aka.ms/aadrecoverykey explained
Updated
aka.ms/aadrecoverykey is the Microsoft short link for finding a BitLocker recovery key that was saved to a work or school account. Use it when a PC that belongs to, or was once signed in to, an organization asks for its recovery key.
Where the link goes
When we checked on 16 October 2026, aka.ms/aadrecoverykey forwarded through Microsoft's go.microsoft.com link service to myaccount.microsoft.com, the My Account portal for work and school accounts. The "AAD" in the name stands for Azure Active Directory, the former name of Microsoft Entra ID, which organizations use to manage work and school accounts and the devices joined to them.
Microsoft's own help article on finding a BitLocker recovery key lists this link for one situation: the device was signed in to an organization with a work or school account at some point. If the PC only ever used a personal Microsoft account (Outlook.com, Hotmail, Xbox), the key is more likely to be in that personal account. Our aka.ms/recoverykey guide covers that case.
Which recovery key link do you need?
| Your situation | Link to try | Opens |
|---|---|---|
| Personal Microsoft account (Outlook.com, Xbox, Minecraft) | aka.ms/myrecoverykey or aka.ms/recoverykey | account.microsoft.com |
| Work or school account (Microsoft 365 from an employer, school or university) | aka.ms/aadrecoverykey | myaccount.microsoft.com |
| Not sure which account was used | Try both, and use the key ID to confirm you have the right key | Both are Microsoft sites |
How to find the key, step by step
- Write down the recovery key ID. The blue BitLocker screen shows a key ID. Microsoft suggests noting its first 8 characters, which are enough to pick the right key if several are listed.
- On another device, open aka.ms/aadrecoverykey. Use a phone or a different computer, since the locked PC cannot start Windows.
- Sign in with your work or school account on the Microsoft page that opens. Your organization's normal sign-in checks, such as two-step verification, apply.
- Select Devices and expand the device that is locked.
- Select the option to view BitLocker keys. Microsoft's help pages call it View BitLocker Keys or View Keys.
- Match the key ID with the one on the BitLocker screen, then type that 48-digit recovery key into the locked PC.
Why BitLocker asks for the key
BitLocker encrypts the drive so that the data cannot be read if the PC is lost or stolen. Normally it unlocks on its own at startup. Microsoft explains that it may ask for the recovery key instead when it detects a possible security risk or a hardware change, and that data or external drives can also ask for it, for example when their unlock password has been forgotten. Firmware updates, changes in the UEFI settings, or moving a drive to another computer are typical triggers. The key is the proof that you are allowed to open the drive.
If no key appears
- Your organization may have turned off self-service. Microsoft documents a setting that lets administrators stop device owners from viewing their own BitLocker keys. If it is on, the Devices page will not show the key and only your IT team can retrieve it.
- The device is listed under someone else. When a company reuses a PC for a new person, Microsoft notes that the new owner may need to ask an administrator for the key.
- The key was saved somewhere else. It may be in a personal Microsoft account, on a printout made when BitLocker was turned on, or in a text file on a USB flash drive. Microsoft lists all of these as possible locations.
- You signed in with a different work account. If you have more than one organization account, check each one.
What your IT team can do
For work and school devices, the keys are stored in the organization's Microsoft Entra ID directory. According to Microsoft's documentation, the device owner and administrators with certain roles (such as Cloud Device Administrator, Helpdesk Administrator or Intune Administrator) can view them, and each time a key is shown an entry is written to the audit log. So if the portal does not show your key, contact your IT help desk through the channels your organization has published internally, such as the staff intranet or a help desk portal you already use. Do not use a number or website found through a search result or an unexpected message.
Microsoft Support itself cannot retrieve, provide or recreate a lost BitLocker key. If nobody can find it, Microsoft says the remaining option is to reset the device using a Windows recovery option, which removes all files on it. For a work device, let your IT team make that decision.
Need to manage the sign-in methods on the same work account? See aka.ms/mysecurityinfo. More short links and their destinations are in our aka.ms links directory.
Sources
Frequently asked questions
What does AAD mean in aka.ms/aadrecoverykey?
AAD stands for Azure Active Directory, the former name of Microsoft Entra ID. The link is for BitLocker keys saved to a work or school account, not a personal one.
Is aka.ms/aadrecoverykey legitimate?
Yes. When we checked on 16 October 2026 it forwarded via go.microsoft.com to myaccount.microsoft.com, Microsoft's My Account portal. Check the address bar before signing in.
Why can I not see a View BitLocker Keys option?
Your organization may block self-service key access, or the key may be stored under another account. Ask your IT help desk through your usual internal channels.
Can Microsoft Support give me my recovery key?
No. Microsoft says its support cannot retrieve or recreate a lost BitLocker key. Only places where the key was saved, such as your account or your IT team, can help.