If you’ve had trouble unlocking an encrypted (or BitLocker) drive after an upgrade to Windows, after a piece of hardware was swapped out, when you lost your recovery key or a bit of your disk fails, typically all your information has been preserved behind the encryption. We’ll need your recovery key, password or Microsoft account info to create an image of the encrypted portion, correct the volume and extract the data from the disk.
The same holds true when a drive encrypted with BitLocker requests a recovery key. In this case, it is almost certain that all data stored on the drive remains unaltered, therefore do not reformat the disk, reinstall Windows, nor reset the TPM because this could erase the keys for accessing the disk. Prior to having us restore access to the data contained within, locate your 48-digit recovery key (it might be located within your Microsoft account; your employer’s Azure Active Directory or domain; a printed copy; or saved to a USB device or file). Then bring both items to us and if the disk is failing at some point prior to bringing it to us, stop using it. We will then make an image of the disk and attempt to recover your data using either your recovery key or password.
When an encrypted drive will not open, this usually results from either a lost key, or damaged volume or failing disk, not lost data. Most cases we recover involve your credentials for those three options.
We provide service to recover data from all types of common encryption systems, if you are able to prove ownership and provide the appropriate key(s), passwords, or recovery credential(s). We leave the encryption in place; we simply extract your files out from behind the encryption.
Windows, macOS and Linux · laptops · desktops · servers · NAS · self encrypting drives · password protected flash drives · password protected external hard drives.
Recovering an encrypted drive requires us to image the drive safely before attempting to unlock and recover your data, using either your key or password where available or using forensic and brute force methods where your key or password is unavailable. We never modify the original disk.
If applicable, please tell us about encryption on the drive and what information you possess regarding keys or access credentials.
Have you lost the recovery key? Don’t worry, we will help you locate it using either your Microsoft account details, your organisation’s Azure Active Directory or domain details, a printed copy, a stored file containing the recovery key or a USB device.
We create an exact sector by sector image of the encrypted hard drive, and then use this as a reference point working solely off of it. This way your original hard drive remains unaltered, important in case your hard drive fails too.
When the volume header or BitLocker metadata has been damaged, we will repair these and restore structure to allow the volume to be unlocked.
Using your recovery key, password or credentials, we will now unlock the volume and decrypt all of your data from our created image.
Using our forensic and brute-force decryption methods, if you do not know your BitLocker key, we can still restore access to your data.
After extraction of your files, we verify that all files are properly opened and verify that there was no loss in data.
We return your restored and decrypted data back to you via either fresh media (USB etc.) or via a secure file transfer method.
We support recovery of encrypted drives including BitLocker, FileVault, VeraCrypt as well as others and also support various forms of hardware such as laptops, desktops, servers, network attached storage devices (NAS) and USB memory sticks, and perform this service using a read-only image of your drive and then unlock it with your original key or password.
Tell us what happened and we will get back to you, usually within one working day.
We will be in touch shortly. For anything urgent, call 0191 406 1051.
There are no hidden charges or fees for our services and there will be no pressure; only a complimentary diagnostics evaluation and a written quotation prior to starting any work.
Examples of a few recent successful recoveries from both BitLocker (Microsoft’s encryption) and other forms of encrypted storage. All names have been removed, but we’ve confirmed that they were indeed owners of the items recovered.
The owner stored their key in their Microsoft account so they could access it. We were able to retrieve it and then image the SSD as well as unlock the volume. All of the owner’s data was recovered.
We took a read-only copy of the failed disk, corrected the corrupted BitLocker metadata and unlocked it using the recovery key. Full recovery was accomplished.
The owner had printed out their recovery key. We were able to repair the damaged volume header and unlock the volume, restoring each file.
A free diagnostic can begin once you’ve shipped your device to us. Tell us a bit about how this issue occurred; an engineer will evaluate your device and provide a confirmed written estimate of costs prior to any work being performed.
Before you post or drop off your device, please get a quote from us by phone or with the form. Once we receive your device, our recovery process can start. Safely pack your device, include your name and contact information within the packaging and ship it to us. After performing your free diagnostic, we’ll send you a written confirmation of the exact price of our services prior to starting any work.
If you decide to post it, we would advise using a trackable and insured postal service. Or if you prefer to drop it off, we are open Monday to Friday, 9am to 5:30pm, and you don’t need an appointment. Just pack the unit as described in step one before dropping it off.
Would you like a little more background information prior to sending it? Fill in the form to provide more details about your problem; an engineer will evaluate it and reply with a customised quote.
We’ll be in touch shortly. For anything urgent, call 0191 406 1051.
What are the top questions people ask about recovering their BitLocker-encrypted and other encrypted drives?
In most cases, yes, provided that you have your recovery key, password or Microsoft account information and can prove the drive belongs to you, we will make an image of the drive; repair the volume on the drive if necessary; and, using your login information, access and unlock your data from the drive, even though the physical disk may be experiencing failure.
Do not reformat or reinstall. If you have lost the original 48-character BitLocker recovery key, there is a good chance it has been stored somewhere and can be recovered: check your Microsoft account devices listing, your workplace Azure AD or domain user accounts, any printed copies you made of the key, any file or USB stick you used to store the key. When you bring us whatever you have found, we will complete the process.
Sometimes yes, with our forensic services. The keys to the system may reside temporarily in either the RAM (memory) of the computer or temporary files on that computer. We can usually help you recover your credentials if they are present; however, if they have been removed or deleted we will find this out during the initial assessment process and at that point recovery would be unlikely.
Absolutely yes. This is what we do: First we create a read-only copy of the failing hard drive; secondly, we repair the encrypted volume within that copy; thirdly, once restored and unlocked, we recover the data using your provided key. Creating a copy of your data while it is still viable prevents further damage to the deteriorating media.
Also yes. We also recover data from BitLocker To Go, Mac FileVault, VeraCrypt and TrueCrypt volumes; Linux LUKS and dm-crypt volumes; self encrypting drives; and password protected USB external devices, using your original password or key.
A Windows update, a change of your motherboard or TPM, or resetting the BIOS can result in BitLocker going back into recovery key mode as it did when you were initially encrypting. You’re good to go with regard to the data; now you’ll just need to obtain the recovery key.
Yes. We handle encrypted recoveries confidentially and with full security and are willing to sign a non-disclosure agreement (NDA) to maintain confidentiality and ensure all your files remain secure and are completely erased from our systems once your recovered data is returned to you.
BitLocker and encrypted-drive recovery costs are £800 + VAT on a single disk basis. We take 50% of the total cost upfront for labour and 50% only if we recover your data, for all BitLocker forensic work. In cases where there’s physical failure with the disk we will give written confirmation of any additional costs prior to commencing any work.
Either drop off the drive at our Quayside drop-off Monday to Friday, 9am to 5:30pm, or post it to us fully insured. In addition to sending your contact information, please include any available recovery keys so that we can schedule the process and begin processing your drive after the free diagnosis.
We offer free diagnostics that verify ownership. Then we can also help you recover your data in an unencrypted format (even if the disk is failing). Contact us today.