Hi Edward Lee,
Thank you for your question.
What most likely happened is that BitLocker detected a change in the system's startup security settings while KB5095093 was being installed. BitLocker works together with the TPM (Trusted Platform Module) and Secure Boot to verify that the device is starting in a trusted state. If something in that trusted startup process changes, BitLocker may ask for the recovery key as a safety measure.
In the release notes for KB5095093, Microsoft mentions ongoing updates related to Secure Boot certificates ahead of their expiration in June 2026. Updates to Secure Boot or other boot-related security components can sometimes cause BitLocker to see the startup environment as different from what it expected, which can trigger a one-time recovery key prompt.
If you were able to enter the recovery key and the device has been starting normally since then, this was likely just a one-time security verification and is generally not a cause for concern. For more information, please see Microsoft's release notes for KB5095093 and BitLocker recovery guidance:
- June 23, 2026—KB5095093 (OS Builds 26200.8737 and 26100.8737) Preview
- Find your BitLocker recovery key
However, if BitLocker continues to ask for the recovery key on every startup, please let me know, as that could indicate an issue with the TPM, Secure Boot configuration or another component involved in the startup process, and I'll be happy to investigate further.
If you have additional questions about this answer, please click "Comment".
Note: If you want to receive email notifications about this thread, follow the steps in our documentation to enable email notifications.