>

Back up your BitLocker recovery key before an emergency

Use manage-bde -protectors -get to display the 48-digit recovery key for a BitLocker-encrypted drive so you can save it somewhere safe.

WindowsbackupbitlockerencryptionLow risk
Run as admin: manage-bde -protectors -get C: — the 48-digit Recovery Password is your recovery key.

01Command

Command
$ manage-bde -protectors -get C:

02What it does

BitLocker may demand a 48-digit recovery key after hardware changes, BIOS updates, or security events. manage-bde -protectors -get C: lists every key protector on the C: drive, including the Recovery Password. Copy that number to a USB stick, print it, or store it in your Microsoft account — never only on the encrypted disk itself.

03Risk

RiskLow risk
RequirementsRun in an elevated (Administrator) Command Prompt or Terminal; requires BitLocker-protected drive (Pro/Enterprise edition)
!Warning: Keep the key offline and away from the PC it unlocks; anyone with the key can decrypt the drive.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • manage-bde protectors (Windows Commands)
    Microsoft Learn · vendor-doc · 2026-09-17
    Evidence: Official reference for manage-bde -protectors: -get lists the key protectors of the volume and -type RecoveryPassword filters for the 48-digit recovery password.
  • Manage-BDE - BitLocker Drive Encryption
    SS64.com · technical · 2026-09-17
    Evidence: Lists manage-bde -protectors ('Manage protection methods for the encryption key') and RecoveryPassword as a BitLocker key protector, with -status and related examples.

Last verified: 2026-09-19 · Category: Security & Privacy