Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any way to change the Bitlocker Recovery Key?

share|improve this question
up vote 3 down vote accepted

My answer was incorrect, see the great answer by nonsensical101.

share|improve this answer
    
This answer is incorrect, please see @nonsensical101's answer. – charleswj81 Jan 21 '13 at 3:08
    
What charleswj81 said. – Mark Johnson Jul 17 '14 at 18:29
1  
I'd delete it, but you can't delete the accepted answer. – Joshua Jul 29 '14 at 0:21

You can change the recovery password without decrypting in one of two ways 1) using the manage-bde tool or 2) using the Win32_EncryptableVolume WMI interface. The first method doesn't require any programming/scripting so we'll go that route.

Assume X: is the BitLocker protected drive you want to change recovery password for.

  1. Open an elevated cmd prompt
  2. Type manage-bde X: -protectors -get -type RecoveryPassword
  3. Locate the protector you want to cycle (probably the only one displayed) and copy its ID field (including the curly braces).
  4. Type manage-bde X: -protectors -delete -id [paste the ID you copied]
  5. Type manage-bde X: -protectors -add -rp [optionally specify the new 48-digit password or enter nothing to have it randomly generated for you]

And you're done! You've changed your recovery password.

Note: If you get an error when you try to delete the recovery password, this is likely because a recovery password is required by Group Policy on your system. To get around this, first suspend BitLocker with manage-bde X: -protectors -disable then after you've added the new recovery password, resume protection with manage-bde X: -protectors -enable.

share|improve this answer
    
Actually, I'm referring to the entry that manage-bde calls the "Numerical Password." – Zian Choy Nov 10 '10 at 20:10
    
I've updated my answer to apply to recovery password. You should edit your question to specify the protector you're interested in. The "recovery password" is the human readable 48-digit password. The "recovery key" is the 256-bit binary file. – mtlynch Nov 16 '10 at 10:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .