> For the complete documentation index, see [llms.txt](https://eaclouddoc.eauditor.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://eaclouddoc.eauditor.eu/eacloud-docs-en/features/it-management/disk-encryption/bitlocker-recovery-keys.md).

# BitLocker recovery keys

eAuditor cloud enables secure storage and retrieval of BitLocker recovery keys for partitions encrypted at the operating system level.

A recovery key may be required when BitLocker requires additional verification, for example after changes to hardware configuration or device security settings.

### How the recovery key is generated

When encryption is initiated from eAuditor cloud:

1. The console saves the recovery key in encrypted form in the database.
2. eAgent receives the encryption task together with the recovery key and the parameters specified in the configuration.
3. BitLocker encrypts the partition on the computer.

eAgent does not verify the recovery key that was previously saved locally in Windows.

{% hint style="warning" %}
If the disk was encrypted with BitLocker before you started working with eAuditor cloud, the recovery key will not appear automatically in the console. For the system to create and save a new key, first decrypt the partition from eAuditor cloud, and then start encryption again.
{% endhint %}

### Retrieving the recovery key

{% stepper %}
{% step %}
Go to **IT Management > Encryption**.
{% endstep %}

{% step %}
Find the computer and partition for which you want to retrieve the key.
{% endstep %}

{% step %}
Click the **Encryption key**.

<div align="left"><figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FUyt2jRt2Iokot2xOj2Vp%2Fimage.png?alt=media&amp;token=2e3bbd83-b6e8-4640-847f-90f0105cf877" alt="Opcja Klucz szyfrowania" width="375"><figcaption></figcaption></figure></div>
{% endstep %}

{% step %}
Confirm administrator authorization.
{% endstep %}

{% step %}
Click **Reveal**, to display the recovery key and copy it.

<div align="left"><figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FHIamzdxgyoe5UlWB4yaL%2Fimage.png?alt=media&amp;token=b6ccba9b-4a89-4ef7-b6c3-5af563387651" alt="opcja ujawnij, aby wyświetlić klucz odzyskiwania" width="375"><figcaption><p><em>Displaying the recovery key after administrator authorization.</em></p></figcaption></figure></div>
{% endstep %}
{% endstepper %}

Recovery keys can be copied individually for a selected partition or in bulk for multiple devices.

### Secure use of the key

Treat the recovery key as access data for the encrypted disk.

* Share it only with authorized persons.
* Do not send the key in an unencrypted email message or messenger.
* After using the key, verify why the device required access recovery.

### FAQ

<details>

<summary><strong>Can I retrieve the key for a disk that was encrypted before eAuditor cloud was deployed?</strong></summary>

No. The system saves the recovery key only during encryption initiated from eAuditor cloud.

</details>

<details>

<summary><strong>Is the recovery key stored in plain text in the console?</strong></summary>

No. The key is saved in encrypted form and can be revealed after administrator authorization.

</details>

<details>

<summary><strong>Can I retrieve keys for multiple devices?</strong></summary>

The system allows multiple keys to be displayed simultaneously, but copying is only possible individually.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://eaclouddoc.eauditor.eu/eacloud-docs-en/features/it-management/disk-encryption/bitlocker-recovery-keys.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.