(Operations Guide) How to Do BitLocker Command Prompt Turn Off with TPM?

This tutorial will guide you do BitLocker Command Prompt turn it off with TPM. Besides, it will share easy methods for you to effectively manage BitLocker.


By Irene / Updated on March 1, 2024

Share this: instagram reddit

How to use Command Prompt to turn off BitLocker with TPM? This operations guide will share you the specific steps. And you can also know how to enable or disable BitLocker with TPM in Windows.

How to do BitLocker Command Prompt to turn it off with TPM

If you want to turn off BitLocker using the command prompt with TPM (Trusted Platform Module), you can use the following steps:

Step 1. Open Command Prompt as an administrator. Then press Win + X and select "Command Prompt (Admin)" or "Windows PowerShell (Admin)".


Step 2. To disable BitLocker for a specific drive with TPM, use the following command:

manage-bde -protectors -disable:

Note: Replace with the actual drive letter where BitLocker is enabled. For example, if BitLocker is enabled on the C: drive, the command would be:
manage-bde -protectors -disable C:

You may need to enter your BitLocker recovery key or password, this depending on your own configuration.

Step 3. Once the command completes, BitLocker will be disabled on the specified drive.

But if you want to disable TPM in BitLocker, you can follow the steps as a reference. But kindly please note that, once doing BitLocker disable TPM, the encryption keys used by BitLocker may be more vulnerable to cold boot attacks, where an attacker gains access to the encryption keys by rebooting the computer and extracting them from the RAM.

Step 1. If Group Policy Editor is not available, enable BitLocker first. Open the Group Policy Editor:

Go to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.

Edit the "Require additional authentication at startup" policy.

Step 2. Set the policy to "Enabled" and ensure that "Allow BitLocker without a compatible TPM" is checked.


Note: On Windows 7/Vista, passwords for the system drive are not supported when TPM is not available. If you prefer not to use a USB Startup key or remember the BitLocker Recovery Key (which functions similarly to a password), consider upgrading to Windows 8 or a later version. These later versions support passwords for the system drive even in the absence of TPM.

How to easily manage BitLocker?

If you want to effectively enable or disable BitLocker with TPM in Windows PCs, AOMEI Partition Assistant Professional is the software that should not be missing. This powerful tool enables Windows Home users, who are not supported to run this utility, to enable this function within a few simple steps. For those who have already turned on BitLocker, it offers additional functions, including backing up the recovery key, changing the password, locking the drive, and turning off BitLocker.

Having this software allows you to avoid using complex and risky commands in Command Prompt or PowerShell. All you need to perform operations with BitLocker CMD, such as getting the BitLocker recovery key, enabling or disabling BitLocker, unlocking the BitLocker drive, etc., can be accomplished in just a few minutes.

Download Pro Demo Win 11/10/8.1/8/7
Secure Download

1. Back up recovery key

Step 1. When setting and confirming a password to encrypt the drive, you can choose the way to back up the recovery key.


If you select "Save to a file", please choose a location on your PC to save the recovery key.


Tips: Please do not save the recovery key in the encrypted drive path. For example, it is unable to encrypt D: and save the recovery key on the same D: drive.

If you select "Print the recovery key", it will enable the print function on your PC to print the recovery key. Then, you can click the "Next" button to finish the backup process.


2. Change BitLocker password

Step 1. Locate the encrypted drive for which you want to change the password, then click on the option "Change password".


Step 2. You have two options for changing the password: Use password to change drive password or Use recovery key to change drive password. Choose the method you prefer.



Step 3. If the change is successful, you'll see a window that says "Password changed successfully".


3. Lock/Unlock the drive

If the drive is unlocked, you can click the option "Lock the drive" to lock it directly.


If the drive is already locked, "Unlock the drive" will be the only available option to manage BitLocker. You must unlock the drive before you can manage BitLocker settings for the drive.


4. Turn off BitLocker

Besides easily turning on BitLocker on Windows 10 Home, AOMEI Partition Assistant also offers an easy way to turn it off.

Step 1. Locate the encrypted drive you want to decrypt, then click the option "Turn off BitLocker".


Step 2. You have two options for decrypting the drive: Use password to decrypt the drive or Use recovery key to decrypt the drive. Choose the method that suits your needs. And then begin the closing process.



This passage shares using BitLocker Command Prompt to turn it off with TPM. But you can still use AOMEI Partition Assistant to easily reach your goal. This powerful software allows you shake off complicity and low efficiency of BitLocker CMD.

It is also advisable to use this multifunctional tool for daily computer management. If you are planning to upgrade your device, Clone Disk and OS Migration can transfer your data within minutes. To extend drive space, App Mover, Duplicate Files Finder, Allocate Free Space, Delete Large Files, and Merger Partitions are all proven to be effective functions. For Windows Server users, it offers the Server Edition.

Irene · Staff Editor
Irene is an Editor of AOMEI Technology. She devotes herself in giving insightful thoughts on common computer problems with simple and clear guidance. Irene loves to help people solve problems and explore more solutions on relevant issues. She loves reading, singing and travelling.