Microsoft Windows’ BitLocker encryption technology is known to keep private information safe from theft or unauthorized access. Even though this function is useful and reliable, it may also cause problems, even for real users. When data is lost from a BitLocker section because of an unexpected problem or carelessness, it can only be recovered if a set of conditions are met that allow the storage to be decrypted. With the right tools, it’s usually possible to get Decrypt BitLocker protected volume.
With the help of the steps below, you can use different versions of BLR Tools to get back the missing files in a safe way. But it’s important to note that BitLocker uses strong encryption standards and has no known security backdoors. So, only approved users with the right password or BitLocker recovery key will be able to decrypt files with BLR BitLocker data recovery software. To decrypt BitLocker protected volume you need a professional program.
Details about BitLocker Decrypt Protected Volume Drive
BitLocker is a built-in way for Microsoft Windows to secure the whole hard drive. So to Decrypt BitLocker protected volume you can simply decrypt BitLocker protected volume drive. BitLocker has been a part of every version of Windows since Windows Vista, though it is only in some models.
It uses the Advanced Encryption Standard (AES) algorithm to encrypt every bit of data in a certain section or on the whole drive. One can choose normal BitLocker to protect the computer’s internal hard drive or BitLocker To Go to protect removable digital media like USB sticks, memory cards, or external hard drives.
There are two main types of BitLocker encryption: software–managed encryption and hardware–assisted encryption. The first kind is put into place based on:
- Secret code;
- A restore key for BitLocker;
- A Startup key that is saved on an external USB device.
Note: Software-managed encryption means that you can decrypt it without any extra gear. So, these storages can be opened in the BLR BitLocker tool.
For more security, a Trusted Platform Module (TPM) is used with hardware-assisted encryption. This unique component of the computer’s motherboard stores the data utilized throughout the encryption and decryption processes. It also makes it harder for anyone to get into the system while it is offline.
TPM can be used by itself to automatically unlock the drive at starting, or it can be used with a PIN or a starting key for extra security.
But it’s important to know that TPM is a key holder with multiple physical security features. So, hardware-assisted encryption can’t be broken through programming, and BLR BitLocker tool doesn’t work with it.
When BitLocker is turned on, the protected volume’s data can no longer be read. To make it readable again, the user needs to prove who they are by giving the right password, BitLocker recovery key, or Startup key that unlocks the storage.
A password is a string of characters that you have to type in when the OS starts up or when you want to use an external device that BitLocker is protecting. It is chosen once by the user when BitLocker is first set up.
A BitLocker recovery key, also known as a Microsoft or Windows recovery key, is a 48-digit key that is made by the system when BitLocker is turned on for the first time on a given storage. It can be used to decrypt the data even if the password is lost or if there is no password at all, like on modern computers where encryption is turned on by default. The key itself looks like this: 459196-748026-55221-162398-291491-332432-267599-583333.
A Startup key is a *.bek file that is hidden on a USB drive. It is just like the BitLocker recovery key. It lets the boot drive decrypt itself without the user having to enter a password.
The BitLocker metadata on the protected disk stores both the password and the 48-digit key. The credentials that are given are processed and checked to see if they match the metadata records. If a match is found, the storage can be opened. But if a storage device is severely damaged and this information gets messed up, it is no longer possible to decrypt it, even with the right password and key. Its information will stay encoded and will not be usable in any way.
So, unlike normal data extraction, the BitLocker method needs the BitLocker information blocks to be complete and the right password or BitLocker recovery key to decrypt the data.
When asked, entering the BitLocker password into BLR BitLocker tool is the easiest way to access the storage.
But if you don’t know or don’t have the password, you can still get into the encrypted drive by getting the Windows restore key.
Find 48-digit key in the Following places, from the Location You Stored it:
Microsoft account
If your Windows recovery key is kept online in your Microsoft account, log in, click to the BitLocker Recovery Keys section, and check to see if your key is shown there next to the corresponding Device Name.
Computer file
The 48-digit key can be stored as a *.txt file on a different disc or network location. The phrase “BitLocker Recovery key” is followed by an arbitrary combination of numbers and letters. Enter “BitLocker Recovery Key” into the search bar and see what comes up.
USB flash drive
Connect the thumb drive containing the *.bek file to the PC. The Startup key will not be visible right away. To see it, launch Windows Explorer and select the View tab. Then select “Show hidden files, folders, and drives” under “Hidden files and folders.” The file name will be a random sequence of characters and integers.
Printout
If you printed your Microsoft recovery key, investigate the location where you generally keep computer-related documents.
Azure Active Directory account
Sign into the Microsoft Azure portal and select the Azure Active Directory blade if you used an Active Directory account. Enter the name or serial number of your device into the search box to find it. To obtain the key, select the device to access its record and then select the “Show Recovery Key” option.
The BitLocker recovery key is unique to each encrypted storage device. To check that the BitLocker recovery key is accurate, compare the beginning of the BitLocker recovery key identifier with the “Key ID” number displayed for the drive.
