BitLocker Default in Windows 11 24H2 Raises Data Recovery Concerns

Apps & Games / hashcat / Desktop / Windows / News hashcat for Desktop Windows / BitLocker Default in Windows 11 24H2 Raises Data Recovery Concerns
10 Jul 2024

On a clean installation of the Windows 11 24H2 build, Microsoft enables BitLocker encryption by default. Lately, many laptop makers have started enabling BitLocker to protect user data in case of theft. Many users are unaware of it, leading to data loss. The system asks the user to enter the BitLocker recovery key on the blue screen. So if you are wondering whether you can bypass the BitLocker Recovery key on Windows 11, you have come to the right place.

Method 1: Look For the Recovery Key in Your Microsoft Account

Head over to account.microsoft.com/devices/recoverykey and sign in with the Microsoft account that was logged into your PC. Here, you will find the 48-digit BitLocker recovery key. Note it down. Now, move to the BitLocker blue screen and enter the recovery key and hit Continue. Once you do that, it will decrypt the drive, and you can log in to your PC without any issues. Now, go ahead and turn off BitLocker on your PC using our dedicated Disable BitLocker in Windows guide.

Method 2: Locate the BitLocker Recovery Key on Other Drives

On the BitLocker blue screen where you are asked to enter the recovery key, press the Esc key. If it asks you to enter the recovery key again, press the Esc key again. Now, click on the Skip this drive option at the bottom right. Here, click on Troubleshoot. After that, navigate to Advanced options > Command Prompt.

In the Command Prompt window, type “notepad” and hit Enter. In the Notepad window, go to File > Open. Next, go to This PC and select a drive to open. The encrypted C drive won’t be accessible, but you can open other drives. Now, look for the recovery key. It should be a text file and the filename starts with “BitLocker Recovery Key …” Open it, and you will find the 48-digit recovery key. Note it down, restart your PC, and enter the recovery key. You can now access your PC right away. Apart from that, look for the BitLocker Recovery Key text file on your external thumb drives as well.

Method 3: Recover Data From Other Drives

Firstly, follow the above method and open the Command Prompt window in the Recovery screen. Next, type “notepad” and hit Enter. Here, go to File > Open. After that, click on This PC and then open other drives. You will be able to access them. Now, connect an external USB drive to your PC. Now, simply copy the files and paste them to your external USB drive. This way, you can copy and recover files from other unencrypted drives.

Method 4: Reinstall Windows 11

If none of the methods worked, and you have recovered some of the data from other drives, you have no other options but to reinstall Windows 11. Sadly, this means all your data will be lost. You can read our detailed Perform a clean Windows 11 install guide to learn more.

While there is no easy way to tamper with the TPM chip, stacksmashing on YouTube, a security researcher has demonstrated a way to hack the TPM chip and intercept the recovery key. It requires advanced security knowledge, hardware understanding, and a purpose-made Raspberry Pi Pico to intercept the recovery key between the TPM chip and the CPU during the boot process.

Again, if the TPM chip is incorporated inside the CPU (called fTPM) then you can’t intercept it. Anyway, those who are interested in this solution can go through it.

How to unlock BitLocker if forgot password and recovery key?

If you forgot both your BitLocker password and recovery key, unlocking the drive can be very challenging. Your options are limited: 1. Use any saved BitLocker recovery key ID linked to your Microsoft account. Sign in at https://account.microsoft.com/devices/recoverykey. 2. If you have previously saved a backup of the recovery key to a file or printed it out, you can use that. Unfortunately, without either the password or the recovery key, the drive data is likely irretrievable.

How to encrypt a USB drive on Windows 11 without BitLocker?

To encrypt a USB drive on Windows 11 without BitLocker, you can use third-party software such as VeraCrypt or AxCrypt. For example, with VeraCrypt: 1. Download and install VeraCrypt. 2. Plug in your USB drive. 3. Open VeraCrypt and select 'Create Volume'. 4. Choose 'Encrypt a non-system partition/drive' and follow the prompts to set up encryption with a password and encryption settings of your choice. Always ensure you back up important data before starting encryption.
Update: 10 Jul 2024
hashcat

hashcat download for free to PC or mobile

5
873 reviews
3777 downloads

News and reviews about hashcat

Loading...