Wednesday, November 5th 2025

Windows 11 25H2 and 24H2 October Update Triggers BitLocker Recovery

Microsoft has encountered another unusual issue, this time mostly affecting Intel-based PCs. Users of Windows 11 versions 25H2 and 24H2, as well as some Windows 10 users, may unexpectedly find themselves in BitLocker recovery mode. Typically, BitLocker should not request the recovery key unless there have been changes to the system configuration. However, due to a new bug, users are being prompted to enter their recovery keys without any such changes. BitLocker encrypts the entire drive volume using AES encryption by default, ensuring the drive's security even if it is stolen, lost, or improperly decommissioned. "After installing Windows Updates released on or after October 14, 2025 (the Originating KBs listed above), some devices might encounter issues during restart or startup," notes Microsoft document for Microsoft 365 Business and Windows 11 Enterprise licensees.

From a portal not accessible to us (thanks to Windows Latest for images), it seems that Windows 11 25H2 with KB5066835 and Windows 11 version 24H2 with the same KB number are affected. Windows 10 version 22H2 is also impacted, with the originating ID KB5066791. The interesting part is the source of this issue. Since the launch of Windows 8, the Windows OS has included a Connected Standby feature. This power-saving feature allows the PC to stay connected to the network, receiving notifications and streaming music even while in standby mode. It was originally designed to extend battery life on laptops by maintaining a low-power state instead of draining the battery.
Microsoft claims that primarily Intel-based systems are affected. Although there is no detailed explanation yet, it might be related to how Intel CPUs handle power states and interact with Windows. Currently, Microsoft is rolling out the fix slowly, likely planning to release it as another enablement package update to address this issue. The October update has already introduced several problems, so the new package will have many issues to resolve. Furthermore, this update reportedly caused three Azure-hosted virtual desktops running build 24H2 to become stuck at the recovery prompt, making them inaccessible to remote users. It's recommended to back up your BitLocker key (if you use BitLocker), and to apply the latest Windows updates to ensure your system doesn't unexpectedly prompt you for the key.
Source: Windows Latest
Add your own comment

38 Comments on Windows 11 25H2 and 24H2 October Update Triggers BitLocker Recovery

#26
Shihab
Legacy1I do not really get why you need to encrypt the entire drive for the OS? Encrypt another drive with your stuff along side your OS seems a better thing to do.

Like whats the deal encrypt browsing history? Use inprivate mode

Or is it just the fact people want it simple and on one drive to be easy and done right up until you need to enter that BitLocker recovery key.
Private mode doesn’t work for everyone, and session hijacking is (was?) a possibility if someone has physical access. Not to mention the tons of applications that store sensitive data (sometimes even passwords! Looking at you, git and Firefox) as plain text in default user directories.

Encrypting a secondary drive/partition where you dump all your data separately from Windows/Application binaries would still make bitlocker bugs a critical issue. Wouldn’t make much of a difference if your OS is functional but all your data is inaccessible, would it?
Posted on Reply
#27
halcyon
Ok, I give up. They are for 100% using "AI" to run & pass their unit tests. Run, run as far and as fast as you can. To Linux distros or Win10 Enterprise IOT LTSC.
Posted on Reply
#28
lemonadesoda
Time for a class action lawsuit for the stress and downtime:loss of productivity
Posted on Reply
#29
chrcoluk
Bitlocker automated by default now as well, and responsible for 90% of the RE changes/updates in last 2 years. Modern Microsoft is a disaster.
Posted on Reply
#30
DeathtoGnomes
There are no bugs or Usual incidents, they are all unplanned features.
Posted on Reply
#31
theouto
Another absurd update? There are no brakes in this train, what the hell is happening.

This sounds like something that a Linux user would tell you and you wouldn't believe it because it's too absurd to be true.
Posted on Reply
#32
cst1992
lemonadesodaQA doesn’t seem to be M$ strong point
They do QA?
Posted on Reply
#33
FoulOnWhite
I am pretty glad i jumped ship back to 10 iot ltsc recently, here's hoping it is more stable than the joke of 11 recently.
Posted on Reply
#34
jardows
Drive encryption really only protects against one thing - physical access to the drive. The vast majority of users do not need this level of security. Forcing drive encryption on Home installs is absurd. I can't tell you how many people I've helped who were in bitlocker recovery mode who had no idea they had drive encryption. As much as it pains me to say, this is something that Apple has done right, by making drive encryption optional. If you do not turn it on your Mac, your drive is not encrypted. You have to intend to encrypt your drive.

Now from a business standpoint, it is a valid layer of security, but if you are relying on technology for your business, you should have some knowledge of what's going on. For home use, do everything you can to avoid automatic encryption.

BTW - Win 11 IOT LTSC works great, especially after installing Start11. Don't have to worry about all this forced changes, but still get security and bug fixes for years!
Posted on Reply
#35
cst1992
Windows has a habit of idiot-proofing everything to the point of being absurd.
Posted on Reply
#36
dont whant to set it"'
cst1992Windows has a habit of idiot-proofing everything to the point of being absurd.
Context?
Sarcasm?
Posted on Reply
#37
johnnypop
I'm so glad I have not upgraded to 11 and recently installed and working on ubuntu and bazzite along with windows 10 just in case I would need it for something I have not yet managed to do on linux, but windows days are coming to an end on my machines.
Posted on Reply
#38
SPDIF
I also had it two times shortly after updates. No problem when you have your 48 digit Bitlocker key at hand, but it's at least annoying... Last time i did update my Bios for that AMD TPM bug, my pin number to login was not accepted anymore, and my windows 11 became inactivated! Lucky i had set Bitlocker to pauze.

That are from those days... :banghead:
Posted on Reply
Add your own comment
Nov 15th, 2026 17:11 CST change timezone

New Forum Posts

Popular Reviews

TPU on YouTube

Controversial News Posts