Checks protected drives
Each BitLocker volume returned by Windows is examined. The script records drives whose BitLocker protection status is enabled.
Windows Utility
BitLocker Recovery Key
BitLocker Recovery Key is a free PowerShell utility that checks the BitLocker volumes visible from the current Windows installation, collects available recovery passwords from protected drives, and saves the results to a local text file for easy reference.
Overview
What the utility does
The script uses Windows' Get-BitLockerVolume command to enumerate BitLocker volumes. It processes volumes whose protection status is On and looks specifically for key protectors of type RecoveryPassword.
Finds recovery passwords
For each protected volume, the script filters its key protectors for the RecoveryPassword type and records any recovery password returned by Windows.
Saves locally
The results are written to BitLockerRecoveryKey.txt in the same directory as the script. If the script directory is unavailable, it uses the current working directory.
Leaves BitLocker settings unchanged
The script reads BitLocker volume and protector information and writes a text file. It does not contain commands to enable, disable, suspend, decrypt, or reconfigure BitLocker.
How It Works
Running BitLocker Recovery Key
- Download and extract the BitLocker Recovery Key ZIP.
- Run the PowerShell script from within Windows.
- The script checks the BitLocker volumes available to the current Windows installation.
- Protected volumes are listed and any
RecoveryPasswordprotectors returned by Windows are added to the output. - If output is found, the script saves
BitLockerRecoveryKey.txtbeside the script and displays the saved path. - The script waits for you to press Enter before closing.
The script itself does not declare an administrator requirement. Windows permissions and BitLocker configuration can still affect whether recovery-key information is available to the current session.
Output
What the text file contains
The output is intentionally simple so it can be opened in any text editor. Each protected drive gets a drive heading, followed by any recovery password returned for that volume.
Recovery Key for drive C:
Recovery Password: 123456-123456-123456-123456-123456-123456-123456-123456
The example above uses a fake recovery password. Your actual recovery password is sensitive information. Store the generated text file somewhere secure and avoid sharing it with anyone who should not have access to the encrypted drive.
Behavior
What happens in different situations
BitLocker protection is on
The drive is added to the output. If Windows reports one or more recovery-password protectors, those passwords are written under that drive.
No protected drives are found
The script displays a message that no BitLocker-protected drives or recovery keys were found and does not create the normal results file.
A protected drive has no RecoveryPassword protector
The script can still add the drive heading because protection is enabled, but no recovery-password line will be added unless Windows returns a protector of type RecoveryPassword.
An error occurs
The script catches the error and displays a message beginning with “Failed to retrieve the BitLocker recovery key” followed by the Windows/PowerShell error message.
FAQ
Frequently asked questions
Does this turn BitLocker on or off?
No. The script only reads BitLocker information and saves output to a text file.
Does it decrypt the drive?
No. There are no decryption commands in the script.
Where is the recovery-key file saved?
Normally beside the PowerShell script as BitLockerRecoveryKey.txt. If PowerShell cannot determine the script directory, the current working directory is used instead.
Does it look up keys from a Microsoft account?
No. This utility only reads recovery-password protectors returned from the BitLocker volumes available inside the current Windows installation.
Will it show every type of BitLocker key protector?
No. The script specifically filters for the RecoveryPassword protector type.
Why should I protect the output file?
The file can contain the recovery password used to unlock a BitLocker-protected drive, so it should be treated as sensitive information.