How to Use BitLocker Command Line to Unlock, Encrypt and Decrypt Drives
The BitLocker command line lets you check encryption status, unlock a protected drive, enable BitLocker, or decrypt a drive using the built-in manage-bde tool. For example, run manage-bde -status to check a drive or manage-bde -unlock D: -RecoveryPassword YOUR-48-DIGIT-KEY to unlock it. This guide explains the essential BitLocker commands for Windows 11 and Windows 10.
When recovery keys are missing or hard to locate, specialized tools like Magic Recovery Key can further assist by automatically finding available BitLocker recovery keys on your system.
Supports Windows 7/8/10/11 and Windows Server
Table of Contents
BitLocker Command Line Commands at a Glance
| Task | BitLocker command |
|---|---|
| Check BitLocker status | manage-bde -status |
| Check one drive | manage-bde -status D: |
| Unlock with a password | manage-bde -unlock D: -Password |
| Unlock with a recovery password | manage-bde -unlock D: -RecoveryPassword YOUR-48-DIGIT-KEY |
| Enable BitLocker | manage-bde -on D: -RecoveryPassword |
| Decrypt a drive | manage-bde -off D: |
| Pause encryption | manage-bde -pause D: |
| Resume encryption | manage-bde -resume D: |
Replace D: with the drive letter you want to manage, and always open Command Prompt as an administrator before running these commands.
What is BitLocker Command Line?
The BitLocker command line, often referred to as the manage – bde commands, is a set of commands that allow users to interact with BitLocker encryption features directly from the Command Prompt or PowerShell. With these commands, you can perform a wide range of operations related to BitLocker, such as encrypting drives, decrypting drives, changing passwords, and managing recovery keys.
How to Unlock BitLocker with Command Line
Open Command Prompt as an administrator and first check the locked drive:
manage-bde -status D:
To unlock the drive with its password, run:
manage-bde -unlock D: -Password
Windows will then prompt you to enter the password securely. If you have the 48-digit BitLocker recovery password, use:
manage-bde -unlock D: -RecoveryPassword YOUR-48-DIGIT-KEY
You can also unlock a drive with a .bek recovery key file:
manage-bde -unlock D: -RecoveryKey "E:\RecoveryKey.bek"
Replace D: with the locked drive and enter the recovery password exactly as saved, including the hyphens. The command line cannot bypass BitLocker encryption; it still requires a valid password, recovery password, recovery key file, or another authorized protector.
How to Encrypt with BitLocker Command Line
1. Open the Command Prompt as Administrator
To use the manage – bde commands effectively, you need administrative privileges. Right – click on the Command Prompt icon and select “Run as administrator.”
2. Select the Drive to Encrypt
Identify the drive letter you want to encrypt. For example, if you want to encrypt your D: drive, you can use the following command:
manage – bde – on D:
This command will start the encryption process on the specified drive. By default, BitLocker will use the standard encryption method. If you want to use a different encryption mode, you can add additional parameters. For instance, to use the XTS – AES 256 – bit encryption mode:
manage – bde – on D: – encryption XTS – AES256
You may also be prompted to set a password for the encrypted drive. This password will be required to access the drive in the future.
How to Decrypt with BitLocker Command Line
1. Open the Command Prompt as Administrator
Just like with encryption, you need administrative rights.
2. Decrypt the Drive
To decrypt a drive, say the D: drive, use the following command:
manage – bde – off D:
If the drive is locked, unlock it with a password or recovery key before running this command. After manage-bde -off D: is accepted, Windows starts decrypting the drive in the background. You can check the progress at any time with manage-bde -status D:. The time it takes to decrypt the drive depends on the size of the drive and the amount of data stored on it.
manage – bde – on D: – encryption XTS – AES256
How to Find a Missing BitLocker Recovery Key
Magic Recovery Key does not bypass BitLocker encryption. It scans the current computer and connected drives for available BitLocker recovery keys that may have been stored previously.
1. Download and install Magic Recovery Key from a trusted source.
Supports Windows 7/8/10/11 and Windows Server
2. Open the software and select BitLocker Recovery Key in the left menu.
3. Click Search to let the software scan for the BitLocker key.
4. Once the key is found, copy it and use it to unlock your encrypted drive.
Conclusion
The BitLocker command line provides a powerful and flexible way to manage BitLocker-encrypted drives through tools like manage-bde, allowing you to unlock drives, view encryption status, and handle recovery scenarios efficiently. For users who are comfortable working in Command Prompt or PowerShell, this approach offers greater control and automation than the standard graphical interface.
However, if you have lost your BitLocker password or recovery key, command-line methods alone may not be sufficient. In such situations, Magic Recovery Key becomes an essential companion tool. It can automatically scan your computer, external storage devices, and system records to locate available BitLocker recovery keys, making it much easier to regain access to locked drives. To save time and avoid permanent data loss, we recommend downloading Magic Recovery Key and keeping it ready whenever you work with BitLocker-protected drives using the BitLocker command line.
Supports Windows 7/8/10/11 and Windows Server
FAQs
How do I unlock BitLocker with the command line?
What can I do if I forgot my BitLocker password?
Do I need administrator rights to use BitLocker command line tools?
Can I check BitLocker status using the command line?
Can I enable or disable BitLocker with the command line?
Is it possible to back up a BitLocker recovery key using the command line?
Can I use PowerShell instead of Command Prompt for BitLocker operations?
What should I do if BitLocker cannot be unlocked due to missing or damaged metadata?
