How to open and recover a BitLocker To Go drive without a Windows PC

BitLocker To Go is Windows’ encryption for removable drives. It is common on work-issued USB sticks and portable disks, and it has an awkward reputation: if the files are encrypted and you have no Windows machine, they may as well be gone.

That is not the case. BitLocker is a documented volume format. Given the right credential, an app can unlock it and read the filesystem inside - including scanning that filesystem for deleted files.

What you need to unlock it

One of these:

• The password, if the drive was protected with one. This is the usual case for a stick someone set up themselves.
• The 48-digit recovery key. Windows generates this when BitLocker is enabled, and it is often saved to a Microsoft account, printed, saved to a file, or - on a work machine - held by the organisation’s IT department. It looks like eight groups of six digits.

Without one of these, the data is not recoverable. That is encryption working as designed, and no tool changes it. If the drive belongs to an employer, the recovery key is the thing to ask for.

A drive protected only by a smart card or a TPM cannot be unlocked this way, because the credential is bound to specific hardware you do not have.

How the unlock works

Worth being precise, since it is your data:

The password or recovery key you type is used on the device to derive the volume key and decrypt the drive’s contents as they are read. It is held in memory for that session only. It is never transmitted anywhere and never written to disk by the app. Close the app and it is gone.

The drive itself stays read-only throughout. Unlocking a BitLocker volume to read it does not modify it.

Reading a working BitLocker drive

If the drive is fine and you simply want your files off it, NTFS Reader is the app for that: it unlocks BitLocker To Go and gives you the drive as a normal browsable folder, with read and write support for the NTFS, exFAT or FAT32 volume inside.

Recovering deleted files from a BitLocker drive

If files were deleted from the drive, or the volume inside has become unreadable, that is a recovery job:

1. Install USB Data Recovery and connect the drive to your Android phone.
2. Unlock it with the password or the 48-digit recovery key.
3. Scan the unlocked volume. Once open, the volume inside behaves like any other drive - the quick scan reads its NTFS, exFAT or FAT32 records, and the deep scan carves from its decrypted contents if the filesystem is gone.
4. Preview and grade as usual, free, before saving anything.
5. Save to the phone. The BitLocker drive stays read-only.

The same applies to FileVault drives from a Mac, using the volume password or the personal recovery key. See reading a Mac drive without a Mac.

The one case encryption genuinely makes harder

There is an honest limitation here, and it is specific.

Deep-scan carving works by recognising file signatures in raw data. On an unlocked BitLocker volume that is fine, because the app decrypts as it reads - the carve sees ordinary file contents.

But if the BitLocker metadata itself is damaged, so the volume cannot be unlocked at all, then the raw surface is undifferentiated ciphertext. There are no JPEG headers to find, because everything is encrypted. Carving has nothing to recognise.

So the rule is: for an encrypted drive, unlocking is not optional. On an unencrypted drive a deep scan is the fallback when the filesystem is destroyed. On an encrypted one, if the volume will not unlock, there is no fallback. Look after the recovery key.

If the password is wrong

BitLocker will not open with an almost-correct credential - there is no partial success. If the password is rejected, check that you are using the volume password rather than a Windows account password, and that the recovery key is the full 48 digits in eight groups of six, entered in order. On a work drive, the organisation holds it.

If nobody has the credential, the drive’s contents are unrecoverable, and that is the intended behaviour of the product.