A laptop that won’t boot is stressful. A laptop that won’t boot and is encrypted can feel hopeless. Most business computers today are encrypted, either with BitLocker on Windows or FileVault on a Mac, and many owners don’t even know it’s turned on. So when a drive fails, the first question is usually: can the data still be recovered? Often the answer is yes, as long as one thing is in hand: the recovery key. This guide explains how BitLocker data recovery and FileVault recovery work, where to find your keys, and what to do (and not do) the moment a drive fails.
Why encryption changes data recovery
Encryption scrambles everything on the drive so it can only be read with the right key. That’s exactly what you want if a laptop is lost or stolen. But it also means that when something goes wrong, recovering the files takes two steps instead of one:
- Get the data off the drive. If the drive is physically damaged, this may need specialized equipment, the same as any failed drive.
- Unlock the data. The recovered copy is still encrypted. Without the password or recovery key, it stays unreadable.
Step one is a technical problem. Step two is a key problem. No one can skip step two: encryption that a recovery service could simply bypass wouldn’t be protecting anything. That’s why the recovery key matters more than almost anything else in this situation.
Is my drive encrypted? It probably is
Many business owners assume encryption is something IT turns on deliberately. Increasingly, it turns itself on:
- Windows: On many newer PCs, Windows turns on device encryption automatically, and the recovery key is backed up to the Microsoft account used to sign in. Business PCs managed by IT often use BitLocker with the key stored in the company’s Microsoft Entra ID or management system.
- Mac: Recent versions of macOS turn on FileVault during setup for most people who sign in with an Apple Account. On Macs with Apple silicon or a T2 security chip, the internal storage is encrypted at the hardware level and tied to that specific Mac, so the drive generally can’t be read by putting it in another computer.
If you aren’t sure, assume the drive is encrypted and start looking for the key now, before you need it.
Can data be recovered from a failed BitLocker drive?
In many cases, yes. BitLocker problems usually fall into one of these situations:
- The PC asks for a BitLocker recovery key at startup. This often happens after a BIOS or firmware update, a hardware change or a Windows update, not because anything is broken. Entering the 48-digit recovery key usually gets you back in.
- The drive has failed physically. Clicking, not being detected, or freezing during startup are signs of a hardware problem. The data may still be recoverable from the drive, and the recovery key is then used to unlock the recovered copy.
- Windows is damaged but the drive is fine. The drive can often be unlocked with the recovery key and the files copied off, even if Windows itself won’t start.
- The recovery key is lost. This is the one situation that usually can’t be fixed. Without the key or the password, BitLocker-protected data can’t be unlocked by anyone.
Where to find your BitLocker recovery key
According to Microsoft’s guide to finding your BitLocker recovery key, the key is usually in one of these places:
- Your Microsoft account. Sign in at aka.ms/myrecoverykey from another device. Match the key ID shown on the recovery screen to the right key in the list. On recent versions of Windows 11, the recovery screen also shows a hint of which Microsoft account holds the key.
- Your work or school account. If the PC is managed by your company, the key is often stored in your organization’s account system, and your IT provider can look it up.
- A printout or a USB drive. Some people saved or printed the key when encryption was first turned on.
Can data be recovered from a FileVault encrypted Mac?
Often, yes, but Macs add a twist. Because the internal storage on newer Macs is tied to the Mac’s own security chip, recovery usually has to work with that specific machine rather than just the drive. Common situations include:
- You forgot your Mac password. If you have your FileVault recovery key, or your Apple Account is allowed to reset the password, you can usually get back in.
- The Mac won’t accept a password you know is correct. A software or firmware problem can sometimes cause this. It’s worth an evaluation before trying anything drastic.
- The Mac has a hardware problem. Liquid damage, a failed logic board or a power problem can stop the Mac from starting. Depending on the damage, some or all of the data may still be recoverable.
- Both the password and the recovery key are gone. As with BitLocker, this is generally not recoverable. That’s the design.
Where to find your FileVault recovery key
Apple explains the options in its guide to protecting data on your Mac with FileVault. Depending on how FileVault was set up, the key may be:
- Saved with your Apple Account. On recent versions of macOS, the recovery key can be stored in iCloud Keychain and viewed in the Passwords app on another signed-in device.
- Visible on the Mac itself, while it’s still working, under System Settings > Privacy & Security > FileVault.
