Get BitLocker recovery key for enrolled device (2024)

Table of Contents

In this article Requirements Get recovery key from Company Portal website Get recovery key from Company Portal app IT pro support

Article
06/20/2024

Applies to:

Windows 10
Windows 11
iOS/iPadOS
macOS

Access the BitLocker recovery key for a work or school device on the Intune Company Portal website or in the Intune Company Portal app. If you forget the sign-in password and get locked out of an Intune-enrolled PC, you can unlock it with a stored recovery key. This article describes how to retrieve the key from Company Portal.

Requirements

Enrolled, BitLocker-encrypted work or school device provided by your organization
Registered work or school account
Permission to view BitLocker recovery key
Supported devices
Supported version of Company Portal app

You can obtain the recovery key for a work or school device that's encrypted by your organization. Recovery keys aren't available for devices you personally encrypt.

Get recovery key from Company Portal website

Retrieve a personal BitLocker recovery key on the Company Portal website.

On any device, sign in to the Company Portal website.
Go to Devices.
Select the PC you're locked out of.
Select Show recovery key.
Your recovery key appears. For security reasons, the key disappears after five minutes. To see the key again, select Show recovery key.

If a key isn't found, but your device is properly encrypted, contact your IT support person for help. Check the Company Portal website for your organization's helpdesk details.

Get recovery key from Company Portal app

Retrieve a personal BitLocker recovery key in the Company Portal app. The recovery key must belong to a device that's enrolled in Microsoft Intune.

Open the Intune Company Portal app. The following apps support recovery key retrieval:
- Company Portal for iOS
- Company Portal for macOS
Go to Devices, and then select your Windows device.
On the device details page, select Get recovery key. The Company Portal website opens in Safari and shows the key.

After 5 minutes of inactivity, Company Portal returns you to the Windows device details page in the web portal. You can view the key again from there.