Bitlocker windows 10 как разблокировать при загрузке

Функция BitLocker впервые появилась в Vista максимальной и корпоративной редакций, а затем успешно была унаследована всеми последующими версиями операционной системы Windows. BitLocker представляет собой средство шифрования данных на локальном диске, а также службу, обеспечивающую защиту этих данных без непосредственного участия пользователя. В Windows 10 BitLocker поддерживает шифрование с использованием алгоритма AES 128 и AES 256, для защиты данных служба может использовать работающий в связке с данными учётной записи текстовый пароль, а также специальный набор данных, хранящийся на внешнем устройстве — так называемой смарт-карте или токене, которые, между прочим, также используют защиту паролем, в роли которого выступает пин-код.

При активации BitLocker перед процедурой шифрования создаётся идентификатор и ключ восстановления — строка из 48-символов, с помощью которой можно разблокировать доступ к зашифрованному тому в случае утере утери пароля или смарт-карты. После того как том будет заблокирован, получить к нему доступ можно будет только подключив к ПК токен и введя его PIN-код или введя обычный пароль либо воспользовавшись ключом восстановления, если токен или пароль были утеряны. Процедура проста и не требует никаких технических навыков.

Кликните дважды по заблокированному разделу, а когда в верхнем правом углу появится приглашение вести пароль, нажмите в окошке «Дополнительные параметры» → «Введите ключ восстановления».

Скопируйте из файла «Ключ восстановления BitLocker» 48-значный ключ, вставьте его в соответствующее поле и, убедившись, что первые восемь символов ID ключа совпадают с первыми восьмью символами идентификатора ключа в файле «Ключ восстановления BitLocker», нажмите «Разблокировать».

Раздел будет разблокирован точно так же, как если бы вы ввели пароль или воспользовались токеном. Если вы зашифровали системный том, на экране ввода пароля нужно будет нажать клавишу ECS и ввести в ключ восстановления.

До этого мы имели дело с работающей системой, но давайте представим, что по какой-то причине Windows не может загрузиться, а получить доступ к данным нужно. В этом случае можно воспользоваться спасательным диском на базе WinPE, тем же WinPE 10-8 Sergei Strelec, о котором мы уже не раз писали. Всё очень просто. Загрузившись с диска, выполняем те же действия, что и в рабочей Windows: кликаем дважды по зашифрованному диску, жмём «Дополнительные параметры» → «Введите ключ восстановления», вводим ключ и нажимаем «Разблокировать».

В другом спасательном диске — AdminPE для разблокировки BitLocker в контекстном меню предусмотрена опция «Разблокировать, используя ключ восстановления».

Да, можно, но для этого вам всё равно понадобятся ключи шифрования, для извлечения которых хакеры пользуются уязвимостями, которые оставила в криптографической система сама Microsoft, сознательно пойдя на компромисс между надёжностью и удобством. Например, если ваш ПК присоединён к домену, ключи BitLocker автоматически отправляются в Active Directory на случай их утери. Кстати, получение копий ключей из учётной записи или Active Directory является основным способом взлома BitLocker.

А ещё открытые копии ключей сохраняются в оперативной памяти компьютера, а значит и в файле дампа ОЗУ, и в файле гибернации, из которых их также можно извлечь, получив физический доступ к жёсткому диску. Получается так, что каким бы ни был надёжным сам алгоритм шифрования, весь результат его работы нивелируется организацией работы с ключами. Поэтому пользоваться BitLocker есть смысл только вместе с другими механизмами безопасности, в частности, с шифрованной файловой системой и службой управления правами доступа.

manage-bde -protectors -get C:

C:\WINDOWS\system32>manage-bde -protectors -get C:
BitLocker Drive Encryption: Configuration Tool version 10.0.19041
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Volume C: [NVME]

All Key Protectors

TPM:
ID: {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}
PCR Validation Profile:
0, 2, 4, 11

Numerical Password:
ID: {YYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY}
Password:
123456-123456-123456-123456

