Data Recovery · LanCologne

What should you do if you have lost your BitLocker recovery key?

BitLocker requires the 48-digit recovery key if the system environment has changed from the TPM’s perspective – for example, following a BIOS/UEFI update, a motherboard replacement, changes to Secure Boot settings or a hard disk replacement. Decryption is not technically possible without the key; it is therefore essential to locate a stored copy.

Free enquiry

Technical background

The key may be stored in the user’s Microsoft account (often automatically in the case of device encryption on personal devices), in Microsoft Entra ID or Intune, in the local Active Directory, in an MDM system, as a printed copy, or as a file on a USB-Stick. The key ID displayed by BitLocker at start-up helps to identify the correct key.

What you should – and shouldn’t – do now

  • Make a note of the key ID displayed on the BitLocker screen.
  • Ask your Microsoft account, corporate IT department or Entra ID/AD administration for the key.
  • No reinstallation of Windows and no initialisation of the hard drive.
  • In the event of a hardware fault: do not continue to use the storage device; await the results of the diagnosis.

Here’s how we do it

  • Joint review of possible storage locations based on the key ID.
  • In the event of a physical fault: back up as a raw image, then decrypt the image using the key that has been found.
  • If a password or start key is available: check whether access is possible using it.

Borders

  • Without a recovery key, password or other form of key protection, decryption is not possible as things stand at present.
  • We do not offer a service to „crack“ AES encryption, as this is not technically feasible.

Possible results

Either decrypted data (once the key has been found) or a clear statement that access is not possible without the key.

How we carry out data recovery

Every data storage device is first diagnosed in our own laboratory in Cologne; the diagnosis is free of charge. You will then receive a written quote and can decide whether to accept it. If you decline, you can collect the data storage device from the laboratory by appointment – there are no postage costs involved – or we will post it back to you; in which case postage and packaging costs may apply. Data is recovered from copies, not from the original – using professional data recovery hardware such as the PC-3000. If a drive needs to be opened, this is carried out on a HEPA H14-filtered clean bench. We do not offer a guarantee of success prior to diagnosis, as this is simply not possible in a professional context. Your storage device and your data will remain confidential and will not be passed on to third parties.

1Enquiries and submission by post or in person at the laboratory by prior appointment
2Free diagnosis of the cause of the damage
3Written quotation – we will only proceed once you have approved it; if you decline, you may collect the item from the laboratory or we will return it to you (postage and packaging costs may apply)
4Recovery, data verification and confidential handover

Request a diagnosis   Find out more about the process, costs and confidentiality →

Frequently Asked Questions

Can the LanCologne unlock BitLocker without a key?+
No. We can help you find a key that has been left behind and recover data from a faulty storage device so that it can be used afterwards.
Where can I find the key on a personal computer?+
This is often found in the Microsoft account under ‘Device information’ if device encryption was enabled when setting up the account.
Why is BitLocker suddenly asking for the key?+
This is usually due to changes to the firmware, hardware or start-up settings, which the TPM interprets as tampering.

Related topics

🔗 Related topics