- Held by your company. If your Macs are managed with a device management system, IT may have escrowed the key there.
- Written down or saved when FileVault was first turned on.
What to do right after an encrypted drive fails
The first few minutes matter. These steps protect your chances of getting the data back:
- Stop using the computer. Don’t keep restarting it, especially if you hear clicking or grinding. Each attempt can make physical damage worse.
- Don’t run repair tools or reinstall the operating system. Disk repair utilities and reinstalls can overwrite the data you’re trying to save.
- Never erase or reset the device. On an encrypted Mac or PC, erasing destroys the encryption keys, and the old data is then gone for good.
- Find the recovery key. Check your Microsoft account, Apple Account, company IT and any printouts or USB drives, as described above.
- Write down what happened. Note any error messages, sounds, recent updates, drops or spills. It helps whoever evaluates the drive.
- Get an evaluation before paying for lab work. Not every failure needs a clean-room lab, and you should know your options and costs first.
How SupportMax handles encrypted drive recovery
Our data recovery quote request form is the place to start. Tell us what happened and what kind of device it is. We review each request, try what can safely be done in-house, and when a drive needs a clean-room lab, we arrange a free evaluation and quote from a certified outside recovery lab before any paid lab work begins. Recovery is never guaranteed, but it’s no data, no charge: if your files can’t be recovered, you don’t pay for the recovery.
One honest point: encrypted (BitLocker or FileVault) drives can be recovered only with the owner’s recovery key. If you can’t find yours, tell us anyway. We can help you check the places it’s most likely to be.
How to avoid this problem next time
Encryption is worth keeping. The fix is making sure a failure is an inconvenience rather than a disaster:
- Store every recovery key in a safe, central place your business controls, not just in one employee’s personal account.
- Manage company devices centrally, so keys are escrowed automatically when encryption is turned on.
- Back up regularly and test restores. A good backup means a failed drive costs you a replacement and a few hours, not your files. See our backup and disaster recovery services.
- Back up cloud data too. Email and files in Microsoft 365 need their own backup. Our Microsoft 365 backup page explains why.
- Protect devices as a whole. Encryption is one part of endpoint security, alongside updates, antivirus and remote management.
Frequently asked questions
Can data be recovered from a BitLocker drive without the recovery key?
Generally, no. If the password and recovery key are both unavailable, BitLocker-protected data can’t be unlocked by anyone. That’s how the encryption is designed to work. Before giving up, check your Microsoft account, your work or school account, your IT provider, and any printouts or USB drives where the key might have been saved.
Why is my computer suddenly asking for a BitLocker recovery key?
This often happens after a firmware or BIOS update, a hardware change, or certain Windows updates. It usually doesn’t mean the drive has failed. Find the 48-digit recovery key that matches the key ID on the screen, enter it, and the PC should start normally.
Where do I find my FileVault recovery key?
Depending on how FileVault was set up, the key may be saved with your Apple Account and visible in the Passwords app on another device, shown in System Settings on the Mac while it still works, held by your company’s device management system, or written down when FileVault was turned on.
Can you take the drive out of a Mac to recover the data?
On many newer Macs, no. Macs with Apple silicon or a T2 chip encrypt internal storage using the Mac’s own security hardware, and the storage is usually built into the logic board. Recovery generally has to work with that specific Mac, which is one reason to get an evaluation before anyone attempts a repair.
Should I reset or erase the computer to fix it?
No, not if you want the data back. Erasing an encrypted drive destroys the encryption keys, which makes the old data permanently unreadable. Stop using the device and get it evaluated first.
How much does encrypted drive recovery cost?
It depends on what failed and whether a clean-room lab is needed. With SupportMax, you get a free evaluation and quote from a certified outside recovery lab before any paid lab work begins, and it’s no data, no charge: if your files can’t be recovered, you don’t pay for the recovery.
Does encryption make my data harder to recover?
Only if the key is lost. With the recovery key, an encrypted drive can usually be recovered in much the same way as an unencrypted one. Without it, the data stays locked. That’s why storing keys safely is so important.
Get help with a failed or locked drive
If a computer, external drive or Mac has failed and you need the files back, start with our data recovery quote request form. Want to make sure the next failure isn’t a crisis? Learn about our backup and disaster recovery services or schedule a consultation. Prefer to talk? Call 310.331.8119.
