How to Fix Windows Update boots to Blue BitLocker Recovery Screen KB5040442 KB5040427

From CompanionLink Support
Jump to: navigation, search
  • After the July security update of Windows 10 and 11, many machines are boot looping into the BitLocker recovery screen.

  • The issue affects the security updates KB5040442 and KB5040427, which Microsoft released on July 9, 2024.

  • Microsoft has released a warning about this issue..

  • Microsoft's current guidance is to find your BitLocker recovery key and enter it, this should resolve the issue.

How to Check if BitLocker Encryption is Enabled

Windows 10: Open Settings > Update & security -- If you do not see Device Encryption on the page, it is not enabled.
Windows 11: Open Settings > Privacy & security -- If you do not see Device Encryption listed on the page, it is not enabled.

How to Fix this issue

The only available solution to this issue is to input your BitLocker recovery key. Currently there is no workaround for this. There may be a workaround available in the future.
If you have a Microsoft Account

  • Use any device (phone or PC) to log in here, and your recovery key(s) will be listed.
  • Copy the key and type it into the effected machine. Make sure you are careful with this key as this key can be used to unlock your machine without your consent if a threat actor acquires the key.
  • If another person's Microsoft account was used to setup the PC, such as a work or school organization, the key will be under their account.


If you do not have a Microsoft Account If you do not have a Microsoft account, then you should have written your key down somewhere or stored it. This is part of the normal BitLocker setup process. The key should be stored somewhere safe in order to let you restore your data for these sorts of situations.

  • On Paper: There is the option to print out your recovery key when BitLocker was activated. Look at your important papers (or those related to your computer) and your key should be among them.
  • On a USB Thumb or Flash Drive: Another option is to export your BitLocker recovery key to a USB drive. If you did this, you can simply plug the drive into the affected computer and follow the instructions. There may also be a text file on the USB drive, if so, connect that drive to a different computer and read the text file.
  • Work or School Account: If this computer was ever signed into an organization account using a work or school managed email account, then your recovery key may be stored in that organization's Azure Active Directory account. You may need to contact the IT support team for your organization to access your recovery key.
  • On a Text File: You may have exported your recovery key to a text file. This file may be on any other computer you have access to or a phone. You may also have sent this file or key in an email.