How to Decrypt BitLocker in Windows 11/10: 4 Safe Methods
Decrypting BitLocker means turning off BitLocker protection and converting the encrypted volume back to a fully decrypted state. This is different from unlocking a drive, which restores access but keeps BitLocker encryption enabled.
In Windows 11 or Windows 10, you can decrypt a BitLocker drive through Control Panel, Command Prompt, or PowerShell. If you use Windows 11 Home and only see Device Encryption, you can turn it off from Windows Settings. Before starting, sign in with an administrator account, back up important files, and make sure the target drive is unlocked.
If the drive is locked, you must unlock it with the password, 48-digit recovery password, or another configured unlock method before decryption can begin. Without a valid unlock method, BitLocker cannot be directly decrypted or bypassed. You can try to find your bitlocker key using Magic Recovery Key.
Supports Windows 7/8/10/11 and Windows Server
Table of Contents
Quick Answer
To decrypt BitLocker, open Manage BitLocker, find the encrypted drive, click Turn off BitLocker, and confirm the action. You can also run manage-bde -off X: in Command Prompt or Disable-BitLocker -MountPoint "X:" in PowerShell. Replace X: with the correct drive letter. If the drive is locked, unlock it first with the password or recovery key.
What Does Decrypting BitLocker Mean?
Decrypting BitLocker permanently removes BitLocker encryption from the selected drive. Windows reads the encrypted data, converts it back to an unencrypted state, and removes the BitLocker key protectors after the process is complete.
Decrypting is not the same as unlocking or suspending BitLocker. Unlocking gives you access to the drive while keeping its data encrypted. Suspending BitLocker temporarily disables protection checks without decrypting the drive.
| Operation | What It Does | When to Use It |
|---|---|---|
| Unlock BitLocker | Restores access while keeping encryption enabled | Opening a locked external or secondary drive |
| Suspend BitLocker | Temporarily pauses protection without decrypting data | BIOS, UEFI, TPM or firmware updates |
| Decrypt BitLocker | Fully decrypts the drive and turns BitLocker off | Permanently removing BitLocker protection |
How to Decrypt BitLocker in Windows 11/10
Method 1: Decrypt BitLocker from Control Panel
The easiest way to decrypt a BitLocker drive is through the BitLocker Drive Encryption panel. This method is suitable when Windows starts normally and you have administrator access.
- Sign in to Windows with an administrator account.
- Press Windows + S and search for Manage BitLocker.
- Open BitLocker Drive Encryption.
- Locate the drive you want to decrypt.
- If the drive is locked, select Unlock drive and enter the password or recovery key.
- Select Turn off BitLocker.
- Confirm the action and wait for Windows to complete decryption.
Do not select Suspend protection if your goal is to remove encryption permanently. Suspending BitLocker does not decrypt the drive.
Method 2: Decrypt BitLocker Using CMD
Command Prompt is useful when the Control Panel option is missing or when you want to check the exact decryption status. Run Command Prompt as an administrator before entering the following commands.
Step 1: Check the drive status
manage-bde -status D:Step 2: Unlock the drive if necessary
manage-bde -unlock D: -RecoveryPassword YOUR-48-DIGIT-RECOVERY-KEYStep 3: Start BitLocker decryption
manage-bde -off D:
Step 4: Check the progress
manage-bde -status D:Replace D: with the actual drive letter. When the Conversion Status changes to Fully Decrypted, BitLocker encryption has been removed from the drive.
Method 3: Decrypt BitLocker Using PowerShell
PowerShell provides another built-in way to decrypt a BitLocker drive. Open Windows Terminal or PowerShell as an administrator, and then run the following command:
Disable-BitLocker -MountPoint "D:"Get-BitLockerVolume -MountPoint "D:"Replace D: with the target drive letter. Check the VolumeStatus field to determine whether the drive is still decrypting or has become fully decrypted.
Method 4: Decrypt Device Encryption on Windows 11 Home
Some Windows 11 Home computers use Device Encryption instead of the full BitLocker management interface. If Manage BitLocker does not appear, check the Device Encryption setting.
- Open Settings.
- Select Privacy & security.
- Open Device encryption.
- Turn Device Encryption off.
- Confirm the action and wait for decryption to complete.
If the Device Encryption option is missing, the feature may already be disabled or may not be available under the current hardware and Windows configuration.
How to Check BitLocker Decryption Progress
BitLocker decryption runs in the background and may take time depending on the drive size, storage speed, and system activity. You can check the current progress with Command Prompt or PowerShell.
