04/04/2023
Modern Computer Encryption - Microsoft BitLocker
What is Microsoft BitLocker ?
Microsoft BitLocker is a type of data encryption used on Windows machines. Encryption is a way of securing data. When used in a computer system is turns all your data into rubbish, meaningless one’s and zero’s that cannot be used by anyone without the special key. The key unencrypts the information so it is readable and makes sense. In modern computers this is done “on the fly” as you go. Anybody trying to access your information would not be able to understand any of it. Sounds to good to be true? Well like everything there is a downside. In the case of encryption it is if you don’t have the key you have lost all your data!
How was BitLocker enabled on my computer?
There are 3 ways BitLocker could start protecting your computer:
1. Your computer is a modern computer that meets certain requirements to automatically enable device encryption: In this case, your BitLocker recovery key is automatically saved to your Microsoft account before protection is activated.
2. An owner or administrator of your computer activated BitLocker protection through the Settings app or Control Panel: In this case the user activating BitLocker either selected where to save the key or it was automatically saved to their Microsoft account.
3. A work or school organization that is managing your computer (currently or in the past) activated BitLocker protection on your device: In this case, the organization may have your BitLocker recovery key.
Beginning in Windows 8.1, Windows automatically enables BitLocker Device Encryption on computers that support Modern Standby. With Windows 10 and 11, Microsoft offers BitLocker Device Encryption support on a broader range of devices. These include those that support Modern Standby, and devices that run Windows 10 Home Edition or Windows 11.
BitLocker encryption is often intentionally activated by or on behalf of a user with full administrative access to your computer. This user could be you, another user, or an organization managing your computer. BitLocker is enabled by the user during setup or domain configuration by an administrator. You may not be aware BitLocker is running on your computer without looking for it.
The BitLocker setup process enforces the creation of a recovery key at the time of activation. If you are unable to locate a required BitLocker recovery key and are unable to revert a configuration change that might have caused it to be required, you must reset your device using one of the Windows 10 recovery options. Resetting your device removes all your files.
If anything goes wrong with your computer you will need the BitLocker recovery key. This is normally stored in your Microsoft account but can be tricky to get to.
BitLocker encryption is often intentionally activated by or on behalf of a user. This user could be you, another user, or an organization managing your computer. You may not be aware BitLocker is running on your computer without looking for it.
If anything goes wrong with your computer you will need the BitLocker recovery key. This is normally stored in your Microsoft account but can be tricky to get to.
The BitLocker Recovery Key
If you have any issues with your computers you will need the BitLocker recovery Key. It is a 48 digit numerical “password” and if you enabled it or someone using your login did then the key will be stored in your Microsoft Account. You will need to sign in to your Microsoft Account to get the recovery key. Use this address:
https://account.microsoft.com/devices/recoverykey
Note: If the device was set up, or if BitLocker was turned on, by somebody else, the recovery key may be in that person’s Microsoft account
This may not be easily accessible, Microsoft sometimes requires extra security. Such as wanting to send a code to the backup email address you used when you originally created the Microsoft Account. Being helpful they will first ask you to tell them what the backup email address is. They will offer a clue like m****.com & you have to tell them what email that is then access it to retrieve the special code.
Don’t know the email or have no access? Could be a big issue as the only alternative is to change your backup email address. Microsoft will do this but there is a minimum cooling off period of 30 days, “Its company policy”.
For these reasons I always advise you access them now and back them up. Either print them off and store them somewhere securely or take a photo on your phone.
They can also be stored on a USB stick. If you are logged into a PC with enabled BitLocker you can back up the keys like so:
Tap the Windows Start button and type BitLocker
Select the Manage BitLocker Control Panel app from the list of search results
In the BitLocker app select Back up your recovery key. Select where you want the key backed up
• Save to your Microsoft Account
• Save to a USB flash drive
• Save to a file - You can save your recovery key as a plain text file on any device.
• Print the recovery key - You can simply print the recovery key if you prefer.
Select Finish