How to: Crack Bitlocker encrypted drives

[@PentestsandTech]

Here is the command if you want to crack the recovery key: John --format=bitlocker-opencl -mask=?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d target_hash

[@SamuelVanlalruatsaka]

Can you tell me which code to be replaced?

[@PentestsandTech]

Target_hash

[@commandojas]

@@PentestsandTech Awesome video. How can I carry this out with hashcat? Target_hash only seems to exist as part of the John attack.

[@bckhaw9855]

@@PentestsandTech Hi, can I know what is the code I need to replace for the "Target_hash"? Do you mean the Txt file name where I saved the hash?

[@PentestsandTech]

Yes, the text file containing the hash

[@mariadiosa2619]

Best soft soft tutorial for beginners on KZbin! I'm an absolute beginner and all the other tutorials I've found on KZbin have been so

[@UnitedWeIgnite]

I agree

[@a_fading_shadow]

how many people here are like me where I lost the key and password...

[@bibizarafshan4723]

Do you find any solution for this problem ?

[@halalpolice594]

😢

[@Hero360-k1e]

​​@bibizarafshan4723 do you find any solution for the problem

[@iamnotthecia]

I'm here because windows decided to permanently encrypt my entire fucking ssd because I had the audacity to disable boot security in my bios. I never even activated the fucking thing and never set up a password

[@antoniocptsl]

Hey! I deleted my comment before seeing your response, but I just had to press Enter and it showed the results! Currently running Hashcat, hopefully should be cracked soon. Great video, you got yourself a subscriber. Keep up the good work! ;)

[@nwj2468]

Thank you for this video. This seems to be the only method I could get to work (I originally had trouble just making the image of the drive).

[@ScottPlude]

How on earth have I not seen this until now?!?!?! Thanks!

[@PentestsandTech]

You’re welcome, just so you know, it dosen’t work on windows 11 anymore

[@MrHappy702]

This is a great video! Though as a preventative, what is the best thing (besides long complex password) that one can do to make cracking the bitlocker driver extremely difficult to almost impossible?

[@trollerbladdering]

I've had a rapid influx of people coming into my tech repair store because the Windows 22H2 update has been bricking systems left and right and unfortunately many of these people don't even know what bitlocker is, why it was enabled, and don't have their key. I'm hoping this method might be a solution for these people.

[@inadaizz]

Hey I needed this today... and you uploaded it today. Hello =D

[@PentestsandTech]

I'm glad I could help!

[@steveb936]

Hi, I have FTK imager downloaded, where do I find the other 2 that I need Thanks

[@tonycole9593]

I don't get it. If you have logged onto the pc, then you have access to the drive, and can manage bitlocker. It would be more useful to see how you would access a drive that you dont have access to the Windows credentials.

[@renjithbalan6417]

I created disk image using external hard disk.when using code commend it shows invalid version.is it necessary to create image with TPM chip and possible to extract the image using another system with TPM Chip

[@jamesedwards3923]

Why would I save my 'unencrypted' recovery key to a MS cloud account?

[@PentestsandTech]

The majority of people don’t worry about their bitlocker recovery key being subpoenaed by law enforcement. Also someone would need to hack your Microsoft account, bypass your MFA, and then also gain physical access to your computer. Which i think would be very likely.

[@PentestsandTech]

Mostly for people who just want a little extra physical security, but also have data that they cannot afford to lose if they forget their encryption key. Also if your recovery key gets stolen, you can always change it, and there is nothing an attacker can do remotely with your recovery key.

[@michalbicki6196]

IT WORKED!!! THANK YOU SO MUCH!!!!

[@vinodkanaujia]

Hi i m badly facing the problem of forget pwd and recovery key of my ext hd, plz guide me in simple words how can i get my data recovered plz

[@b1izz79]

so I'm stuck right in the beginning basically, when i run that first command from the jumbo john "run" folder i get "Unknown option: "-i"" so out of curiosity I've tried running it without that option not expecting much so these following errors might not mean much " detected hash type "HMAC-SHA256", but the string is also recognized as "HMAC-SHA512" Use the "--format=HMAC-SHA512" option to force loading these as that type instead oracle: Input file is not UTF-8. Please use --input-enc to specify a codepage. Error: UTF-16 BOM seen in input file." I've used the suggested parameters here too and received this output: Invalid encoding. Supported encodings: ASCII (or RAW), UTF-8, ISO-8859-1 (or Latin1 or ANSI), ISO-8859-2, ISO-8859-7, ISO-8859-15, KOI8-R, CP437, CP720, CP737, CP850, CP852, CP858, CP866, CP868, CP1250, CP1251, CP1252, CP1253, CP1254, CP1255, CP1256

[@pcnerve]

Hey manthaks for helpfu video. MY lenovo thinkpad has 240gb ssd windows 8.1 pro installed. My account is locked out; I don't have admin password. My ssd is bitlocker-locked out with lots of my data on it. I have windows logon screen without admin/user password. I don't have any recovery key or password. my account is locked out. I spent 3-days; went through all steps as you explained; my disk image is ready; I extracted hash keys with jumbojohn; ran hashcat with dictionary attack; nogo, it says exhausted and does not recovered any password. JmboJohn hashed the keys: and it says Bitlocker with TPM. I need to crack 48-numbers Recover-Key., which is only possible applying "BruteForce" full random. However I don't know how to compose command for brute force using "jumbojohn" or hashcat. please help... Note: -openCL option is not working on my pc, because I have nvidia GT 710 graphics card, which i did driver tweak but it crashed saying ran out of resources

[@PentestsandTech]

If your Lenovo has a TPM chip, then this method will not work. I'm sorry for the inconvenience.

[@UmerFarooq-ch3sv]

I always got error notification receive like this (error recovering disk G: A Recovery key was not found on this drive) any one can give me any soloution ???

[@BlitzYT_.]

TNice tutorialS IS WHAT I NEEDED BRO, thank you for taking the ti and doing tNice tutorials for most of that are starting with tNice tutorials beautiful tNice tutorialng called

[@malkisj2010]

Greeting, I have WD my passport portable drive bitlocker and I do not have the password or they backup key. so my question is it possible to access the drive and backup all files saved on it ? please let me know I appreciated your quick replay

[@shashankks1962]

Did you find any solution?

[@IcySilverPig]

For the bitlocker2john how long does it take? I have a 500gb HDD if that helps.

[@andrzejwojewodzki6983]

I had two partitions on my bitlockered 1TB drive. jumbo-john stops always at "VMK entry found at 0xede90f8a90" after around 24 hours of work. How, in that case, find the hashes of only one partition instead of a whole disk? Any suggestions? How to make a bit-to-bit image of chosen partition only?

[@FDNYC]

You showed how to crack it with a dictionary "wordlist" passwords. What about a recovery key? there is no wordlist for it so how is it done?

[@shashankks1962]

Brute force, try 10^48 combination of recovery keys

[@Bipolarvideos]

Also getting: Hashfile "file.txt" on line 1 Salt-value exception No hashes loaded.

[@PentestsandTech]

Did you name your hash file “file.txt”

[@Bipolarvideos]

@@PentestsandTech I did, I fixed it somehow, but I can't remember how since it was 3 weeks ago. I just did a bit of googling.Needless to say I didn't crack the password 😅

[@VIRAL_DNA]

Doesn't work for me. USB 3.0 to Physical SATA Drive and FTK Fails almost immediately, changed output to a new NVMe and got stuck at 1%. Not going to bother trying again. Will just use DD.

[@abhirupom4634]

hey , i m in a trouble , due to hadware change of my system my hardisk has been encrypted . and its 48 digit recovery key is not saved in my microsoft account . will i get accsses to those data , through this method ?

[@parmarpratik8000]

If you found any solution for it, kindly share. Thanking you in advance

[@adithya00]

If the all drives are encrypted and don't know any decrypt key what I can do ? (Only hope is cmd with X: drive in the blu screen.)

[@DaEpicFirestar2]

having same problem 2 years later

[@jumpieva]

quick question, since this is specific to bitlocker can i still use these tools for other types of brute forcing? I got a computer in an estate auction, and strangely there was also a disk labeled "merlin encrypted HD". i can't seem to find much specific to merlin and encryption other than 'merlincryption' but not sure if that's relevant? it mentions an m70 which is a dell laptop, does dell have proprietary encryption?

[@modernkangal]

I was tempted to answer, so here I am. Yes, Dell does have proprietary encryption I'm sitting here struggling to get bitlocker removed😂

[@Me-fl2xt]

How do I do a recovery password fast attack with john? Because I have a drive that is locked

[@justytchannel]

Hey, I have a big problem - the thing is that I saved the key on an encrypted disk - I only saved it there and I do not have access to it, unfortunately I do not remember the password, is there any possibility to crack the password, recover the key or, for example, recover files from of an encrypted disk, and then clean it and upload a new system to have access to this disk?

