Bitlocker recovery keys

Topic

New Reply

[RetiredGeek]

Inquiring minds want to know…if the Bitlocker recovery is stored in your Microsoft Account and you use the same MSA to log on to multiple computers which are all Bitlockered do they all have the same recovery key?

I know this may be seam like an out of the blue query, but it I initially posted it to this thread but thought better of it as I didn’t want to hijack that thread.

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

• This topic was modified 3 years, 8 months ago by RetiredGeek.
• This topic was modified 3 years, 8 months ago by RetiredGeek.

Reply | Quote

Replies

My understanding is that any valid account logon will authorize BL via the TPM, so I am guessing that this also holds true for the same account on multiple machines via one MS account. This is from experience in a production environment.

cheers, Paul

Reply | Quote

You could go to the Control Panel | System and Security | Bitlocker section. Back up the recovery key to a file or print it on each system. Simple visual comparison.

--Joe

Reply | Quote

Recovery keys are listed against a device name (and drive type) in your Microsoft Account, so I believe they would be separate:

How to Find BitLocker Recovery Key in Windows 10 [TenForums.com]

2 users thanked author for this post.

windbg, RetiredGeek

Reply | Quote

Separate keys – one for each device.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

The key is bound to the hardware (TPM), thus it must be unique for each device.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote

Bitlocker can be used without a TPM.

Recovery keys can still be saved to a Microsoft Account:

How to Turn on BitLocker Without TPM on Windows 10

1 user thanked author for this post.

doriel

Reply | Quote

Cool, that looks like even more secure solution.
Unwanted user wont boot my PC without the correct USB flashdrive, its literally hardware key to my computer.
PS – I would rather make more copies of my HW key 🙂

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote