Fix BitLocker To Go Stuck Decrypting an External Drive on Windows 11

Quick fix: BitLocker To Go decryption stuck? Check via manage-bde -status <drive>: in Terminal (Admin). If stuck at a percentage: manage-bde -off <drive>: initiates clean decryption restart. Wait. For drives that won’t complete: manage-bde -unlock <drive>: -recoverypassword <key>, copy data off, then manage-bde -off to decrypt remaining.

You started BitLocker decryption on an external drive. The progress bar hangs at 30% or 60% for hours. The drive appears slow when accessed. The cause is usually one of: drive disconnect interrupted decryption, bad sectors block read, or BitLocker service stuck.

What causes this

BitLocker To Go decrypts drive contents sector-by-sector. Each sector is read, decrypted, written back unencrypted. Stalls happen when: USB connection drops briefly (drive disconnects mid-read), sectors have read errors (failing drive), or the BitLocker decryption service hangs after a Windows update.

Method 1: Check status and restart decryption

The diagnostic step.

1. Open Terminal (Admin).
2. Check BitLocker status on the drive:

   manage-bde -status E:

   Replace E: with your external drive letter. Shows: Conversion Status (which percent), Protection Status, Encryption Method, etc.

3. If “Decryption in Progress” with same percentage as before: stuck. Restart decryption:

   manage-bde -off E: -ForceRecovery

   The -ForceRecovery option doesn’t exist in standard manage-bde, but you can pause and resume:

   manage-bde -pause E:
   manage-bde -resume E:

   Often resumes from where it stuck.

4. If still stuck: copy as much data off as possible to another drive (the drive is partially decrypted and partially readable). Then run manage-bde -off again.
5. For PowerShell equivalent: Suspend-BitLocker and Resume-BitLocker.
6. For the worst case (won’t resume): Disable-BitLocker -MountPoint E:. Restarts decryption from current state.

This is the recovery sequence.

Method 2: Copy data off and reformat

For drives where decryption truly won’t complete.

1. Unlock the drive (if locked) with: manage-bde -unlock E: -recoverypassword <your key>. Use the BitLocker recovery key.
2. The drive shows unlocked content in File Explorer (mixed encrypted/decrypted state).
3. Copy all readable files to another drive. Use robocopy with retry: robocopy E:\ D:\backup\ /E /R:3 /W:5. Bad sectors fail; rest copies.
4. For files that fail to copy: try copying individually with longer retry. Or use disk recovery software like Recuva.
5. Once data is safe: format the drive fresh. Right-click in File Explorer → Format → NTFS or exFAT. This wipes BitLocker entirely.
6. Drive is now usable normally. Re-encrypt with BitLocker if desired (only on healthy drives).

This is the right path when decryption can’t complete.

Method 3: Check drive health

If decryption fails repeatedly — the drive may be failing.

1. Run CHKDSK on the drive: chkdsk E: /f. Repairs filesystem corruption.
2. For SMART data: install CrystalDiskInfo. Check drive’s Health Status. Anything other than Good = drive failing.
3. For drives reporting bad sectors: chkdsk E: /r. /r flag scans for bad sectors and remaps. Takes hours for large drives.
4. For USB-SATA enclosures: the bridge chip may be failing, not the drive itself. Remove drive from enclosure, connect via SATA directly to test.
5. For failing drive: prioritize data recovery (Method 2) over decryption completion. Even if you complete decryption, the drive will fail eventually.
6. For replacing failing drive: copy data to new drive, retire old, encrypt new with BitLocker fresh.

This is the right path when hardware is the issue.

How to verify the fix worked

• Run manage-bde -status E:. Status shows Fully Decrypted or Fully Encrypted (not Decryption in Progress).
• Drive appears in File Explorer without BitLocker lock icon.
• Files open normally without prompting for unlock.

If none of these work

If decryption permanently stuck: Microsoft recovery: contact Microsoft Support. Sometimes they can issue specific recovery commands. Forensic recovery: data recovery services (DriveSavers, Ontrack) can recover BitLocker-encrypted data if you provide the recovery key. Expensive ($500-$2000) but works for failing hardware. For drives with the BitLocker recovery key: even with stuck decryption, with the key you can: unlock the drive (manage-bde -unlock), read files (drive shows mixed encryption state), copy what you can off, then reformat. For drives without the recovery key: data is lost. BitLocker is designed so without key, recovery is mathematically infeasible. Last resort — full disk recovery: use ddrescue on Linux to clone the drive sector-by-sector. Work on the clone. Decrypt with key. May recover more than Windows’s built-in tools.

Bottom line: Use manage-bde -pause then -resume to unstick decryption. If truly stuck: unlock with recovery key, copy data off, reformat. Check drive health if recurring.