Skip to content

What is MANAGE-BDE Windows command?

Manage-BDE is a versatile Windows command-line tool that allows users to efficiently manage BitLocker drive encryption on their devices.

Terminal window
manage-bde
OptionDescription
-autounlockManages automatic unlocking of data volumes
-statusDisplays the encryption status of the volumes
-onEnables BitLocker protection on a volume
-offDisables BitLocker encryption on a volume
-pauseSuspends BitLocker encryption on a volume
-resumeResumes BitLocker encryption on a volume
ParameterDescription
-autounlockSpecifies to enable or disable automatic unlocking for a data volume
-statusDisplays the encryption status of a specific volume or all volumes
-onEnables BitLocker protection on the specified volume or volumes
-offDisables BitLocker encryption on the specified volume or volumes
-pauseSuspends BitLocker encryption on the specified volume or volumes
-resumeResumes BitLocker encryption on the specified volume or volumes
Terminal window
manage-bde -on C:

Enables BitLocker encryption on drive C.

Terminal window
manage-bde -off D:

Disables BitLocker encryption on drive D.

Terminal window
manage-bde -changepin E:

Allows changing the BitLocker PIN for drive E.

Backup BitLocker Recovery Key for Drive F to a USB Drive

Section titled “Backup BitLocker Recovery Key for Drive F to a USB Drive”
Terminal window
manage-bde -protectors -get F: -type recoverykey > E:\RecoveryKey-BitLockerF.txt

Backs up the BitLocker recovery key for drive F to a USB drive.

Terminal window
manage-bde -resume G:

Resumes the BitLocker encryption process on drive G.

To use the manage-bde command in CMD, execute the following command:

Terminal window
manage-bde --status

How can I encrypt a specific drive with manage-bde?

Section titled “How can I encrypt a specific drive with manage-bde?”

To encrypt a specific drive using manage-bde, you can use the following command:

Terminal window
manage-bde -on C:

To decrypt a drive using manage-bde, you can run the following command:

Terminal window
manage-bde -off D:

Can I change the password for BitLocker using manage-bde?

Section titled “Can I change the password for BitLocker using manage-bde?”

Yes, you can change the password for BitLocker using manage-bde by executing the following command:

Terminal window
manage-bde -changepassword E:

How do I add a numerical password to a BitLocker-protected drive with manage-bde?

Section titled “How do I add a numerical password to a BitLocker-protected drive with manage-bde?”

To add a numerical password to a BitLocker-protected drive using manage-bde, use the following command:

Terminal window
manage-bde -protectors -add C: -TPMandPIN

How can I backup the BitLocker recovery key using manage-bde?

Section titled “How can I backup the BitLocker recovery key using manage-bde?”

To back up the BitLocker recovery key with manage-bde, you can run the following command:

Terminal window
manage-bde -protectors -adbackup C: -ID {RecoveryKeyID}

Can I generate a recovery password for BitLocker using manage-bde?

Section titled “Can I generate a recovery password for BitLocker using manage-bde?”

Yes, you can generate a recovery password for BitLocker using manage-bde with the following command:

Terminal window
manage-bde -protectors -get C:

How do I suspend BitLocker encryption temporarily with manage-bde?

Section titled “How do I suspend BitLocker encryption temporarily with manage-bde?”

To temporarily suspend BitLocker encryption using manage-bde, you can run the following command:

Terminal window
manage-bde -protectors -disable F:
  • Initialize-BitLocker
  • Suspend-BitLocker
  • Resume-BitLocker
  • Lock-BitLocker
  • Unlock-BitLocker
  • Repair-BitLocker
  • Update-BitLocker
  • Backup-BitLockerKeyProtectors
  • BackupToAAD-BitLockerKeyProtectors
  • Remove-BitLockerKeyProtector
  • Add-BitLockerKeyProtector
  • Get-BitLockerVolume
  • Enable-BitLocker
  • Disable-BitLocker
  • Disable-BitLockerAutoUnlock
  • Enable-BitLockerAutoUnlock
  • Disable-BitLockerRecovery
  • Enable-BitLockerRecovery