[@Hirenkabariya]

my HDD is lock by bitlocker for some reason the drive got locked after an update and the Bitlocker key ID has changed,

[@brutusjb3814]

ive been trying to crack my old 2tb harddrive so far its been scanning over the VMKs for 20 hours.

[@PentestsandTech]

Large drives can take a longggggg time, just let it keep going and it will eventually finish.

[@pqowi9098]

@@PentestsandTech Hi I've been scanning the VMKs for a long time and it dosn't seem like its going any further. HDD is still flashing though. Will I have to restart ?

[@PentestsandTech]

It does take a long time, I’d let it run for a while longer. How large is your hard drive?

[@kankinping120466]

Hi hi - my external drive freezes after I enter my bitlocker password - how can I attack this problem?

[@PentestsandTech]

Sounds like you have a hard drive issue.

[@leonwallace8646]

I encrypted my 250g drive from my Dell laptop and for some reason the drive got locked after an update and the Bitlocker key ID has changed, making my backed-up key obsolete. I know the password which is composed of 12 characters (1 capital letter + 8 lower case letters + 1 special character + 2 numbers) Whats the best method to retrieve the key and not the password? Thanks for the video.

[@m3awna]

@Leon Wallace I have a similar problem (bitlocker screen after update) but I never used bitlocker on the computer. Any success on your part? have you succeeded in recovering your data?

[@alexhall2514]

Hi I have the same problem, did you ever find a solution?

[@leonwallace8646]

@@alexhall2514 unfortunately no I tried a bunch of different solutions and ultimately the ssd got corrupted so I had it replaced

[@userwest626]

I tried all the steps did get work out. I have 64GB sd pulled from lumia 950 when testing arm on windows, the phone suddently when dead. i found this video and tried all steps, the bitlokerjohn end up empty, no password, also tried different pirated data recovery, tried to open the image file, still get nothing. what do to?

[@creepertntboom122]

Im following the thing but it keeps saying run is an unrecognized command pls help I have 4 brain cells and cant do this

[@PentestsandTech]

What command are you running

[@creepertntboom122]

@@PentestsandTech windows 10 command prompt

[@PentestsandTech]

@@creepertntboom122 what command are you running inside command prompt?

[@vaclavvyhnalek2520]

Doesnt work for me. at Bitlocker2John it shows "Error: VMK not encrypted with AES-CCM (0x93,0xa0)" Anyone can help?

[@christianez6899]

If I encrypted my personal USB on a work computer and don't have that original device anymore that encrypted - does this work?

[@swordguy8]

Is it possible to use a similar method to decrypt files encrypted with ransomware?

[@traida111]

yes and no. an example: kzbin.info/www/bejne/iaebqqhnZ95osK8

[@kasztan4236]

I got to 7:56 and it gets stuck at "Initializing backend runtime for device #1..." I left it alone for half an hour and still nothing. Any suggestions as to why that's happening?

[@totto599]

While trying to install FTK imager, I'm getting a Processor not supported error - is it because I'm on a 32 bit system?? If so from where can I get the 32 bit one??

[@PentestsandTech]

Sorry man, they don’t make a 32 bit version. 32 bit is being phased out because 32 bit processors are not being made anymore. I’m guessing you have a 64 bit processor but your windows install is probably 32 bit. Consider reinstalling windows and making sure you select 64 bit.

[@gitaproductionlive9772]

Please does soft soft need a driver for midi controller? Coz it's not reading my midi controller, m-content oxygen49, thanks if it need please

[@fursan7525]

Hi there, I actually have the recovery key, but when i enter the Bitlocker-Key it opens the lock but I still cannot access the drive! I get the Message: I need to format the drive before using it; file location is not available ! any Idea? thank you in advance

[@rashidmehmood-bf7ro]

Hey, I'm just starting to get into making soft and tNice tutorials 17 minute video helped a LOT MORE than those one hour long tutorials out

[@peshoboksiora6417]

Hello I’m currently facing the problem with encrypted hard drive with VeraCrypt I encrypted it last year and write Down on a paper the password now when I’m trying to access the Bullshit VeraCrypt keep giving me the same error code any help or suggestions please. I really have important information on the disk .. Please help guys

[@kumpipanda5923]

i have a vhd which was created and encrypted in windows 7 but after i upgrade to windows10/11 bitlocker doesnt recognize the drive and mount directly but files are still encrypted cant be opened. Any way i can recover my files?

