Table of Contents
- What’s Causing the Persistent BitLocker Recovery Prompt in Windows 10 and How to Fix It Fast?
- Why the BitLocker Recovery Screen Appears
- Event Viewer Clues
- Solution: Install the KB5061768 Out-of-Band Update
- If You Haven’t Installed KB5058379 Yet
- If You’re Already Stuck on the BitLocker Recovery Screen
- Finding Your BitLocker Recovery Key
What’s Causing the Persistent BitLocker Recovery Prompt in Windows 10 and How to Fix It Fast?
Many Windows 10 users have encountered a sudden BitLocker recovery prompt at startup, preventing access to the login screen or desktop. This issue typically appears after installing the KB5058379 update, especially on devices with Intel Trusted Execution Technology (TXT) enabled and 10th generation or later Intel vPro processors.
Why the BitLocker Recovery Screen Appears
The KB5058379 update, released on May 13, 2025, can cause the lsass.exe service to terminate unexpectedly on affected hardware. When this happens, Windows 10 triggers the automatic repair process and, if BitLocker is enabled, prompts for the recovery key. Some systems may enter a reboot loop, repeatedly showing the BitLocker recovery screen, especially if startup repair fails.
Event Viewer Clues
- Event ID 20: Indicates update installation failure with error 0x800F0845.
- Event ID 1074: Shows lsass.exe terminated unexpectedly with status code -1073740791.
Solution: Install the KB5061768 Out-of-Band Update
Microsoft has released the KB5061768 update to address this problem. This update is available for Windows 10 version 1903 and later, including LTSB editions, and supports x64, x86, and ARM64 systems.
If You Haven’t Installed KB5058379 Yet
Download and install KB5061768 immediately to prevent encountering the BitLocker recovery prompt.
If You’re Already Stuck on the BitLocker Recovery Screen
Follow these steps to restore access:
- Restart your device and press the required key (commonly F2 or Delete) to enter BIOS/UEFI.
- Locate Intel VT for Direct I/O (VTD or VTX) and Intel Trusted Execution Technology (TXT) options under the Security or Advanced tab. Disabling them may require entering your BitLocker recovery key.
- Save your changes and exit BIOS/UEFI (usually F10).
- The BitLocker recovery screen should no longer appear. Log in to Windows.
- Download and install the KB5061768 update from the Microsoft Update Catalog.
- Restart, enter BIOS/UEFI again, and re-enable the options you previously disabled.
Finding Your BitLocker Recovery Key
If you don’t know your BitLocker recovery key:
Visit your Microsoft Account’s Devices page. The recovery key is typically backed up there.
This approach ensures your Windows 10 device returns to normal operation while maintaining data security and system stability.