Key Points
- BitLocker recovery keys must be backed up to prevent data loss.
- Windows 11 provides multiple built-in methods, including those in Settings, Control Panel, PowerShell, and offline options for backing up BitLocker recovery keys.
- Each BitLocker recovery key backup method suits different needs, allowing users to store keys in a Microsoft Account, on a USB drive, in a file, or as a printed copy.
- NinjaOne can automate BitLocker key backups and monitoring across managed devices using PowerShell, as well as perform continuous BitLocker status checks.
BitLocker recovery keys ensure access to encrypted drives when authentication conditions are not met. Losing access to a key can result in permanent data loss, which is why it’s recommended to back up your BitLocker recovery keys as soon as possible.
This guide will walk you through the various methods for backing up your keys, supporting both personal devices and enterprise environments.
Backing up your BitLocker recovery key in Windows 11
You can back up the BitLocker key using the Windows Security app, from the Control Panel BitLocker console, with PowerShell, or by printing recovery keys.
📌 Prerequisites:
- Windows 11 Pro, Enterprise, or Education device with BitLocker support enabled.
- BitLocker is enabled on at least one volume
- Administrator rights for some backup methods
- Access to a Microsoft account, USB drive, or an Active Directory or Entra ID environment, depending on the selected backup method.
Method 1: Back up the BitLocker key from the Windows Security app
This step is the easiest way to back up your BitLocker.
📌 Use Case: Recommended for individual devices where the user has interactive access to Windows and needs a quick, manual way to back up the BitLocker recovery key using the graphical interface.
- Press Win + I to open Settings.
- Go to Privacy & security.
- Select Device encryption.
- If redirected, click BitLocker Drive Encryption under Related settings.
- Locate the encrypted drive (for example, Windows (C:)).
- Click Back up your recovery key.
- Choose one of the available backup options:
- Save to your Entra ID account
- Save to your Microsoft account
- Save to a file
- Print the recovery key
Method 2: Back up the key from the Control Panel BitLocker console
This method is similar to method 1, but it uses Control Panel instead of Settings.
📌 Use Case: Use this method if you’re more comfortable with the traditional Windows interface, or you don’t see the right options in the Settings app but know BitLocker is enabled.
- Press Win, type Control Panel, press Enter.
- Click System and Security, then BitLocker Drive Encryption.
- Look for the drive that shows BitLocker: On.
- Next to the drive, click Back up your recovery key.
- Choose a backup destination, similar to method 1.
Method 3: Use PowerShell to back up BitLocker recovery keys
This method uses PowerShell and is designed for system management.
📌 Use Case: Use this method if you want a cleaner way to export recovery keys or manage different computers automatically.
- Press Win, type PowerShell, then click Run as administrator.
- Copy and paste the following into the prompt, then press Enter:
- Check BitLocker information:
Get-BitLockerVolume -MountPoint "C:"
- List the key protectors (to see IDs):
(Get-BitLockerVolume -MountPoint "C:").KeyProtector
- Export the recovery key to a file:
Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId <ID> -Path "C:\Backup\C-recovery-key.txt"
- Check BitLocker information:
Note: Replace <ID> with the KeyProtector ID you chose.
Method 4: Print or save recovery keys for offline storage
This method is about having a physical copy if you prefer having something tangible.
📌 Use Case: Recommended when you need an offline copy of the BitLocker recovery key, such as a printed record or a file stored on removable media.
- Press Win + I to open Settings.
- Go to Privacy & security.
- Select Device encryption.
- If redirected, click BitLocker Drive Encryption under Related settings.
- Locate the encrypted drive (for example, Windows (C:)).
- Click Back up your recovery key.
- Choose one of the offline backup options:
- Print the recovery key
- Save to a file, then select a removable device (such as a USB flash drive)
Troubleshooting common BitLocker recovery key issues
The following are common issues users encounter when backing up BitLocker recovery keys, along with solutions to resolve them:
- Recovery key not backing up to Microsoft Account: Ensure the device is signed in with a Microsoft account, not a local or work account.
- BitLocker console missing: Confirm you are running Windows 11 Pro, Enterprise, or Education, as BitLocker is not available on Windows Home.
NinjaOne services that help back up BitLocker recovery keys
NinjaOne allows you to automate recovery key backup processes across environments using PowerShell Commands and constant BitLocker status monitoring. Administrators can also script backup routines, enforce compliance, and support secure storage of devices’ escrow keys during onboarding.
Prevent data loss by backing up your BitLocker recovery key
Backing up your BitLocker recovery key is an essential step in protecting your data and ensuring access to encrypted drives. Utilize built-in tools, command-line utilities, and automation to maintain reliable recovery processes and safeguard device data.
Related topics:
