Windows Security · BitLocker & Encryption · Lesson 5 of 5

Challenge: The Locked Laptop Before the Trip

A firmware update locks a laptop the night before a trip. Get it open.

The blue screen at bedtime

Your neighbor Dev flies out tomorrow morning for a work conference. Tonight his laptop installed a firmware update from the maker's support app and restarted. Now, instead of the sign-in screen, he sees a blue screen titled BitLocker recovery. It asks for a recovery key and shows a key ID.

Dev is sure he's been hacked. He wants to keep restarting until it goes away, or call the number in a pop-up he saw yesterday.

You know better. A firmware update changes the startup parts the TPM checks, so the TPM held back the key. The laptop isn't broken, and his files are still there. The drive is simply waiting for proof that it's really Dev.

The laptop runs Windows 11 Home, and Dev signs in with his Microsoft account.

Reading the 48 digits

On his phone, Dev goes to aka.ms/myrecoverykey and signs in with the same Microsoft account. Two keys are listed, one for an old laptop. He compares the first 8 characters of each key ID with the blue screen and picks the match.

Now he types the key, slowly, group by group. He checks each group against his phone before moving on.

A spare copy for the road

The laptop starts, and Dev signs in. He relaxes, then realizes something. If this happens again at the hotel, with no phone signal or a dead phone, he's stuck.

He wants a spare copy of the key for the trip. He can open the recovery key page again tonight and print the key, or write it down carefully. The question is where that copy should travel.

Remember what the key can do. Anyone holding the key and the laptop together can unlock every file on it.

Stopping it next time

Back home after the trip, Dev's company gives him a new laptop with Windows 11 Pro. It's a work laptop signed in with his work account, and IT warns him a firmware update is coming next month.

Dev wants to avoid the blue screen this time, and know where to turn if it shows up anyway. He also wonders if he should just switch encryption off to make life easier.