How to Remove Unused BitLocker Recovery Keys
BitLocker recovery keys are backup passwords Windows 10 and 11 save to your Microsoft account to unlock your PC if your system stops working. Removing unused BitLocker recovery keys from your account stops you from mixing up current passwords with old ones when you need to fix a locked drive.
Go to the BitLocker recovery keys page on the Microsoft website and sign in. Find the key you wish to remove, click the three-dot “More options” button next to it, and then click “Delete.” Confirm the deletion to remove the key from your account.
Old keys build up every time you reinstall Windows or set up device encryption on a new laptop. Cleaning out these dead entries leaves only the keys for your active hard drives and keeps your Microsoft account tidy.
- External drives like USB sticks
- Fixed drives inside your computer
- Your main Windows drive (where your system is installed)
When BitLocker runs on a primary drive, a security chip called TPM (Trusted Platform Module) unlocks it automatically at startup. You skip entering a password on every boot.
Setup routines prompt you to save a recovery key. This backup unlocks the drive if passwords fail or hardware encounters errors.
You can save these backup keys in several locations:
- In your Microsoft account online
- On a USB flash drive
- As a printed paper copy
Losing a recovery key alongside an unbootable PC forces a Windows reset or clean installation, erasing stored files in the process.
Wiping or resetting an encrypted device renders its stored recovery key obsolete. Old keys serve no purpose once a machine undergoes a factory reset.
How to Delete BitLocker Recovery Keys from Your Microsoft Account
You can remove old backup codes from the cloud by going to the official Microsoft webpage where your login credentials are saved. Removing these entries helps you clean up your profile after you sell an old laptop or swap out computer parts. It also keeps your current setup secure so nobody else can see your active device data.
- Go to the BitLocker recovery keys page on the Microsoft website.
- Sign in with your Microsoft account email and password if asked.
- You will see a list of recovery keys saved to your account.
- Find the key you want to delete. Click on the More options button (it looks like three dots) next to that key.
- Click Delete to remove the key.
- Confirm that you want to delete the key when asked.
The management interface appears online like this:
Locate the target recovery key, click the three dots, and select the delete option.
Confirm the deletion prompt.
The recovery key disappears from the account permanently.
Summary
Deleting outdated BitLocker recovery keys keeps Microsoft accounts tidy and secure. Managing these items online follows the procedure outlined above.
Can I delete BitLocker recovery keys?
BitLocker recovery keys face deletion at any time. Removing all keys for a specific device sometimes requires deleting its record from Microsoft Entra ID (a cloud-based identity and access management service), which typically necessitates wiping the device.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!