BitLocker recovery with the BLR BitLocker Tool Standard, RAID, or Network RAID
Using these software versions, only existing BitLocker volumes may be decrypted. BLR BitLocker Tool Professional Recovery can be used to seek for such a volume if it has been deleted or formatted.
If you intend to use the Standard, RAID, or Network RAID edition of the BLR BitLocker Tool to restore data from your BitLocker volume, please follow these steps:
Attach the BitLocker-encrypted storage device to your computer.
Connect your externally encrypted device to the USB interface. Simply skip this stage if you are working with an encrypted partition on an internal drive.
If you need to attach an internal hard drive from another computer, you can either connect it to the motherboard of your computer or connect it externally using a USB to SATA/IDE adapter.
Install the Standard, RAID, or Network RAID – BLR BitLocker Tool and Launch.
The application will detect all attached devices automatically. They will be displayed in the left pane’s tree of connected storages. The available logical volumes on each device will be enumerated below it.
If you encounter any installation issues, please consult the installation guide for the version of BLR BitLocker tool that you are using.
Find the required BitLocker volume in the manifest.
You can identify the required encrypted volume by its yellow padlock icon in the list of storage devices.
Decrypt the storage using the program’s built-in tools.
Even if its file system is recognized as accessible, the volume must be deciphered before further operations can be performed. To do so, open its context menu and select “Decrypt BitLocker protected volume” Enter the correct password or paste a 48-digit BitLocker recovery key, including all dashes, in the pop-up window.
Scan the decrypted volume in order to recover the lost data.
The contents of the decrypted volume will become accessible. To retrieve the missing folders and files, however, you must initiate a storage audit. Find the “Scan this storage” tool in the toolbar, deselect all unnecessary file systems or retain the default scan parameters, and click “Start scan” to accomplish this.
More information about configuring the scan can be found in the BLR BitLocker tool guide for scanning a drive.
Determine which recovered elements are necessary and copy them.
After the scanning process has concluded, you can examine the reconstructed file system to locate the necessary folders/files. Then, click “Define selection” and position checkmarks next to the items you wish to save. Next, click “Save selection” and specify a secure storage location for the restored items.
Hint: The information provided in Evaluating and storing data recovery results may facilitate your work with recovered folders and files.
Restoring encrypted data with BLR BitLocker Tool Professional Recovery
If you prefer to complete the procedure with the assistance of the Professional version of BLR BitLocker recovery tool, kindly follow the instructions below:
Connect your encrypted device to the computer using BitLocker.
Connect the encrypted removable media to the USB port, or omit this step if you are working with an encrypted partition on an internal drive.
If you need to attach an internal hard drive from another computer, you can insert the disk directly into the motherboard of your PC or connect the drive externally using a USB to SATA/IDE adapter.
Install and activate BLR BitLocker Tool Professional Recovery.
The software will automatically detect all connected devices and list them in the left pane’s tree of connected storages. Listed below are the logical volumes for each device.
If you encounter any installation issues, please consult the BLR BitLocker Tool Professional Recovery installation manual.
Choose the required encrypted volume from the list of attached storages.
Find the necessary encrypted volume by navigating through the list; it can be identified by a yellow padlock icon.
Decrypt the storage using the decryption tool supplied by the program.
Even if the volume’s file system is recognized as being accessible, it must be decrypted prior to use and to decrypt BitLocker protected volume, one can select this professional tool. In its context menu, select “Decrypt encrypted storage” and then “BitLocker metadata” to decrypt the file. Provide the correct password or a 48-digit BitLocker recovery key, including all dashes.
Examine the storage medium to recover the vanished data.
Once a volume has been decrypted, the data it contains in its entirety becomes accessible. To locate the missing or deleted files, you must perform a storage scan. Choose the appropriate tool from the toolbar, deselect any unnecessary file systems, or leave the scan parameters as-is, and click “Start scan” to accomplish this.
Hint: The instructions for scanning a drive with the BLR BitLocker tool contain additional information on configuring the scan.
Select and save the necessary files and folders that were restored.
When the procedure is complete, you will be able to navigate through the reconstructed file system to locate the necessary items. To select the items to be replicated, click “Define selection,” place a checkmark next to each item, then click “Save selection.” Specify a secure destination folder for the recovered data in the subsequent pop-up window.
Hint: The information in Evaluating and storing the results of data recovery could make it easier for you to use the folders and files that were restored.
A video instruction to BitLocker recovery:
The overall procedure is depicted in the following video tutorial:
Also read some more useful information:
What is BitLocker Key Recovery
Unable to find BitLocker Recovery Key
Free Data Recovery Tools by BLR
How to Recover Formatted BitLocker Encrypted Hard Drive’s Data Back?
Free Ways to Recover Files from Formatted Drive
Ways to Save Backup and Recover BitLocker Key