Skip to content

What is MANAGE-BDE Windows command?

Manage-BDE is a versatile Windows command-line tool that allows users to efficiently manage BitLocker drive encryption on their devices.

MANAGE-BDE Syntax:

Terminal window
manage-bde

MANAGE-BDE Options:

OptionDescription
-autounlockManages automatic unlocking of data volumes
-statusDisplays the encryption status of the volumes
-onEnables BitLocker protection on a volume
-offDisables BitLocker encryption on a volume
-pauseSuspends BitLocker encryption on a volume
-resumeResumes BitLocker encryption on a volume

Parameters:

ParameterDescription
-autounlockSpecifies to enable or disable automatic unlocking for a data volume
-statusDisplays the encryption status of a specific volume or all volumes
-onEnables BitLocker protection on the specified volume or volumes
-offDisables BitLocker encryption on the specified volume or volumes
-pauseSuspends BitLocker encryption on the specified volume or volumes
-resumeResumes BitLocker encryption on the specified volume or volumes

MANAGE-BDE Command Usage Examples:

Enable BitLocker on Drive C

Terminal window
manage-bde -on C:

Enables BitLocker encryption on drive C.

Disable BitLocker on Drive D

Terminal window
manage-bde -off D:

Disables BitLocker encryption on drive D.

Change the BitLocker PIN for Drive E

Terminal window
manage-bde -changepin E:

Allows changing the BitLocker PIN for drive E.

Backup BitLocker Recovery Key for Drive F to a USB Drive

Terminal window
manage-bde -protectors -get F: -type recoverykey > E:\RecoveryKey-BitLockerF.txt

Backs up the BitLocker recovery key for drive F to a USB drive.

Resume BitLocker Encryption on Drive G

Terminal window
manage-bde -resume G:

Resumes the BitLocker encryption process on drive G.

How do I use manage-bde in Windows?

To use the manage-bde command in CMD, execute the following command:

Terminal window
manage-bde --status

How can I encrypt a specific drive with manage-bde?

To encrypt a specific drive using manage-bde, you can use the following command:

Terminal window
manage-bde -on C:

How do I decrypt a drive with manage-bde?

To decrypt a drive using manage-bde, you can run the following command:

Terminal window
manage-bde -off D:

Can I change the password for BitLocker using manage-bde?

Yes, you can change the password for BitLocker using manage-bde by executing the following command:

Terminal window
manage-bde -changepassword E:

How do I add a numerical password to a BitLocker-protected drive with manage-bde?

To add a numerical password to a BitLocker-protected drive using manage-bde, use the following command:

Terminal window
manage-bde -protectors -add C: -TPMandPIN

How can I backup the BitLocker recovery key using manage-bde?

To back up the BitLocker recovery key with manage-bde, you can run the following command:

Terminal window
manage-bde -protectors -adbackup C: -ID {RecoveryKeyID}

Can I generate a recovery password for BitLocker using manage-bde?

Yes, you can generate a recovery password for BitLocker using manage-bde with the following command:

Terminal window
manage-bde -protectors -get C:

How do I suspend BitLocker encryption temporarily with manage-bde?

To temporarily suspend BitLocker encryption using manage-bde, you can run the following command:

Terminal window
manage-bde -protectors -disable F:

Applications of the MANAGE-BDE Command

  • Initialize-BitLocker
  • Suspend-BitLocker
  • Resume-BitLocker
  • Lock-BitLocker
  • Unlock-BitLocker
  • Repair-BitLocker
  • Update-BitLocker
  • Backup-BitLockerKeyProtectors
  • BackupToAAD-BitLockerKeyProtectors
  • Remove-BitLockerKeyProtector
  • Add-BitLockerKeyProtector
  • Get-BitLockerVolume
  • Enable-BitLocker
  • Disable-BitLocker
  • Disable-BitLockerAutoUnlock
  • Enable-BitLockerAutoUnlock
  • Disable-BitLockerRecovery
  • Enable-BitLockerRecovery