Can't Open Encrypted USB Drive? Try These Fixes First

1. BitLocker: Use the Recovery Key (Most Common)

If you're on Windows 10 or 11 and you used BitLocker to encrypt the USB drive, the culprit is almost always the recovery key. BitLocker doesn't let you brute-force your password — it locks you out after 5 bad tries. Then it demands the 48-digit recovery key.

Where do you find it? Check these places in order:

• Your Microsoft account — Go to https://account.microsoft.com/devices/recoverykey. Sign in with the same account that encrypted the drive. You'll see a list of recovery keys. The key ID (first 8 characters) matches the one on the USB drive's lock screen.
• Printed or saved file — When you first turned on BitLocker, it offered to save the key to a file, print it, or save to your account. Look in your Documents folder for a file named BitLocker Recovery Key.txt. Also check old emails.
• Active Directory — If this is a company laptop, your IT team probably stored it in AD. Call them. Don't mess with it yourself.

Once you have the key, plug in the USB, click "I forgot my PIN" or "More options", then "Enter recovery key". Type or paste the 48 digits. That's it — the drive unlocks and you can change the password later.

Why this works first: BitLocker is the most common encryption on Windows USB drives. The recovery key is the only way in if you forgot the password. No backdoor, no hack.

2. VeraCrypt: Rescue Disk or Backup Header

VeraCrypt gives you a similar safety net — the rescue disk. You created it when you first encrypted the drive. Didn't make one? Then this fix won't work, sorry. But if you did, here's the drill.

1. Plug the encrypted USB drive into your PC.
2. Open VeraCrypt, click Select Device, pick your USB drive.
3. Click Mount, then when it asks for a password, click Use Rescue Disk.
4. Browse to the rescue disk file (usually named VeraCrypt Rescue Disk.iso). Burn it to a CD or USB first if needed.
5. VeraCrypt boots from the rescue disk and offers three options. Pick Repair damaged header or Restore key data. This bypasses the password check and lets you reset the password.

No rescue disk? Don't bother with password cracking tools — they rarely help. VeraCrypt uses strong encryption (AES, Serpent, Twofish). Brute-forcing would take years. Your only other option is to reformat and lose the data.

Real-world example: I had a user who encrypted a 256GB external drive with VeraCrypt, forgot the password, and the rescue disk was on the drive itself. That's a dead end. Moral of the story: save the rescue disk to a separate location.

3. FileVault (macOS): Recovery Key or iCloud

Mac users who encrypted a USB drive with FileVault have a similar recovery path. FileVault for external drives is less common, but it happens. Here's the fix.

• Check iCloud Keychain — If you enabled iCloud Keychain when you set up encryption, the recovery key might be stored there. Go to System Settings > [Your Name] > iCloud > Password & Security. Look for "Recovery Key".
• Find the printed copy — FileVault often shows the recovery key during setup and asks you to write it down. Check your notes, passwords app, or a piece of paper you might have stuck to the drive.
• Use Disk Utility — If you can't find the key, open Disk Utility, select the encrypted USB, click Unlock, then choose Forgot Password?. It prompts for your Apple ID. If the drive was encrypted with that Apple ID, it resets the password.

FileVault on external drives is tied to your Apple ID. That's actually a good thing — you can reset it without losing data. But only if you remember the Apple ID password. If you don't, you're stuck.

Skip this: Trying to guess the password. FileVault locks the drive after 10 failed attempts. You'll have to wait 5 minutes between tries. Not worth it.

Quick-Reference Summary Table

Final advice: No matter what encryption you use, always back up the recovery key or rescue disk to a separate location — not on the same USB drive. Write it on paper and put it in a safe. You'll thank me later.