# Export the BitLocker recovery keys for all drives and display them at the Command Prompt.
$BitlockerVolumers = Get-BitLockerVolume
$BitlockerVolumers |
ForEach-Object {
$MountPoint = $_.MountPoint
$RecoveryKey = [string]($_.KeyProtector).RecoveryPassword
if ($RecoveryKey.Length -gt 5) {
Write-Output ("The drive $MountPoint has a BitLocker recovery key $RecoveryKey")
}
}

REFERENCES:

You might be wondering about seeing BitLocker screen even when this protection tool was never turned on. Bitlocker is an effective tool to safeguard files and folders from unauthorized access by encrypting the drive in which they are located. However, sometimes, this becomes a matter of concern because of the generation of errors and bugs. One such problem is the topic of this post which keeps displaying BitLocker Recovery screen on startup of the computer or Surface device nevertheless it was never enabled. See – Fix: BITLOCKER_FATAL_ERROR BSOD Windows 10.

BitLocker Recovery screen on Startup is a bug in Windows 10, 11 Microsoft is analyzing however any resolution is not offered till now. The error is commonly found to appear on the devices installed KB5012170 (Secure Boot DBX). Several Windows 11 users also inform that this screen prompted after receiving KB5016629. In forums’ discussions, multiple users have complained that each time they launch Windows 10 or 11, they are required to enter a BitLocker recovery key. This is due to UEFI bootloader’s vulnerability. While encountering the issue you can try How to Get BitLocker Recovery Key from CMD in Windows 11 or 10.

Here is how to fix BitLocker Recovery screen on Startup in Windows 11 or 10 –

Way-1: Uninstall Faulty Update

To deal with this issue Microsoft provided a UEFI Revocation List having Secure Boot Forbidden Signature Database (DBX). So Once you come across the problem, first of all, recall whether any update is installed on the device recently. Most people encounter BitLocker Recovery Screen because of faulty Windows updates like KB5016629 and KB5012170. If confused with what ‘update’ then check in the View update history area.

1. Press – Windows key.
2. Type – Updates.
3. Hit – Enter.
4. Click – View update history. In Windows 11, select – “Update history“.

1. Now, select – Uninstall updates.

1. Find the faulty update, then double-click it to uninstall.
2. Click Yes on the prompt.

Way-2: Activate the Secure Boot

Typically, the screen, which requires an encryption key, shouldn’t be requested when a PC boots up during a normal startup process. When a motherboard hardware change occurs, a computer crashes, or if the software suspects an attack on the data, Windows may request the BitLocker recovery key, but this shouldn’t happen frequently. Activation of Secure Boot helped many people to get rid off this screen so follow the steps to enable this feature –

1. Once you are on the blue screen, Press – Esc. This will bring up additional BitLocker recovery options.

1. Click – Skip this drive.

1. Choose Troubleshoot from the next screen.
2. Then, Select – Advanced options.
3. Click on – UEFI Firmware Settings.
4. Now, go with – Restart.
5. The system will be booted to the UEFI screen; go to Security.
6. Select – Change Configuration from the Secure Boot options.
7. Choose – Microsoft Only.
8. Click – OK.
9. Exit the window and then Restart your computer again.

KB4575994 – List of Secure Boot DBX revocation to invalidate vulnerable modules

Way-3: Turn off and then back on BitLocker Protection

Sad thing is the BitLocker recovery screen on startup error may persist occasionally after following the previous method. In this case, try turning off and on your BitLocker protection. However, you must enter desktop in order to perform these tasks which seems impossible at this span of time. Using this trick may help you; log in to Microsoft account on any other device and find the 48-digit BitLocker recovery key. This is also given in – Finding your BitLocker recovery key in Windows. Insert the ‘key’ and reach the desktop.

1. Click on – Start.
2. Type – Control.
3. Hit – Enter.
4. Change View by to ‘Large icons’ or ‘Small icons’.
5. Select – BitLocker Drive Encryption.