Using CMD
manage-bde -status D:- Conversion Status；
- Percentage Encrypted；
- Lock Status；
- Protection Status。
Using PowerShell
Get-BitLockerVolume -MountPoint "D:"- VolumeStatus；
- EncryptionPercentage；
- ProtectionStatus。
If decryption is paused, run the following command from an administrator Command Prompt:
manage-bde -resume D:Can You Decrypt BitLocker Without a Recovery Key?
If a BitLocker drive is locked, you cannot directly decrypt it without a valid password, recovery password, startup key, or another configured unlock method. BitLocker must first unlock the volume before Windows can turn off encryption.
Before using any third-party tool, check the standard recovery-key locations:
- Your Microsoft account
- Your work or school account
- A printed copy
- A USB flash drive
- A text file, screenshot, or document saved on another accessible drive
- Your organization’s IT administrator
Match the Key ID displayed on the BitLocker recovery screen with the corresponding recovery key before entering it.
How Magic Recovery Key Can Help Find a Saved BitLocker Key
One of the most effective and user-friendly tools for this scenario is Magic Recovery Key. It does not attempt to bypass encryption—instead, it focuses on recovering your lost BitLocker recovery key so that you can legitimately unlock and decrypt the drive through Windows.
Magic Recovery Key is especially useful when:
- BIOS or TPM changes trigger BitLocker protection
- Recovery key backups are missing, corrupted, or overwritten
Instead of trying to access encrypted data directly, Magic Recovery Key searches for every possible key trace across your system, connected drives, and configuration files. Many users discover that their key still exists on the disk—they simply cannot find it manually.
This provides enormous relief, because once the key is restored, Windows can proceed with standard bitlocker decrypting safely and correctly. The software makes the process clear and reassuring during what is often a very stressful situation.
Steps to Use Magic Recovery Key
If you don’t have the Bitlocker recovery key, run Magic Recovery Key to scan for lost BitLocker recovery keys following the steps below:
1. Download and install Magic Recovery Key on your Windows computer.
Supports Windows 7/8/10/11 and Windows Server
2. Launch the software and select “BitLocker Recovery Key” from the left-hand menu.
This section is designed specifically for scanning your system, previous Windows installations, connected drives, and configuration files for any stored BitLocker recovery keys.
3. Click “Search” to begin the scan.
Magic Recovery Key will automatically analyze available locations where the BitLocker key might have been saved. The process is automated and requires no technical expertise.
4. Review the results and copy the recovered key.
If the software finds your BitLocker recovery key, it will display it clearly on the screen. You can then copy the key and use it to unlock your encrypted drive through Windows or using manage-bde.
How to Avoid BitLocker Lockouts and Decryption Problems
After regaining access, take the following steps to avoid another BitLocker lockout:
- Back up the recovery key to more than one secure location.
- Keep at least one copy away from the encrypted computer.
- Verify that the saved key matches the correct drive and Key ID.
- Back up important files before changing encryption settings.
- Suspend BitLocker before certain BIOS, UEFI, TPM, or firmware changes when appropriate.
- Do not format a locked drive unless you have accepted that the encrypted data will be lost.
Remember that suspending BitLocker is usually more appropriate than fully decrypting the drive when you only need to complete temporary firmware or hardware maintenance.
Conclusion
To decrypt BitLocker in Windows 11 or Windows 10, first make sure the drive is unlocked. You can then select Turn off BitLocker in Control Panel, run manage-bde -off X: in Command Prompt, or use Disable-BitLocker -MountPoint "X:" in PowerShell. Check the decryption progress with manage-bde -status or Get-BitLockerVolume.
If the drive is locked, locate the correct password or 48-digit recovery key before attempting decryption. Check your Microsoft account, work or school account, USB backups, printed copies, and saved files first. Magic Recovery Key can help search accessible locations for recovery-key information that was previously saved, but it cannot bypass BitLocker encryption or create a missing key.
After the drive becomes fully decrypted, BitLocker protection is removed. If you only need to perform a temporary BIOS, TPM, or firmware change, consider suspending BitLocker instead of decrypting the entire drive.
Supports Windows 7/8/10/11 and Windows Server
FAQ-How to Decrypt BitLocker Safely
How do I decrypt BitLocker in Windows 11 or Windows 10?
How do I decrypt BitLocker using CMD?
How do I decrypt BitLocker with PowerShell?
Can I decrypt BitLocker without the recovery key?
Is decrypting BitLocker the same as unlocking it?
Will decrypting BitLocker delete my files?
How can I check BitLocker decryption progress?
Can I turn off my computer while BitLocker is decrypting?