[@PentestsandTech]

I haven’t heard of this problem, i would try to make a windows 7 VM and decrypt the files.

[@mumukshud.c.1866]

How do I defend my bitlocker-encrypted external hard disk against this attack??

[@user985121]

Can you give some stats on end-to-end cracking time? Ie. against recovery keys, since they are fixed in size and complexity. Which means cracking time of a fixed volume size should be relatively constant.

[@Chhhhh-m7n]

Hashfile 'bitlocker.txt' on line 1 ($bitlo...b4234dc33fc6fe2432e46f6839b1c467): Salt-value exception No hashes loaded. how can i resolve this

[@flaymezn]

both the GMS and softEX setup is very different from the one ur using.. why is it so.? GMS doesn't even soft like a app one... and the

[@umerfarid4109]

ftk is not install. why? my problem is that i know my bitlocker password but unfortunately i have window 10 to 8.1. now my encrypted drive is not open by saying wrong password. what i do help me??

[@nerifico2165]

Hi, i have a very big problem and i was not my fault. HP ProBook 450 G5 with 2 drives i just reinstalled windows 11 fresh to M2 drive after formating everything but never touched SATA drive with all the data inside almost 950gb of data. I also did load factory default settings in bios and now i have the SATA drive with bitlocker encryption and of course don't know the password. Can you help me please, i need to recover my data please

[@vdk996]

how u get 6gb from 8gb of ur video memory? i have 3070

[@itzcybermusicwala]

What can I do with numerical password ID and external key id ?

[@benl3115]

Amazing tutorial

[@brutusjb3814]

maybe you can do a video on how to setup a mask on hashcat.

[@PentestsandTech]

That’s a good idea, thank you!

[@PentestsandTech]

I just released a video about mask attacks, go check it out!

[@bikashthagunna]

@@PentestsandTech Can you please provide the link.

[@PentestsandTech]

kzbin.info/www/bejne/iJq7Ya2cjK2Gb80

[@Nopelken]

I can't enter anything, just receive the blue screen. Probably by windows update ystem fails, can't even remove the update

[@PentestsandTech]

I’m not sure what to do for that, maybe take it in to a repair shop, or wipe it and reinstall windows

[@duncanmckie3984]

I can't see how to install or download Jumbo John...you mention that was covered earlier, but I can't see anything here. Thanks.

[@Learner-ix6oo]

when I created disk image.. it created multipart files.. how to run bitlocker jhon on those files

[@PentestsandTech]

You have to change the setting to create one file instead of multiple files

[@gabrielrossirocha]

and if my result on john is: VMK encrypted with TPM...not supported! (0x71bbf928) There's an alternative method or game over for my HD?

[@BrayanMontero]

Buenos dias, me sale este error despues de realizar todo lo del video que puede ser? Hashfile 'bitlocker.txt' on line 1 ($bitlo...bd804a5ba7c99d89685dae7cbe4cfbe2): Salt-value exception No hashes loaded.

[@ambientskai]

I know this is 2 years old. But What do I do if john keeps saying No opencl devices found? I'm trying to crack a recovery key since thats all I am getting

[@Yansa1908]

Please help me.... The bitlocker encryption on this Drive isn't compatible with your version of Windows, try opening the drive using a never version of Windows.

[@earlrichards5431]

This video might be useful if we could see what he typed but the DOS screen is too high and we can not see the text, plus the resolution is such that we can't read it. If he put it in the comments section it would be a great help plus he mentioned something he was going to put in the comments section but did not

[@MrRedwired]

When I plug a bitlockered drive into my computer externally to read it, it only asks for a 48 digit key, not a password. Will this guide still work in my case?

[@PentestsandTech]

Cracking the key is not easy, much harder than the password

[@rostan242]

@@PentestsandTech but how to do? any help thanks

[@gabrielT93x]

so no matter how strong the password is, it can be broken by the recovery key right?

[@PentestsandTech]

Yes, the recovery key and password are independent.

[@pikchar2]

like What are the basics you need to learn to produce a , or setup it. Also I need to learn how to add soft notes to a .

[@dandyprihatnolo2817]

Hi, im having a little trouble down here. when i ran a hashcat.exe it gives me an error it says "salt value exception", how im supposed to do?

