus (offline scan) and press the Scan now button.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (15)

It will reboot your computer and take a while to perform a full scan followed by threat treatments.

Windows Update

Updating Windows would fix bugs and also solve TPM/Bitlocker compatibility issues of the current version. Sometimes, BIOS and other driver updates are also bundled along with the Windows update, which fixes various issues including the discussed one.

  1. Press Windows + I keys to open Settings.
  2. Go to Windows Update and hit the Check for updates button.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (16)
  3. Click on the Download & Install button and follow the onscreen instructions to complete updating.

Consider resetting Windows Update Components, if you face any issues while updating.

If the problem occurred after installing an Windows update, you can uninstall the update to roll back your computer to the last known stable point.

  1. Go to Windows Update > Update History in Settings.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (17)
  2. Scroll to and click on Uninstall updates.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (18)
  3. Click on Uninstall within the last update of the shown list, which is the latest one.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (19)
  4. Press the Uninstall button to confirm.

Solve TPM Problems

Regardless of the causes, the problem sums up as ‘TPM not releasing the decryption key’ during boot. The issue can also reside within the TPM itself and not all the above-mentioned ones. Outdated saved decryption keys, corrupt drivers, or defective modules are possible causes.

Clear TPM Key

If the saved keys within TPM are the wrong ones the device will show the discussed issue on every reboot. Clearing TPM will remove the keys and also re-initialize Bitlocker from its default state to fix the problem.

  1. Press Windows + R to open Run.
  2. Type tpm.msc and hit Enter.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (20)
  3. Click on Clear TPM…
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (21)
  4. Hit the Restart button.

Reinstall TPM Driver

Corrupt TPM drivers can also cause problems in the overall function of TPM. You can try reinstalling the driver to fix it.

  1. Type devmgmt.msc on Run to open Device Manager.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (22)
  2. Double-click to expand the Security devices category.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (23)
  3. Right-click on the Trusted Platform Module and choose Uninstall device.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (24)
  4. Confirm with the Uninstall button.
  5. Now, click on the Action menu and select Scan for hardware changes.
    Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (25)

The driver should reinstall shortly.

Replace TPM

If nothing Fixes this problem for you, odds are the TPM module hardware itself is faulty. In such a case, consider contacting support from manufacturers for TPM replacement.

Bitlocker Keeps Asking For Recovery Key? Here’s How To Fix It (2024)
Top Articles
De verschillende doorstuurmethodes - TransIP
Kim Zolciak and Kroy Biermann Reach Agreement in Foreclosure Case; Here's What Happens Next
Sansha Command Relay Outpost
Exxon Mobil Corporation (XOM) Stock Price, Quote & News - Stock Analysis
15 Best Places to Find Sublets in New York City - NYC Reviewed
11 Best Apartment Rental Sites NYC | PropertyClub
Cars for Sale by Owner in Sacramento, CA
So You Want to be a Substitute Teacher?
No Cable Schedule
The Herald-Sun from Durham, North Carolina
How jiggers were brought to Africa 150 years ago and why we need an apology
How to Remove a Jigger: Uncover the Secrets to Eradicate These Pesky Parasites
Latest Posts
Ik wil mijn domeinnaam doorsturen
Prada Bag Identification: How to spot a fake Prada bag
Article information

Author: Domingo Moore

Last Updated:

Views: 5476

Rating: 4.2 / 5 (53 voted)

Reviews: 84% of readers found this page helpful

Author information

Name: Domingo Moore

Birthday: 1997-05-20

Address: 6485 Kohler Route, Antonioton, VT 77375-0299

Phone: +3213869077934

Job: Sales Analyst

Hobby: Kayaking, Roller skating, Cabaret, Rugby, Homebrewing, Creative writing, amateur radio

Introduction: My name is Domingo Moore, I am a attractive, gorgeous, funny, jolly, spotless, nice, fantastic person who loves writing and wants to share my knowledge and understanding with you.