Choose default folder for saving BitLocker Recovery Key password
If you have to work with the BitLocker feature frequently, then for the security purpose you must opt for a different default Recovery Key saving location, which others will not be able to guess. This will save your time in moving the key each time and enhance your security too. Here are the two ways using which you can make this possible:
1] Using Group Policy
In Windows 7 or later; Pro & Enterprise Editions, press Windows Key + R combination, type put gpedit.msc in Run dialog box and hit Enter to open the Local Group Policy Editor.
In the left pane, navigate here:
In the right pane of above-shown screenshot, look for the Setting named Choose default folder recovery password which is showing Not Configured status by default. Double click on this policy. Next click Enabled, then provide your custom location in the Configure the default folder path section. You can also use system variables for example, %USERPROFILE%\Documents. Click Apply followed by OK. You may now close the Group Policy Editor and try saving a recovery key for BitLocker at your customized location.
2] Using Registry Editor
Press Windows Key + R combination, type put regedit in Run dialog box and hit Enter to open the Registry Editor.
Navigate here:
In the above shown Registry Editor window, in the right pane, make a right-click and select New > Expandable String Value. Name this newly created registry string (REG_EXPAND_SZ) as DefaultRecoveryFolderPath. Double click on the same to get this:
Moving on, in the Edit String box so appeared, put your desired custom location where you’d like to save your recovery key by default as Value data. Again, you can use here the system variables like %systemroot%\MyCustomFolder. Click OK after making your choice. You may now close Registry Editor and observe the changes with BitLocker Drive Encryption. Once you have done this, you will have changed the default folder location for saving the BitLocker Recovery Key in Windows 11/10/8/7.
Where is BitLocker recovery key stored by default?
For removable data drives, The BitLocker recovery password and recovery key is saved to your Microsoft Account. You can also print it. But you cannot store a recovery key for a removable drive on a removable drive, by default.
Unable to change default location for BitLocker recovery password?
If you are unable to change the default location for the BitLocker recovery password in Windows 11/10, you need to check your Group Policy or Registry settings as mentioned in this post. If you do not have the rights, you could ask your system administrator. Related reads:
