Dear Katy,
Based on your description, BitLocker recovery keys are typically stored in one of the following locations:
The user’s Microsoft account (for personal devices)
The Azure AD or Microsoft Entra ID portal (for work/school accounts)
A local printout or saved file during initial setup
A USB drive or external storage if manually saved
If the key is not found in any of these locations, it’s possible that:
- The device was not properly joined to Azure AD or not backed up during setup.
- The key was never escrowed to the account due to policy or configuration.
- The device was preconfigured by the OEM or IT team with BitLocker enabled before account association. Here are Recommended Next Steps
- Verify Azure AD Device Registration Sign in to the Microsoft Entra admin center: entra.microsoft.com Navigate to Devices > All Devices, locate the laptop, and check if a recovery key is listed.
- Check for Local Key Storage If the device was set up manually, check with your IT team or the user if the key was saved to USB drive, printed, or exported during setup.
- Confirm Device Ownership Ensure the device is associated with the correct Microsoft account. Sometimes keys are stored under a different account than expected.
- Escalate via Support If the key cannot be retrieved, and the device cannot be reset, we recommend escalating through Microsoft Support with the device’s serial number, BitLocker recovery key ID, and proof of purchase. You can initiate a support request here: Microsoft Support for Business
For security reasons, Microsoft cannot generate or retrieve BitLocker recovery keys on your behalf. If the key is not available through any of the above methods, the only remaining option may be a clean reinstallation of Windows, which requires erasing the drive.
Let me know how it goes, and if this answer helps, feel free to hit “Accept Answer” so others can benefit too 😊 T&B,
Domic.