The 24H2 version in Windows 11 enables automatic BitLocker encryption by default. While this security feature helps prevent unauthorized access to a lost or stolen laptopa lot of users are seeing BitLocker lockouts and blue screen of death instead. If you’ve lost access to a BitLocker recovery key or don’t want to enter it repeatedlya few simple tweaks can stop the recovery screen from appearing.
BitLocker Lockouts in Windows 11
BitLocker lockouts mainly affect Windows 11 24H2 clean installations when using a Microsoft account. Some users suddenly find themselves unable to access their deviceseither during startup or at random. If you end up facing a blue BitLocker recovery screenyou’ll need to enter a 48-digit key.
This is part of Microsoft’s automatic BitLocker encryptionwhich is set as default from Windows 11 version 24H2 onward. Other causes include Trusted Platform Module (TPM) systemswhich store BitLocker keys. Some Windows bugs during updates or hardware or firmware changescan also trigger lockouts.
The worst case is not having access to your PC Microsoft accountmaking it impossible to enter a BitLocker recovery key to unlock your own device. Alsofor Windows 11 Home usersthis problem is a concern because they do not have BitLocker enabled.
Do This Immediately When BitLocker Encryption Locks You Out
If you suddenly find yourself facing a BitLocker recovery screenhere are two options depending on whether you use Windows 11 Pro/Enterprise or Home.
Pro/Enterprise users can go directly to the Microsoft account recovery pageobviously on another device. Sign in with your Microsoft account to find your 48-digit recovery keywhich you then need to enter in the field. Nextclick Press Enter to continue at the bottom of the recovery screen.
For Windows 11 Home usersthis security setting is unavailable. For them as well as for those who have lost access to their Microsoft accounts as a Pro userthere is another option. Right below the blue recovery screenclick Press Esc for more recovery optionsagain at the bottom of the recovery screen.
Nextclick on Skip this drive at the bottom right. This takes you to the Windows Recovery Environment. Just click Continue to log in as usual.
To protect yourself from getting locked out of your system due to automatic BitLocker encryptiondo the following things.
1. Regain Access to Your PC Microsoft Account
It’s common for Windows users to rarely use their Microsoft accountsespecially if they have an Outlook or Hotmail email they no longer access. Howeverthe Windows license key and BitLocker Recovery key (for Pro users) is linked to this account. Sowhen signing inyou need to have access to your account password.
You might mostly need to reset the Windows password you forgot from the sign-in screen. Or if you have a blocked or inaccessible accountyou need to visit the Recover your Microsoft account pagealso available from sign-in.
2. Prevent BitLocker from Encrypting Automatically
To stop BitLocker from auto-encrypting drives on Windows 11especially in the 24H2 updateuse PowerShell commands to disable or manage its settings.
Open PowerShell in administrator modeand as a Pro userfirst verify that BitLocker is enabled on your drive.
Get-BitLockerVolumeAfter thisyou can disable automatic BitLocker encryption during a Windows boot or installation:
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\BitLocker" -Name "PreventDeviceEncryption" -Value 1
To re-enable encryptionjust set the value in above command to “0.”
Windows 11 Home users need to turn off Device encryptionwhich is a security setting called “EnableSecurityMode.” Its value should be set to 0.
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\BitLocker" -Name "EnableSecurityMode" -Value 0
You can also disable BitLocker encryption entirely. Go to Manage BitLocker from search menuand choose Turn off BitLocker. This should be done if you’re absolutely sure you don’t need BitLocker protection as there are many alternatives such as VeraCrypt.
BitLocker protection is extremely useful for your Windows PC as it prevents data thieves from accessing your device. BitLocker also helps protect your removable drives including USBthrough BitLocker to Go.
