Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is there any way to change the Bitlocker Recovery Key?

share|improve this question

2 Answers 2

up vote 3 down vote accepted

My answer was incorrect, see the great answer by nonsensical101.

share|improve this answer
    
This answer is incorrect, please see @nonsensical101's answer. –  charleswj81 Jan 21 '13 at 3:08
    
What charleswj81 said. –  Mark Johnson Jul 17 at 18:29
    
I'd delete it, but you can't delete the accepted answer. –  Joshua Jul 29 at 0:21

You can change the recovery password without decrypting in one of two ways 1) using the manage-bde tool or 2) using the Win32_EncryptableVolume WMI interface. The first method doesn't require any programming/scripting so we'll go that route.

Assume X: is the BitLocker protected drive you want to change recovery password for.

  1. Open an elevated cmd prompt
  2. Type manage-bde X: -protectors -get -type RecoveryPassword
  3. Locate the protector you want to cycle (probably the only one displayed) and copy its ID field (including the curly braces).
  4. Type manage-bde X: -protectors -delete -id [paste the ID you copied]
  5. Type manage-bde X: -protectors -add -rp [optionally specify the new 48-digit password or enter nothing to have it randomly generated for you]

And you're done! You've changed your recovery password.

Note: If you get an error when you try to delete the recovery password, this is likely because a recovery password is required by Group Policy on your system. To get around this, first suspend BitLocker with manage-bde X: -protectors -disable then after you've added the new recovery password, resume protection with manage-bde X: -protectors -enable.

share|improve this answer
    
Actually, I'm referring to the entry that manage-bde calls the "Numerical Password." –  Zian Choy Nov 10 '10 at 20:10
    
I've updated my answer to apply to recovery password. You should edit your question to specify the protector you're interested in. The "recovery password" is the human readable 48-digit password. The "recovery key" is the 256-bit binary file. –  nonsensical101 Nov 16 '10 at 10:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.