Case file · Honest limits · BDR-2025-0330
Locked Out by My Own Fingerprint.
The laptop's scanner did not recognise me and now locks me out
; the fallback Microsoft PIN or password
had gone the way of most backup passwords. Microsoft support couldn't help. Inside sat the laptop's two drives — one traditional and the other solid state
— work and personal life divided between them.
Same symptoms on your desk?
01273 964902
The decode.
Being locked out of Windows and being locked out of your data are entirely different problems, and everything turns on which one applies. A Windows login is an authentication layer sitting on top of a filesystem that may be perfectly readable to anyone holding the drive. BitLocker is not — it encrypts the volume itself, and without a key or recovery password, no laboratory on earth reads it. Establishing which situation you're in takes minutes and must happen before anyone takes money.
Equipment on this case.
How a case runs →| Platform | What it did here | Why this tool |
|---|---|---|
| Atola Insight Forensic | Write-blocked imaging of both drives, so nothing changed while we established the position | Parallel imaging at speed, with write blocking and reporting built in |
| Passware | Handled the encrypted volume once the recovery key was located | Decryption where the owner has lawful authority and a key can be established |
| UFS Explorer Professional Recovery | Read the unencrypted volume's NTFS structures and the decrypted volume afterwards | Stronger than most on the awkward filesystems — APFS, ReFS, XFS, ZFS, Btrfs |
On the bench.
Image both drives before deciding anything
Both drives were imaged through hardware write blocking on arrival. That matters more than usual here: if the case had turned out to involve encryption or any dispute over access, the originals needed to be provably unaltered, and doing it that way costs nothing when it isn't needed.
Check for encryption before quoting a single figure
The images were examined for volume headers first. The hard drive was plain NTFS — readable directly, the Windows login irrelevant to it. The SSD carried BitLocker, which changed that half of the job from a read into a key problem, and the owner was told so before any recovery work was quoted.
Find the key rather than assume there isn't one
BitLocker recovery keys are escrowed to a Microsoft account far more often than owners realise, and this one was — we walked him to the right page and the key was in his own account. With it, the encrypted volume opened properly. Without it, the honest answer would have been that this half of his data was gone, and we'd have said so.
The outcome.
Both drives' contents returned — one read past the lockout entirely, one unlocked properly with its own key. The fingerprint scanner remains unforgiven; the recovery key is now written down somewhere that is not the encrypted laptop.
Related on the index.
More from Honest limits.
Recognise your own drive in this story?
Same rule as every case above: power it down, and let the diagnosis be free before any decision has to be.