[@PentestsandTech]

It sounds like your drive may be encrypted with a different version of bitlocker, or a TPM chip was used.

[@dandyprihatnolo2817]

@@PentestsandTech okey, but i try with this step "John --format=bitlocker-opencl -mask=?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d[-]?d?d?d?d?d?d target_hash" it takes forever to find that key, is this normal?

[@PentestsandTech]

Yeah, that process takes very very long

[@xx3868]

HI, Have a ASUS tablet with soldered HD so cant connect to other computer to erase drive. All boot USB attempts keep triggering Bitlocker. So i want to erase drive and install Win 8 but how can i do this? Can i use command prompt in recovery blue screen F8 area or will i still need key. As you explained, will erasing drive totally still leave Key with TPM and still lock me out?

[@PentestsandTech]

You’re gonna need to get usb boot to work, in the bios you should be able to set usb to boot before windows. Either use a Linux usb or the windows installer usb. Both will let you wipe the hard drive.

[@amitkumarparmar5082]

i have formatted my pc and trying to enter the password but showing it wrong why ??? i used to open it everyday with the password

[@arifsahabaccountant7598]

Help ME this error in USB BitLocker Drive Encryption failed to recover from an abruptly terminated Conversion. This Could be due to either all conversion logs being corrupted or the media being write-protected.

[@PentestsandTech]

I'm not sure how to fix that, sorry

[@Xilmz_xz]

Never created a soft ever. Not one. I've watched dozens of videos lately and have learned all kinds of interesting stuff about mic

[@letsgetto1millwithoutvids]

So is it better to get a USB like the Kingston datatraveler 2000 that has hardware encryption with a keypad on is it possible to crack those

[@PentestsandTech]

Those are much more secure

[@user-vi8yq9ud4y]

I am getting "Error while extracting data: No signature found!" Please help

[@PentestsandTech]

Sounds like TPM is enabled, it’s not gonna work. Sorry

[@khawari9605]

why I took a long time when 'creating image' it's been 3 hours, and the progress is just like 1% 😭

[@PentestsandTech]

Either you have a really slow hard drive, its in the process of failing or FTK needs to be restarted.

[@ayden8901]

I was considering upgrading to windows 10 pro go encrypt my laptop, but now I'm not sure :/

[@PentestsandTech]

Just use a secure password you will be fine

[@PentestsandTech]

Some new laptops come with TPM, but most computers that people are using do not have a TPM chip. And TPM is not foolproof, it can also be hacked, albeit with a lot more effort.

[@jamesedwards3923]

If I understand him right. The recovery key is easier to hack in brute force scenarios. Am I right?

[@12Burton24]

Hm m8 i dont know why is it even possible to crack...i mean AES 256 is not hacked yet but ifyo can hack bitlocker it makes no sense to encrypt anything.

[@bestsf]

Hello Thank for this video. At the end, I don't understand that you said (i'm french) : More the disc image is bigger, fast the crack is ?

[@PentestsandTech]

The bigger the disk, the longer it takes to extract the hash. The bigger the password, the longer it takes to crack.

[@bestsf]

@@PentestsandTech Tank you !

[@alexe98765]

Hi, I have BitLocker on my D: drive after OS crash the BL asking for the recovery key instead which I don't have instead of the password which i have. Please help.

[@PentestsandTech]

Recovery key should be on your Microsoft account of saved in a file somewhere. Try locating this first.

[@laradebiasi3907]

Pls clarify my doubt sir does it have tabla soft????? Pls tell sir

[@twistedstyles]

you never explained how did you get the jumbo john......im stuck there

[@user-kh9db2so3j]

I am struggling for bit lockering to my own storage SSD which was been bitlocking on set-up to my laptop Before this situaion I am not using bitlocker to my SSD I hope if i can get your hacking on bitlock ASAP Can yu give me your will? I am eagerly

[@s.d.plissken8986]

"rockyou.txt" file what do I put in it, where can I get a password list... I know most of the password just not the combination of numbers and possibly 1 special character

[@imakethis7628]

is this step possible if i format boot drive and the one im trying to unlock is the other drive (different hard drive).

[@PentestsandTech]

Yes

[@mahdi_promax4083]

hi can someone tell me that with this video can i open locked drive with out recovery key and password? i forgoted my password so can i open drive with it?