1. Select “Turn off BitLocker” for the C drive.

1. A dialog box window will pop up.
2. Select – Yes option to confirm suspension of BitLocker protection.
3. After suspending, give it some time (minutes) before selecting Resume protection. This will update BitLocker TPM.
4. Select – Change password to reset the unacceptable BitLocker “password”.
5. Reboot your computer.

Way-4: Remove Protectors from the Boot Drive

Follow these instructions to exit the BitLocker recovery screen if you have repeatedly input the key but are still unable to move across the ‘screen’.

1. Press – Esc key for more BitLocker recovery options.
2. When the BitLocker recovery screen appears…
3. Choose – Skip this drive.
4. Click – Troubleshoot.
5. Then, choose – Advanced options on the Troubleshoot window.
6. Pick- Command prompt on the Advanced options screen.
7. Enter the following command at the WinRE command prompt: manage-bde -unlock C: -rp recoverypassword, to unlock the drive.
8. Enter the command: manage-bde -protectors -disable C: to discard the protectors from the boot drive.
9. Exit the command prompt and continue to boot into your OS.

Way-5: Deactivate Secure Boot to fix BitLocker screen on startup

Opposite to enabling the Secure boot, disabling the same worked for multiple users to fix frequent BitLocker recovery screen. Therefore, move with the steps below:

1. Try to Start the system and when the bitlocker blue screen appears, press Esc.
2. Choose – Skip this drive.
3. Next, click – Troubleshoot.
4. Go to – Advanced options.
5. Choose – UEFI Firmware Settings.
6. Then, click – Restart.
7. Locate the Secure Boot setting and disable it.

Way-6: Update BIOS

BIOS is an important part of the system which when becomes obsolete causes weird problems on Windows 11 or 10. Repeatedly appearing BitLocker password prompt screen might be the result of the outdated program. This is not an integral part of Windows and manufacturer of the device or motherboard handles its versions. So navigate to the manufacturer’s website and try upgrading your bios to the most recent version. You may have to enter model number of your computer to reach the Software and driver’s page. Check your motherboard’s manual for more information when updating your BIOS. See – Windows 10 – 5 Ways To Know BIOS Version of MotherBoard

Way-7: Make Use of Legacy Boot

The new graphical boot menu in Windows 10 might result in a BitLocker password screen infrequently. Therefore, going back to legacy boot can fix this issue.

1. Enter – “cmd” in the search box of Windows Taskbar.
2. Next, Right-click – Command prompt.
3. Select – Run as Administrator.
4. After the Command Prompt window appears, type without quotes – “bcdedit /set {default} bootmenupolicy legacy“.
5. Press – Enter.

Way-8: Remove Installed Hardware

The BitLocker may trigger problems if you installed new hardware or peripherals. Remove the accessories or hardware one by one and then restart your computer to check if the error goes away.

Way-9: Install Windows update

Whenever Microsoft will officially resolve the BitLocker problem and push the fix through any patch then you will not have to do anything except installing the update.

1. Press – Winkey+I.
2. Select – Update & Security. On Windows 11, select “Windows update”.
3. Click on – Check for updates.
4. When you’re asked, click on – Restart now.

Way-10: Format the C: Drive

This method will work if everything failed to solve BitLocker Recovery screen on Startup in Windows 11 or 10. Reformatting the boot drive will easily and rapidly resolve this issue if you don’t care about data loss.

1. Press – Esc key for more BitLocker recovery options.
2. Click – Skip this drive.
3. Next, choose – Troubleshoot.
4. Then, pick – Advanced options.
5. Choose – Command prompt.
6. Type in the command – list disk.
7. Hit – Enter from the WinRE command prompt.
8. Enter – select disk X.
9. Then, hit – Enter.
10. Enter – list volume command.
11. Press – Enter.
12. Enter – select volume X(Replace X with the volume number of your operating system drive).
13. Press – Enter.
14. Enter – format fs=ntfs label=volume label quick.
15. Hit – Enter to run the format.
16. Reinstall Windows using an external installer or a USB device.

