Independent testing. We may earn a commission when you buy through links on this site. Learn more

Data Recovery on a BitLocker-Encrypted Drive

Scanning a locked BitLocker volume finds nothing, because every sector is ciphertext. Where to find your recovery key, and the unlock-image-scan order that actually works.

Encryption does exactly what you asked it to. That is the problem. A BitLocker volume that has lost its file system is not a normal recovery job, and running an ordinary scan against it produces a screen full of nothing, which people reasonably but wrongly read as “the data is gone”.

Why a normal scan finds nothing

Recovery tools work by scanning raw sectors for recognisable patterns — the header bytes that say “this is a JPEG”, “this is a DOCX”. On an encrypted volume, none of those patterns exist on disk. Every sector is ciphertext. There is nothing to recognise until the volume is unlocked.

So the order of operations is inverted compared with a normal recovery. Normally you scan, then look at what you found. Here you must unlock first, then scan. A tool scanning a locked volume will report either nothing at all or a scattering of meaningless fragments, no matter how good it is.

Find your recovery key before anything else

Without the key or password, the data is not recoverable. Not by us, not by software, not by a lab. That is the design. So the first task is not technical, it is a search:

  • Your Microsoft account. Sign in and check the devices section for saved BitLocker recovery keys. Consumer machines with automatic device encryption very often have a key stored here without the owner ever knowing.
  • A work or school account. If the machine was ever domain-joined or Intune-managed, the key is likely held by that organisation’s IT.
  • A printout or saved file. BitLocker pushes you to save a 48-digit key at setup. It may be a text file on another drive, or in your documents.
  • A USB stick used as a startup key.

The key is 48 digits in eight blocks. If you find something matching that shape, you have what you need. Copy it somewhere safe now, before you experiment with anything.

Unlock, then image, then scan

With the key in hand, the sequence is:

  1. Unlock the volume read-only on a working machine. Connect the drive externally if you can, rather than booting from it. Windows will prompt for the recovery key and mount the volume.
  2. Image it immediately. Once unlocked, make a byte-for-byte copy to a healthy drive and do everything else against the image. This matters more here than anywhere else: a drive that is failing and encrypted gives you a very limited number of good reads. Use an appropriate disk-imaging utility for this step.
  3. Scan the unlocked volume or its image. From here it is an ordinary recovery job, and normal expectations apply.

If the drive throws read errors while unlocked, stop and image before doing anything else. A failing encrypted drive is the one case where a single extra scan can genuinely end the job.

Which tools handle unlocked BitLocker volumes

Once Windows mounts and unlocks the volume, a recovery program can scan the accessible file system. Compare EaseUS Data Recovery Wizard, MiniTool Power Data Recovery and other compatible tools using their scan or preview. None of them can bypass BitLocker or replace a missing recovery key.

AOMEI FastRecovery is another tracked option for an unlocked, accessible Windows volume. Verify that the current version supports your storage setup before installing it, and never install recovery software onto the affected drive.

Be wary of anything advertising BitLocker recovery without a key. Encryption without the key is not a puzzle to be solved, and products implying otherwise are selling hope.

The awkward cases

TPM-only, and the motherboard died. If BitLocker was tied to the TPM with no password and the board has failed, the key material died with it. Your recovery key from a Microsoft or work account is the only route back. This is the scenario that catches people who never knew encryption was on.

The volume unlocks but shows as RAW. Good news, oddly: encryption is working and the file system on top of it is damaged. That is a normal recovery job on an unlocked volume, and the odds are decent.

An interrupted decryption. If the drive was mid-way through decrypting when it failed, part of the volume is plaintext and part is ciphertext. This is genuinely difficult, and honestly a case for a lab rather than a weekend.

Worth doing today

  • Check right now whether your machine is encrypted. Many Windows 11 devices are, by default, without the owner realising.
  • Export your recovery key and store it somewhere that is not the encrypted machine. A printed copy is not old-fashioned, it is sensible.
  • Remember that encryption protects against theft, not against failure. It makes backups more important, not less.
  • Test that your backup restores. An encrypted backup you cannot open is an expensive illusion.

The summary: find the key, unlock read-only, image, then scan. Skipping straight to a scan on a locked volume wastes the reads you cannot afford to waste.


Tools for an unlocked BitLocker drive

These are paid-product links from active UrRecover affiliate relationships. Use the free scan or preview first where available, compare what each tool actually finds, and do not buy if the files you need are not visible.

Start with a scan and preview

You still need the correct password or recovery key. Recovery software cannot bypass BitLocker encryption; scan only after Windows has successfully unlocked the volume.

Try EaseUS Data Recovery WizardTry MiniTool Power Data Recovery

Affiliate disclosure: UrRecover may earn a commission if you purchase through these links, at no additional cost to you.

Recovery results depend on the device, the failure and whether new data has overwritten the missing files. Save recovered files to a different drive. For physical damage, unusual noises or an unstable RAID, stop and consult a professional recovery laboratory.

Recovering from an encrypted volume

You need the recovery key or the password either way, but not every tool can work through BitLocker once it has it. MiniTool handles unlocked BitLocker volumes directly instead of forcing you to decrypt the whole drive first.

Written by BV

BV founded UrRecover after losing a memory card full of wedding photos and discovering that most "best data recovery software" rankings were ordered by commission rate rather than results. He now buys the licences, breaks the drives, and publishes what actually got the files back.

Independent recovery guidanceReview safe first steps before choosing software
Read safety guide