How to Remove Unused BitLocker Recovery Keys

Unused BitLocker recovery keys in your Microsoft account can be removed to keep things tidy and improve security.

BitLocker is a Windows feature that encrypts your drives to protect your files. This encryption makes sure only people with the right password or recovery key can access your data.

Over 10 million BitLocker recovery keys are stored in Microsoft accounts. Removing old, unused keys ensures you only have active ones, making it easier to manage and preventing confusion if you ever need a key.

• External drives like USB sticks
• Fixed drives inside your computer
• Your main Windows drive (where your system is installed)

When you enable BitLocker on your main Windows drive, it often unlocks automatically at startup thanks to a security chip called TPM (Trusted Platform Module). This means you won’t need to enter a password every time.

During setup, Windows prompts you to save a crucial ‘recovery key.’ This key is your backup; it’s essential for unlocking your drive if you forget your password or encounter issues.

You can save this crucial recovery key in a few different places:

• In your Microsoft account online
• On a USB flash drive
• As a printed paper copy

If you lose your recovery key and can’t fix your PC in other ways, you might have to reset or reinstall Windows, which can erase your files.

If you erased or reset a device that had BitLocker turned on, the old recovery key saved for that device won’t work anymore. So, there’s no need to keep it saved if you don’t need it.

How to Delete BitLocker Recovery Keys from Your Microsoft Account

Removing Unused BitLocker Recovery Keys from Your Microsoft Account helps keep things tidy. You can easily delete BitLocker recovery keys from your Microsoft account if you no longer need them for a particular computer or drive. Deleting old keys is a good security step after you’ve replaced hardware or stopped using an encrypted drive, helping to keep your account safe from old, unused information.

1. Go to the BitLocker recovery keys page on the Microsoft website.
2. Sign in with your Microsoft account email and password if asked.
3. You will see a list of recovery keys saved to your account.
4. Find the key you want to delete. Click on the More options button (it looks like three dots) next to that key.
5. Click Del to remove the key.
6. Confirm that you want to delete the key when asked.

Here is what it looks like on the website:

Choose the recovery key and click the three dots to delete it.

Confirm you want to delete the recovery key.

That’s all! The recovery key will be removed from your account.