If you are stuck with the problem then find the BitLocker Recovery key at – https://aka.ms/myrecoverykey

Methods:
Way-1: Uninstall Faulty Update
Way-2: Activate the Secure Boot
Way-3: Turn Off & Then Back on BitLocker Protection
Way-4: Take Off Protectors from the Boot Drive
Way-5: Deactivate Secure Boot
Way-6: Update BIOS
Way-7: Make Use of Legacy Boot
Way-8: Remove Newly Installed Hardware
Way-9: Install Windows update
Way-10: Format the C: Drive

That’s all!!

Repair any Windows problems such as Blue/Black Screen, DLL, Exe, application, Regisrty error and quickly recover system from issues using Reimage.

A great many people don’t know how to unlock BitLocker without password and recovery key. If you are one of them, this post of MiniTool is worth reading. It provides several ways for the BitLocker recovery key bypass operation.

BitLocker recovery key is very important when you need it to unlock the BitLocker-protected drive. It is automatically generated from the process of encrypting the specific drive using the BitLocker encryption technology. This key can be stored in different places including your Microsoft account, USB flash drive, a TXT file, or paper document.

However, many people are stuck on the BitLocker recovery screen asking for the recovery key on Startup. Sometimes, the BitLocker recovery screen persists even if they enter the correct recovery key multiple times.

It is so frustrating that you can boot into your system but can’t bypass BitLocker recovery key, like the user from the community.spiceworks.com

Hi all. Is there another way to bypass BitLocker I wasn’t using my computer for more than 2 years and now it’s telling me to input the BitLocker key when I turn it on? I entered the correct BitLocker recovery key multiple times, and am still unable to continue past the initial recovery screen. If you guys have any tools or notions, please share them with me. Thank you.https://community.spiceworks.com/topic/2343015-how-to-remove-or-bypass-bitlocker-without-recovery-key

Can BitLocker Be Bypassed

Can BitLocker be bypassed? The answer is “Yes”. Usually, the BitLocker drive encryption doesn’t ask for the recovery key on a normal startup. However, the Windows system may ask for BitLocker recovery key in some cases, such as motherboard hardware changes, a system crash, or if your program believes the data is under attack. So, it’s possible to bypass BitLocker recovery key.

How to Bypass BitLocker Recover Key on Startup

How to unlock BitLocker without password and recovery key? After analyzing extensive user reports and posts, we summarize the following several methods that may help you bypass the BitLocker recovery screen. Let’s try.

# 1. Find the BitLocker Recovery Key

Of course, the first thing you should do is to try resuming the BitLocker recovery key. When creating a BitLocker encrypted drive, you can save the recovery key to your Microsoft account, USB flash drive, a paper document, and a TXT file. So, try your best to find the key from these places.

If you still can’t find the BitLocker recovery key, move down to the following fixes.

# 2. Get out of the BitLocker Recovery Screen

If you still can’t bypass the BitLocker recovery screen even after entering the correct key, you can follow the steps below to break out of the recovery loop.

Step 1. On the initial BitLocker recovery screen, don’t enter the recovery key instead, press Esc for more recovery options and select Skip this drive at the right bottom of the corner.

Step 2. Select Troubleshoot > Advanced options > Command Prompt in order.

Step 3. In the WinRE Command Prompt window, type the following command and hit Enter to manually unlock the BitLocker drive.

manage-bde -unlock C: -rp <recovery password>

Step 4. Run the following command to suspend your operating system drive protection. After that, you can exit the Command Prompt window and continue to boot into your PC.

manage-bde -protectors -disable C:

Step 5. If you don’t want to encounter the BitLocker recovery screen on startup again, you can suspend it. To do so, open the Control Panel and select BitLocker Drive Encryption. Then click on Suspend protection next to your C drive or click Turn off BitLocker to disable the feature.

–image from windows club

Step 6. Click on Yes to confirm this operation. Wait for several minutes, and click on Resume protection option to update BitLocker TPM > Change password to reset the invalid BitLocker password. After that, restart the computer and see if you can get the BitLocker recovery key bypassed.

