Whenever I install a Windows update, my laptop sometimes starts asking for a BitLocker recovery key and I can't get back into Windows. This first happened last year, and a friend eventually restored the laptop to its state before the update. Since then, I've been postponing updates for weeks at a time, but I can't delay them anymore because the system is so far behind. I'm worried that installing the update will trigger the lockout again, and I'm not confident troubleshooting it myself. I also don't want to reset the laptop and lose important project files. I believe drive encryption is already turned off, but the previous lockout still happened after an update. What should I do before updating, and how can I make sure I can recover the laptop if BitLocker appears again?
1 Answer
First, back up your projects to an external drive or a trusted cloud service before doing anything else. Then check whether a BitLocker recovery key is saved to your Microsoft account by visiting the account’s device recovery-key page from another device. Save or print the matching key. Turning BitLocker off may not solve this because Windows can still ask for recovery after a TPM, firmware, bootloader, or other security change. If encryption is enabled, use “Suspend protection” before installing updates rather than permanently disabling it, then resume protection after Windows has restarted successfully. It would also be wise to have a technician check the laptop’s BIOS/firmware and TPM, since repeated recovery prompts often point to one of those settings changing during updates.
I’ll make sure everything is backed up and look for the recovery key before trying the update. I didn’t realize that disabling encryption wasn’t the same as suspending its protection.