# Disable BitLocker

> Starts BitLocker decryption on a selected volume and can optionally write the current recovery password to the job log before protection is disabled.

Source: https://docs.capaone.com/capaone/application-manager/powerbricks/disable-bitlocker/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

Starts BitLocker decryption on a selected volume and can optionally write the current recovery password to the job log before protection is disabled.

## Parameters

#### Mount Point
*Required* — Default: `OS`

Drive letter of the BitLocker volume to decrypt, for example C: or D:. You can also use OS or SystemDrive to target the operating system drive automatically.

#### Write Recovery Key To Log
*Optional* — Default: `True`

Writes the BitLocker recovery password to the PowerBrick log before decryption starts. Enabled by default; disable when logs should not contain the secret.

## Details

- **Category:** System
- **Brick ID:** `BitLocker-Disable`

## Raw JSON definition

**JSON**

```json
{
  "category": "system",
  "description": "Starts BitLocker decryption on a selected volume and can optionally write the current recovery password to the job log before protection is disabled.",
  "developerVendor": "CapaSystems A/S",
  "displayName": null,
  "id": "BitLocker-Disable",
  "name": "Disable BitLocker",
  "parameters": [
    {
      "allowManualInput": false,
      "defaultValue": "OS",
      "defaultValueObject": null,
      "description": "Drive letter of the BitLocker volume to decrypt, for example C: or D:. You can also use OS or SystemDrive to target the operating system drive automatically.",
      "id": "MountPoint",
      "name": "Mount Point",
      "regExValidation": "",
      "required": true,
      "type": "TextBox",
      "value": null,
      "values": [],
      "valuesObject": null
    },
    {
      "allowManualInput": false,
      "defaultValue": "True",
      "defaultValueObject": null,
      "description": "Writes the BitLocker recovery password to the PowerBrick log before decryption starts. Enabled by default; disable when logs should not contain the secret.",
      "id": "WriteRecoveryKeyToLog",
      "name": "Write Recovery Key To Log",
      "regExValidation": "",
      "required": false,
      "type": "Boolean",
      "value": null,
      "values": [],
      "valuesObject": null
    }
  ],
  "powershell": {
    "base64Encoded": true,
    "function": "ZnVuY3Rpb2..."
  },
  "type": "powerbrick",
  "version": "2026.9.1.1"
}
```