[@sergiogonzalez7181]

Hey plis can help me to unlock my external drive what have mys archives whit bitlocker my pc die so I don’t have the key

[@jalen68]

do we really need the full image to be stored somewhere? because my bitlockered drive is 4tb and my other drive is only 1tb will it still be possible to use this method?

[@janekmachnicki2593]

Super video cute !!!! Thanks

[@phr3ui559]

This seems a bit too easy to do. How can I protect my drive from getting cracked so easily? I’m using hardware encryption by the way.

[@PentestsandTech]

If you have TPM enabled, this method doesn’t work. Also always use a long and complex password.

[@phr3ui559]

@@PentestsandTech Doesn’t the recovery key/password bypass TPM though? How does it help?

[@PentestsandTech]

The hash of the recovery key and password are stored in TPM when it’s active, this attack works by grabbing the hashes from the hard drive.

[@pattheitguy]

To increase performance (lower times), what hardware would be best? A video card? If so, what brands/models do best?

[@PentestsandTech]

Nvidia graphics card, as high end as your budget can go

[@gay4milfs]

I have an external hdd that automatically encrypted when I plugged it into my dell xps (this is a known problem with the xps). Somehow Dell installed bitlocker on windows 10 home which means I couldn't really do anything in the program because it doesn't run on windows 10. Absolute nightmare. Anyways, I never set a password for the drive because I didn't even know it was encrypted until half a year later. Would it be better to try and find the recovery key or the password (I'm not sure a password even exists though since I never set one)?

[@PentestsandTech]

The best option would be to try to contact dell, they probably have some idea of what to do. Cracking a password you don’t know exists, and or cracking a 48 digit key are both very difficult to do.

[@gay4milfs]

I tried and they basically denied they put bitlocker on my PC and said they had no idea how it happened + told me to contact microsoft or format the drive...Microsoft told me to find the recovery key which if I were able to do, I wouldn't have called tech support in the first place! Thanks for the help nonetheless

[@darrenlukas]

Hey! Any working solution on this? My gf’s XPS also did the same, but worse because this happens in internal ssd - meaning it also locks her out from Windows. As you mentioned, the key cant be found anywhere and I have tried solutions I found online, such as playing with secure boot, TPM in BIOS setting and downgrade the bios version, but none working. Thanks!

[@gay4milfs]

@@darrenlukas I found my key stored in my Azure account for my school email. I had to contact my school's IT team and have them look for saved bitlocker keys in the company Azure Active Directory. If she had any outlook account logged in on her computer, try contacting IT for whoever manages it

[@darrenlukas]

@@gay4milfs thanks!! Unfortunately she has already graduated, so she can’t login to her student mail. However, I’ll let her know so she could try contacting uni IT helpdesk.

[@CodeDynamo]

Awesome Buddy

[@SrMasterSimpson]

It's working thanks my friend

[@arshad_jamal1]

Could you please help me how to unlock my D drive. I had C and D drive in my PC and both were encrypted with bitlocker. I don't remember when enabled it later I was facing some issues in my windows so what I did I moved all my data to D drive which was bitlocker encrypted and re-installed a fresh windows in C drive after successfully installing when I booted the computer I shocked to see D drive is asking for bitlocker recovery key and n option to disable bitlocker for it. Kindly save me with a solution please 🙏

[@PentestsandTech]

In the future save your recovery key, either in your Microsoft account or elsewhere. Other than that, i cannot help

[@arshad_jamal1]

The recovery method you have explained will not work in my case?

[@PentestsandTech]

It’s a very long shot, and depends on whether or not you have access to a very powerful computer.

[@bennypr0fane]

Could it be that this doesn't work if the image was encrypted by the TPM?

[@bibekkumarsubedi5078]

i cannot find my drive E: in select drive in FTK imager. how do i solve that

[@PentestsandTech]

Do you have an E drive?

[@letsgetto1millwithoutvids]

Well you can save the backup key to the encrypted usb

[@kajolmadhavan8631]

Please help me to unlock my pendrive (bit locker key) I forget my password...

[@sanithomer]

Sorry, I don't totally get how to crack the recovery key per se...I understand the mask part, but where to place the command during the hashcat part? or will it be a file with different recovery keys that will do the same trick as if it was a dictionary?

[@PentestsandTech]

The mask is put in place of the file

[@efsouza78]

Can you explain about file "rock you"? I don´t understand how I create this file. What content will this file contain?

[@PentestsandTech]

It’s a wordlist of possible passwords, if you google rock you it’ll come up