BitLocker recovery screen pops up on every single boot asking for a 48-digit key

BitLocker was created to protect your computer in the event it's stolen. Someone with physical possession of your computer is able to tamper with it in ways that no hacker can try. When BitLocker detects these attempts to tamper with your computer it immediately activates, to protect the computer owner's privacy and security.

Sometimes people make changes to their computer that BitLocker considers attempts to tamper with the computer. There's a long list of activities that are considered 'tampering', not all of which are published. It's up to the computer's owner to recognize that they have performed one of these activities, since no one else can guess what they did.

Microsoft has a list of activities that can trigger BitLocker on startup. Here is another list from Specops, a company that offers Identity Access Management (IAM) software.

The real way to deal with seeing BitLocker on every startup is to fix the suspicious activity that BitLocker is detecting. For most people, that's a technical task that requires outside help.

The other way is to disable BitLocker altogether, which you can do from Control Panel. If you take this route, you won't have BitLocker to protect your computer, but maybe that isn't so important to you.

In your case, the firmware update might have been what triggered BitLocker. Installing new motherboard firmware is something a thief might try to gain access to a computer. That's why computer manufacturers always warn users to temporarily disable BitLocker before installing a BIOS update.

Finally, if you're terrified of losing your files - as everyone should be - keep this in mind: You don't lose files that have been backed up.

You can find a tutorial how to turn it off here. Even tho the site is from asus this should work on any windows 11 home device.
https://www.asus.com/support/faq/1047461/

If you are using a business computer you might have to ask your system admin

Hi Liam Wilson,

The recent HP firmware update altered your computer's core boot code and caused a mismatch in the Platform Configuration Registers (PCR) tracked by your motherboard's Trusted Platform Module (TPM) security chip. The chip detected a different hardware blueprint, it safely refused to release the drive's encryption key automatically, triggering the BitLocker Recovery screen at every boot (tracked as Event ID 24652).

To fix the loop, use your 48-digit key to boot into Windows. Press Windows Key + R, type control.exe /name Microsoft.BitLockerDriveEncryption, and hit Enter.

Or, find your main operating system drive and click Suspend Protection. This temporarily clears the outdated TPM baseline measurement without decrypting your files.

Hope this answer has brought you some useful information. If it did, please hit “accept answer”. Should you have any questions, feel free to leave a comment.

VPHAN