How to Back Up a Recovery Key Safely

What You’ll Need

The account, computer, phone, or drive that issued the recovery key, plus its normal sign-in method.
A secure place separate from the protected device, such as a locked home document safe or a reputable password manager. Choose a location you can reach if the device is lost or unavailable.
Paper and a pen, or a trusted device for making a digital copy. Avoid a shared or public computer, printer, or cloud folder.
If the key belongs to a work or school device, access to your IT administrator. An organization may manage or replace the key.

Step-by-Step

Identify the kind of key. Determine which product or feature generated it. A device-encryption recovery key, an account recovery code, and a password manager emergency kit are not interchangeable. Check the screen or official support page where you first saw the key; do not rely on a vague label such as “recovery code.”
Open the issuing account or device. Sign in through its official app, settings, or website. Use a device and network you trust, and do not follow a link in an unexpected email or message. Menu names can vary by software version, so consult the product’s official instructions if you cannot locate the recovery section.
Locate the key and its identifier. Some services show the complete key; others let you download or print it, or display it only when a recovery prompt appears. Confirm that you are viewing the key for the correct account, computer, drive, or encryption instance. If the page lists a key ID, record it with the key so you can match them later.
Make a secure copy. Use the official download or print option if available, or carefully write the key exactly as shown. Preserve every character, digit, space, and grouping. Do not change the format or leave out a prefix. If you create a digital file, do not put it in an unprotected note, email draft, photo library, or folder that automatically syncs to shared storage.
Check the copy against the original. Compare each group from beginning to end, paying particular attention to similar-looking characters such as 0 and O or 1 and I. Make sure the key is complete and legible. If you can safely return to the screen, compare it again before closing it. A single transcription error can make a recovery copy unusable.
Store it separately and securely. Put the paper copy in a locked place at home, or store the digital copy in a reputable password manager protected by a strong, unique password and multifactor authentication where available. Keep the copy separate from the device it unlocks. A key taped to a laptop or saved only on that laptop may be lost with the device.
Limit access and label it carefully. Make clear which account or device the key matches, but avoid putting the full key on an exposed label. Do not share it in a chat, email, support call, or with someone who does not need it. An authentic support agent should not need you to disclose a full recovery key just to verify your identity.
Check that you can find it later. Confirm that you can access the storage location without relying on the protected device. For a password manager, make sure you know how to reach the account and its recovery instructions. If the service offers a safe way to view or download the key again, confirm that the saved copy matches. Do not test by locking yourself out or changing encryption settings.
Refresh the backup when the key changes. Some services generate a new key when you reset or replace one, reinstall software, or change device security. After any such event, check the official account or device settings and replace outdated copies. If the service lets you revoke an old key, do so only after the new one is safely stored and verified.

Common Mistakes

Keeping the only copy on the device it protects defeats the purpose: that device may be lost, damaged, or inaccessible during recovery. A screenshot can also sync to a shared photo account, while an emailed copy can remain in inboxes and backups you do not control. Avoid placing the key in a general notes app or an unencrypted document simply because it is convenient.

Other frequent errors include copying the key for the wrong device, omitting characters, confusing the key ID with the key itself, and assuming a password reset will restore an encryption key. A password and a recovery key serve different purposes; one may not replace the other. Do not assume a key is safe just because it is long or difficult to guess. Anyone who obtains it may be able to unlock protected data, depending on the product.

Tips

Use two independent secure locations only if you can protect and maintain both. For example, keep a sealed paper copy in a secure place and an encrypted digital copy in a password manager.
Choose storage that remains accessible if your phone, computer, or primary email account is unavailable. Avoid a recovery arrangement that depends entirely on the device you are trying to recover.
Keep the key away from other sensitive information, and do not include it in ordinary device inventories or shared household documents.
For a work-managed device, follow your organization’s approved process. Do not move a company recovery key into a personal account unless IT explicitly authorizes it.
Review the copy after moving, changing password managers, or reorganizing important papers. The goal is both confidentiality and reliable access when needed.

Troubleshooting

You cannot find the key: Search the issuing product’s official support instructions for the specific feature and account type. Check whether the key is held in an account portal, printed during setup, or managed by an administrator. If it is a work or school device, contact IT rather than guessing or trying unrelated keys.

The saved copy does not work: Check that you selected the correct device and key ID, then compare every character with the official source if it is still available. Make sure you are entering the recovery key in the intended prompt, not a password field. Follow only the product’s official recovery instructions; repeated guesses may trigger delays or other restrictions.

The key may have been exposed: Treat it as compromised. Use the service’s official security settings to revoke or replace it if that option exists, then securely remove exposed copies where possible and store the replacement safely. If you cannot revoke it or cannot tell what access it permits, contact official support or your organization’s administrator.

You are locked out and have no copy: Check other places where you may have intentionally stored it, such as a password manager or locked paper records, and consult the issuing service’s official recovery process. Some encrypted data cannot be recovered without the correct key; support may be unable to bypass that protection. Avoid anyone promising to unlock it by asking for your password or full key.

Frequently Asked Questions

Is a recovery key the same as my password?

No. A password signs you in, while a recovery key is a separate credential used in a specific recovery or encryption process. Keep both protected, but do not assume one can replace the other.

Where should I store a recovery key?

Use a secure location separate from the device it protects, such as a locked physical record or a trusted password manager. Make sure you can reach that location if the device is unavailable.

Can I take a screenshot of the key?

You can, but screenshots may sync automatically or be visible to people who can access your photo account. If you keep a digital copy, protect it and check where it is stored and who can access it.

Should I give the key to customer support?

Do not share the full key unless the product’s official recovery instructions specifically require it and you have verified the support channel. Be wary of unsolicited requests; a person with the key may be able to access protected data.

What if I already have an old recovery key?

Check the official account or device settings to confirm whether it is still current and matches the right device or key ID. If a newer key was issued, replace the old backup and securely remove outdated copies when appropriate.

Can the provider recover my encrypted files without the key?

It depends on the product and how its encryption is designed. Some encryption is built so that the provider cannot decrypt the data; consult the product’s official documentation before relying on support as a substitute for a backup.

Further reading: Apple Support and Microsoft Support. Details can change, so check the official page for anything that matters to you. Spotted a mistake? Tell us. How we write an answer.