# 3. Enable or Disable the Secure Boot

Some users reported that they managed to bypass BitLocker recovery by enabling or disabling the Secure Boot option. Let’s try.

Step 1. Follow Step 1 to Step 2 in # 2 to open the Advanced options screen and select UEFI Firmware Settings > Restart.

Step 2. Your computer should be restarted to UEFI, go to the Security category.

Step 3. Set the Secure Boot to Enabled or Disabled and press F10 to save the change.

Step 4. Exit the BIOS and restart your PC to see if you can bypass BitLocker smoothly.

# 4. Update Your BIOS

Sometimes an outdated BIOS version can trigger various issues like the BitLocker recovery key bypass issue. If you haven’t the latest BIOS version installed, you can read this post to update it. Also, you can check your motherboard’s manual to update BIOS.

# 5. Switch to the Legacy Boot

As it’s well known, Windows 10 uses a fully new graphical boot menu, and sometimes it can trigger the BitLocker bypass problem too. In this case, you can try switching to the legacy boot menu.

Step 1. Type cmd in the Search box, and then right-click the Command Prompt app and select Run as administrator. Click on Yes when you’re prompted with the User Account Control window.

Step 2. In the elevated Command Prompt window, type the following command and hit Enter.

 “bcdedit /set {default} bootmenupolicy legacy”

Once done, restart your computer and check if you can bypass BitLocker recovery successfully.

# 6. Uninstall the Newly Installed Hardware

As discussed above, some hardware changes can trigger the BitLocker screen bypass failed issue too. If you currently installed some new hardware, disconnect them from your computer when booting.

Alternatively, you can revert your system to an earlier date where the BitLocker recovery screen works properly. Here’s how:

Step 1. Follow Step 1 to Step 2 in # 2 to open the Advanced options screen and select System Restore.

Step 2. The system restores window will pop up immediately, select the Recommended option click Next to continue. If the recommended one is not the system restore point where your computer works fine, select the Choose a different restore point option and select the proper one.

Step 3. Then confirm your restore point by clicking the Finish button. Wait for the process to complete and restart your PC to see if the issue gets solved.

# 7. Clean Install Your OS

If none of the above methods help you bypass BitLocker screen, you may have to consider formatting the C drive and reinstalling OS. There are 2 options to help you clean reinstall OS. The first is to use Command Prompt, while another effective way is to use MiniTool Partition Wizard.

Format C Drive with CMD:

Step 1. Follow Step 1 to Step 2 in # 2 to open the Advanced options screen and select Command Prompt.

Step 2. In the elevated Command Prompt window, type the following commands in order and hit Enter after each one.

• diskpart
• list disk
• select disk * (replace * with the disk number that contains the BitLocker drive)
• list partition
• select partition * (replace * with the drive number of your OS drive)
• format fs=ntfs quick

Step 3. Now, you can read this post to reinstall Windows from a USB drive or CD/DVD.

Sometimes, however, the formatting process is not always smooth with CMD. You may encounter some errors like “Windows was unable to complete the format”, “the format did not complete successfully”, etc. Under these circumstances, MiniTool Partition Wizard is a good choice.

Format C Drive with MiniTool Partition Wizard:

MiniTool Partition Wizard DemoClick to Download100%Clean & Safe

Step 1. Use the bootable MiniTool Partition Wizard drive to start your computable as we explain above.

Step 2. In the main interface, select the OS drive that you need to format and click on Format Partition from the left panel. Then you will receive a warning message, click on Yes if you have backed up all important data and confirm this.

Step 3. Click on Apply to execute the operation. Once done, you can reinstall OS.

I’m stuck on the BitLocker recovery key bypass screen for a while. Fortunately, this post explains how to bypass BitLocker recovery screen in detail.Click to Tweet

Have a Try Now

Can BitLocker be bypassed? How to bypass BitLocker recovery screen? After reading all the above information, I believe that you already have known the answers. If you have any other opinions on this topic, please share us in the comment area. Of course, you can send us an email via [email protected] when you have difficulty using the MiniTool software.