DE EN
Contents
Handbook home
Getting started
Getting started Who can do what? Approval & Settings
Company profile
Overview
Areas
Dashboard
Overview Create a PDF report
Devices
Overview Search and filter devices Find devices that haven't checked in for a while View BitLocker keys and LAPS passwords View removed devices
Users
Overview Sign-in analysis
Security Insights
Overview Review controls Manage exemptions Fix a security issue
Mail Security
Overview Set up DMARC reports
Administration
Admin Panel
Overview Manage areas Organization management
MSP & partners
MSP & Partners
Overview Invite and manage an MSP My customers

View BitLocker keys and LAPS passwords

Sometimes you need a device’s stored credentials: the BitLocker key (which unlocks an encrypted device) or the LAPS password (the device’s local administrator password). You’ll find both right on the device itself.

👤 You need Admin rights. Without that level, these values can’t be opened.

⚠️ Caution: These values open encrypted devices and local administrator accounts. Treat them like passwords: share them only with authorised people, copy them only when needed, and close the dialog afterwards. Every access is logged.

Step by step

  1. On the Overview tab, open the Device Table.
  2. In the device’s row, click the key icon at the far left (tooltip “Show BitLocker keys & LAPS passwords (Admin)”). A dialog opens and loads the values; the device name (Device) and ID are shown at the top.
  3. The values are hidden at first. Click the eye icon next to the entry you want to reveal it (click again to hide it).
  4. Use the copy icon to copy the value to the clipboard. A short confirmation appears.

✅ Done. You have the device’s BitLocker key or LAPS password. Close the dialog afterwards with Close.

🖼️ Screenshot: The Device dialog with device name and ID, the warning banner, the BitLocker Recovery Keys and LAPS Passwords sections (values masked), plus the eye (reveal/hide) and copy icons. Demo data, real values redacted.

Target file: assets/devices/secrets-dialog.png

Good to know

  • The dialog has two sections: BitLocker Recovery Keys (with Volume = the drive and Backed up = when it was backed up) and LAPS Passwords (with Account and Backed up). A counter shows how many of each there are.
  • If there’s nothing to show, it reads “No BitLocker keys backed up for this device.” or “No LAPS passwords backed up for this device.”
  • If copying doesn’t work, your browser usually blocked it; Clarios then reports “Clipboard access was blocked by the browser.”
  • If you don’t have Admin rights, instead of the values you’ll see “You do not have permission to view device secrets. This action requires the Admin role.”

💡 Tip: Keep the values revealed only as long as you really need them, and close the dialog afterwards.

What’s next?