How to Recover Data From a Disk Encrypted by Bitlocker

Read about the methods you can use to restore access to a disk encrypted with BitLocker, and how to restore data from an encrypted disk which you can no longer access. Such problem may emerge as a result of damage to the file system of an encrypted disk (for example, damage to the area of the hard disk, where BitLocker stores important data, that happens due to unexpected system shutdown), inability to load OS or BitLocker recovery console, and other similar errors that prevent normal opening of the encrypted disk. The described problems may affect both system disk, portable external drive or USB drive.

How to Recover Data From a Disk Encrypted by Bitlocker

In order to recover data we will use the utility Repair-bde (BitLocker Repair Tool), a command prompt utility which appeared back in Windows 7 / 2008 R2. This utility is used for access and recovery of encrypted data in a damaged disk encrypted by BitLocker.

Warning. This procedure should be applied after all the others have failed, and it was impossible to unlock the encrypted disk in a standard way by using a Bitlocker password or recovery key.

Contents:

Requirements For Data Recovery From a BitLocker Volume

To recover data from a disk encrypted by BitLocker you need to have at least one of the following Bitlocker defense elements:

  • BitLocker recovery password;
  • Recovery key;
  • System startup key (Startup key — .bek).

Data will be recovered to a separate disk the size of which should be no less than the size of the damaged disk. In the course of recovery, all contents of this disk will be deleted and replaced by decrypted data from the Bitlocker volume.

In our example, disk E: (size 2 Gb) is a USB drive the contents of which are encrypted by BitLocker, and which cannot be opened for some reason. To recover data, we have installed an additional external disk F: (size 16 Gb).

BitLocker volume

Method 1. Data Recovery With The Use of a BitLocker Password

In the first place, try recovering data with this method (it will work with Windows 8 / 2012 and newer versions):

  • Launch command prompt as administrator.
  • Execute the command:
    repair-bde E: F: -pw –Force
    where E: — disk with Bitlocker data, F: — disk where decrypted data should be extracted.
  • In the course of executing the command you will have to specify BitLocker password (the same which a user is to enter into UI when trying to access an encrypted volume).
Data recovery with the use of a BitLocker password

Method 2. Decryption Of a Bitlocker Volume With a Recovery Key

For decryption of data located in a damaged volume which is encrypted with Bitlocker we will need a recovery key or a system startup key (if the system partition is encrypted).

Advice. BitLockerRecoveryKey is a unique sequence of 48 symbols. The recovery key is generated when a Bitlocker volume is created; it can be printed, saved as a text file to a local (this choice is not recommended) or external disk, or in a user account at Microsoft website.

Decryption of a Bitlocker volume with a recovery key

Now let us launch data recovery with the help of this key:
repair-bde E: F: -rp 011407-712393-682121-100210-377003-405174-520014-328130 –Force

If Bitlocker is used for encryption of the system partition containing Windows, and for loading the system a special startup key on a USB drive is used, the encrypted volume can be decrypted as follows:
repair-bde E: F: -rk I:\3F558473-943D-4330-8449-62C36BA53345.BEK –Force
where file 3F558473-943D-4330-8449-62C36BA53345.BEK is a key to launch BitLocker disk encryption on a USB drive G: (by default, this file is hidden).

After the procedure of data recovery and decryption, before opening the disk where the contents of the Bitlocker volume were extracted, it is necessary to run its check. In order to do it, execute the following command and wait until it is complete:
Chkdsk F: /f

Important note. If you failed to recover data from an encrypted disk with the described methods, it is worth trying to create a sector-by-sector copy of the damaged disk with the help of a Linux utility DDRescue (or any other similar utility). After that, try recovering data from the received copy by the following scenario.

Bitlocker Data Recovery Software

We also should notice that exist more common and simpler way to recover files from Bitlocker encrypted storage. These are data recovery software. Of course, not all programs сan cope in such situation but some of them have required function.

The only thing is that you must have a password to unlock the device which was specified when encrypt.

Then it’s simple. Connecting device with the information that you want to recover to your computer and getting message.

Further, enter password in a special window after double-clicking on the device you need to recover in “This PC”.

After that, the storage becomes fully accessible for data recovery for any of the Hetman Software programs.

How to Recover Data From a Disk Encrypted by Bitlocker
Author: Michael Miroshnichenko

Comments

  1. RamaKrishna Y 8 months ago

    Hi..
    I have WD Passport 1 TB HDD encrypted with Bit Locker. During encrypting due to error it was stopped abruptly. Post this unable to access both password and recovery key. Please suggest.

    • I’m afraid that without a password (or if the system does not accept it), you will not get access to your data in any way ….

  2. khwazask 2 years ago

    HI BROTHER,
    I ENCRYPTED MY EXTERNAL HARD DISK WITH BITLOCKER
    I REMOVED IT FROM SYSTEM WITHOUT SWITCHIN OFF
    AND THEN WHEN EVER IAM TRYING TO OPEN THAT POPUP COMING ACCESS DENINED & UNABLE TO READ
    I ALSO TRIED WITH CMD PROMPT
    NO USE

    PLZZZZZZZZZZ GUIDE ME WHAT TO DO

    I HAVE MY FAMILY PHOTOS IN IT WHICH IS VERY IMPORTANT FOR ME
    MY EMAIL IS
    khwazask1@gmail.com

  3. Amir Saood 2 years ago

    Need Help.
    My operating system (windows 10) crashed during an update. I tried to repair it by installing new windows 10 as a result i lost 3 of my existing partition of 220 GB and it shows now only 1 drive named free space. In those 3 partitions one was encrypted by bit locker password. I tried to recover all 3 with well known recovery software but that only recovers 2 partitions not my encrypted one. :( Plz help me to recover my encrypted one that has all my personal data and accounts informations. when i tries to recover it my encrypted partition doesn’t show up there. Only shows one lost partition of 220GB. please help me

    I’m waiting for your quick reply asap.

  4. sam sharma 3 years ago

    i have a problem with related this bitlocker.
    i have lost my partitions from my 1tb hardrive of my laptop
    three partition are lost 2 of them was bit locked encrypted . the r lost by using my drive as a usb hardrive in backtrack . i want to recover my partitions

  5. Drad Ranada 3 years ago

    I got a hdd previously encypted(FVE) by bitlock. It was “re-imaged” using a windows clone. I need to recover thedata prior to re-imaging it. Repair-BDE accepts the Recovery password but it says the data needed to be decrypted is not available…. Is there still any chance of recovery of this particular scenario?

  6. Mohanmad 3 years ago

    I formated my bit locker drive and installed windows on it… Now i have have that drive with no password… I started to recover files.. And there is a lot of files with unknown format(I guess because they are encrypted).
    Can I decrypt this files instead of whole drive?
    By the way i have my bit locker password

  7. Erik Steinholtz 3 years ago

    Thanks, but how do I go about this without a bootable system disk? do you say that I am required to pull it out of the PC, put it on an USB adapter and then plug it in to another PC?

    I would like to find some solution that works in conjuction with an emergency boot, ie pendrive. Normally, those are linux so it would be tricky since this tool isnt

  8. Read how to recover data from a disk encrypted by Bitlocker. If you do have any questions, don’t hesitate to contact our technical support service – we will be happy to help you.

Leave a Reply

Your email address will not be published. Required fields are marked *