BdeUnlock.exe

Windows ProcessMicrosoft Corporation

Also called bdeunlock, bitlocker unlock, bde unlock

WindowsSystem Component

BitLocker Drive Encryption unlock UI. It asks for a password or PIN so Windows can unlock a protected volume. It is not BitLocker setup.

What you need to know

This unlocks a BitLocker volume. It is not Credential Guard and it is not UAC.

BdeUnlock.exe is the unlock dialog for BitLocker-protected drives. Ending it leaves the volume locked. manage-bde and Settings are the management tools.

Safe?: Yes, in System32
Did I turn BitLocker on?: A protected volume is waiting
Should I end it?: The unlock prompt closes

Feex says

If BdeUnlock appeared after I plugged in a USB drive, I would type the password I set on that drive. I would not end LsaIso because of it.

What is BdeUnlock.exe?

BdeUnlock.exe is BitLocker Drive Encryption Unlock. It is the prompt for a locked OS or data volume.

What does it do?

It collects a PIN, password, or recovery key and asks the BitLocker stack to unlock. It does not encrypt the drive by itself.

Why is it running?

A locked volume is mounted, or you clicked Unlock on a drive in Explorer. A surprise prompt means a drive is encrypted, including a leftover USB.

Is it safe?

Usually safe

System32 BdeUnlock.exe is the Microsoft BitLocker unlock UI. A BdeUnlock.exe sitting in Downloads is not that dialog.

A legitimate copy normally runs from:

C:\Windows\System32\BdeUnlock.exe

Unlock UI only
Not UAC consent.exe
Management is BitLocker in Control Panel or Settings

Can I end it?

Leaves the drive locked

Ending BdeUnlock.exe closes the prompt. The volume stays encrypted and unavailable until you unlock it again.

Can I remove it?

Do not delete BdeUnlock.exe. You would lose the supported unlock dialog for protected volumes.

Should it start with Windows?

A locked volume at logon can start it. It is not a chat Startup app.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Low
Memory: Small
Disk: Unlock metadata
Network: None for a local PIN

File information

BdeUnlock.exe file information
Executable name	BdeUnlock.exe
Common legitimate path	C:\Windows\System32\BdeUnlock.exe
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

Lost recovery key

Microsoft account or your org may hold it. Ending BdeUnlock will not decrypt the drive.

Prompt on every boot

That is BitLocker on the OS volume. Review TPM and PIN in BitLocker settings.

Troubleshooting

Diagnose before you change anything destructive.

manage-bde -status

See which volumes are locked. The prompt matches a locked volume.

Do not format as a first step

Unlock or recover first. Format destroys the data.

Technical details

BdeUnlock.exe technical details
Image name	BdeUnlock.exe
Role	BitLocker unlock UI

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Learn: BitLocker · Unlock flow
Microsoft Support: BitLocker · User unlock
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.