How to Enable and Disable BitLocker with TPM in Windows

Command Prompt (cmd) Method

1. Open Command Prompt as Administrator: Click Start, type "cmd", right-click "Command Prompt" and choose "Run as administrator".
2. Disable BitLocker: Type the following command and press Enter:
   manage-bde -off C:
   (Replace C: with the appropriate drive letter if needed).
3. Check Status: To monitor the decryption progress, run:
   manage-bde -status.
Confirm: The drive is fully decrypted when "Percentage Encrypted" shows 0.0%.


PowerShell Method
1. Open PowerShell as Administrator: Right-click the Start button and select "Windows Terminal (Admin)" or "PowerShell (Admin)".
2. Disable BitLocker: Run the following command:
   Disable-BitLocker -MountPoint "C:".
3. Disable All Drives: To disable BitLocker on all drives, use:
   Get-BitLockerVolume | Disable-BitLocker. [1, 2, 3, 4, 5]
Important Notes
• Decryption Time: Decryption takes time, especially for large drives.
• Suspension: If you only need to disable it temporarily (e.g., for BIOS updates), consider suspending it instead using manage-bde -protectors -disable C:.
• Recovery Key: If the drive is locked and you cannot boot into Windows, you may need to enter the 48-digit recovery key before the command will work. [1, 2, 3, 4, 5]
Command Line Instructions
1. Open CMD as Admin: Search "CMD", right-click it, and select "Run as administrator".
2. Check Status: Type manage-bde -status to see which drives are encrypted.
3. Disable BitLocker: Type manage-bde -off <drive letter>: (e.g., manage-bde -off C:).
4. Verify: Run manage-bde -status again to confirm the conversion status is "Decryption in Progress". [1, 2, 3, 4, 5]
If Locked Out (Getting Key)
• Microsoft Account: Visit microsoft.com from another device to find the key.
• Via CMD (if already unlocked): Use manage-bde -protectors -get C: to view key protectors.
• Via CMD (to unlock before turning off): manage-bde -unlock C: -rp <your 48-digit key>. [1, 2, 3, 4]
Note: For Windows Home editions, use the Device Encryption settings to turn off encryption. [1, 2, 3]


Commands used: 1️⃣ diskmgmt.msc 2️⃣ manage-bde -status F: 3️⃣ manage-bde -off F: