Changing the BitLocker password
Is there any way to change the BitLocker password?
You can change the recovery password without decrypting in one of two ways 1) using the manage-bde tool or 2) using the Win32_EncryptableVolume WMI interface. The first method doesn't require any programming/scripting so we'll go that route.
Assume X: is the BitLocker protected drive you want to change recovery password for.
- Open an elevated cmd prompt
- Type
manage-bde X: -protectors -get -type RecoveryPassword
- Locate the protector you want to cycle (probably the only one displayed) and copy its ID field (including the curly braces).
- Type
manage-bde X: -protectors -delete -id [paste the ID you copied]
- Type
manage-bde X: -protectors -add -rp [optionally specify the new 48-digit password or enter nothing to have it randomly generated for you]
And you're done! You've changed your recovery password.
Note: If you get an error when you try to delete the recovery password, this is likely because a recovery password is required by Group Policy on your system. To get around this, first suspend BitLocker with manage-bde X: -protectors -disable
then after you've added the new recovery password, resume protection with manage-bde X: -protectors -enable
.