Before We Update or Repair Your Computer: Passwords, PINs, and Drive Encryption
A guide to what to do before any update or repair.
If you have a Windows 11 computer, these things can be connected in ways that lock you out of your own machine if you're not prepared: your Microsoft Account (email), your PIN, and possibly a drive protection feature called BitLocker. Not every computer has BitLocker turned on — but many newer ones do, often without the owner ever knowing it was enabled. This article explains how to find out whether yours does, and what to do either way.
How It Works
When you buy a new Windows 11 computer from somewhere other than Computer Greeks, Windows may automatically set up some or all of the following:
BitLocker — a security feature that encrypts your hard drive so nobody can read your files if the computer is stolen.
A PIN — a short number you type to log in quickly.
A Microsoft Account — your email address (like Outlook, Hotmail, or Gmail) that Windows uses as your "master key."
When you log in with your PIN, Windows checks two things: that you know the number, and that your computer's hardware hasn't changed. If anything changes — and Windows can update your computer's software without asking you — Windows may decide your PIN is no longer valid, and make you prove who you are by sending a verification code to your email or phone.
If your drive is protected by BitLocker, the same change can cause a second, bigger problem: when the computer restarts, it may stop at a blue screen demanding a recovery key — a 48-digit number.
Most people do not have this number. Most people do not even know it exists.
What Happens If You Don't Have the Recovery Key
If Windows asks for the 48-digit recovery key and you don't have it, your data cannot be accessed. Microsoft cannot find it for you. The only option is to wipe the computer and reinstall Windows.
Even if you do have the recovery key, you'll also need to remember your Microsoft Account email and password, or be able to receive a verification code on your phone. If your phone number has changed or you can't access your email, you can still be locked out.
What You Must Do Before Any Update or Repair
Before a technician (or Windows itself) updates your computer's software, BIOS, or firmware, you should make sure of three things:
1. Know Your Password
Your PIN is convenient, but it can break when your computer updates. Your password (the full one tied to your Microsoft Account email) is your fallback. If you don't know it, reset it now (at https://account.live.com/password/reset) and write it down. Do not wait until you are locked out.
2. Check That Your Recovery Key Is Saved
First, find out if you even have BitLocker. On your computer, click the Start button and open Settings. Click Privacy & security on the left, then look for Device encryption (on some computers it may be under "Device security" or labeled "BitLocker Drive Encryption").
If you see a switch that is turned On, your drive is protected and you need your recovery key. Keep reading.
If the switch is Off, or you don't see this option at all, your drive probably isn't encrypted. You can skip the recovery key steps below — but you still need your PIN and password working. Steps 1 and 3 still apply to you.
If finding Device encryption in Settings feels like too much trouble, just do the website check below — if a recovery key shows up there, you have BitLocker.
Your recovery key is stored in your Microsoft Account online, but it can be hard to find — especially if you don't use that computer every day. To check:
Go to account.microsoft.com/devices/recoverykey on any phone or computer
Sign in with your Microsoft Account email
Look for your computer in the list
If you see it, write down the 48-digit recovery key on paper and keep it somewhere safe (not on the computer itself)
If more than one key is listed, write them all down and note the date next to each — the newest one usually belongs to your current setup
If you don't see your computer in the list but the Device encryption switch showed On, your recovery key was never saved online. You'll need to back it up directly from the computer. Open Settings → Privacy & security → Device encryption:
If you see a link called BitLocker drive encryption on that page, click it, then click Back up your recovery key next to your drive, and choose Print the recovery key. Keep the paper with your important documents — do not just save it to a file on this computer, because if the computer ever locks you out, you won't be able to reach a file stored on it.
If you only see an On/Off switch with no links, your version of Windows doesn't offer a backup button here. Don't guess or click around looking for one. Instead, go back to the website check above and make very sure you've signed in with every email address you might use — the key is often hiding under a different Microsoft Account than the one you tried first. The Microsoft Account website is where Home edition stores your key automatically, so finding the right account is finding your key.
If none of your email accounts show a key, but Device encryption still says On, your computer may have been set up with a local account instead of a Microsoft Account. In that case there may be no copy of the key online at all — and signing into a Microsoft Account later will not create one. This is the most dangerous situation in this article, because a lockout with no saved key means the data is gone. If that describes your computer, tell us when you drop it off — handling it while the computer can still start normally is very different from recovering data after a lockout.
3. Make Sure You Can Access Your Microsoft Account
Is your phone number still the one linked to your account?
Can you still log in to your email?
Do you know your Microsoft Account password?
If any of these answers is "I don't know," fix it now. Ask a family member to help you check.
What to Tell Your Computer Repair Shop
When you bring your computer in for service, make sure you have these things before you drop it off:
The password for your Microsoft Account (your email login)
The 48-digit BitLocker recovery key, written down and with you
Confirmation that you can still receive text or email verification codes at the phone/email on file
Your PIN, your passwords, and your recovery keys are your responsibility. A repair shop is not able to recover them for you if they stop working — and neither is Microsoft. This matters because of how BitLocker works: unless or until you can provide the 48-digit recovery key, nobody — not us, not any other repair shop, not even Microsoft — can access the data on your drive. If Windows asks for these during or after service and you don't have them, the work stops. We may be able to finish hardware repairs, but we cannot open Windows, retrieve your files, or verify your computer works properly. Your pickup will be delayed by days or longer — and in the worst case, the only way to make the computer usable again is to erase it and start over, which destroys everything on it.
A technician may suspend encryption protection before certain updates as part of good practice, but you should never assume this has been done. Coming in with your information already in hand protects you, regardless of what happens during the repair.
The Bottom Line
Your PIN is convenient but fragile. It can break during routine Windows updates.
Your password is your safety net. Know it, and write it down.
If you have BitLocker, your recovery key is your last resort. Find out if you have it, write the key down, and keep it safe.
Your Microsoft Account is the key to everything. Make sure you can still access it — email, phone number, password.
Don't wait until something goes wrong to figure this out. It takes 15 minutes to check now. It takes days or weeks to fix if you're locked out. If you are lucky.
Comments