Computer Repair · October 29, 2026 · ComputerKing Team
Before You Fix the Blue Screen: How to Protect Your Data Before Repairing Windows
A blue screen itself usually does not delete files right away, but the repair steps that follow can: identify the state, copy files using the route for that state, copy to a different drive, spot-check and verify before repairing; a Keep my files reset is not a backup, a BitLocker drive without its key means stop, and a drive suspected of physical damage means stop trying.
Key takeaways:
- A blue screen itself usually does not delete files right away, but the repair steps that follow can: a reset, a clean install, or a disk repair can overwrite or wipe data, and doing them in the wrong order cannot be undone.
- The correct order is copy data first, then repair: copy to a different drive, spot-check that the copies open, and only then start any step that changes the system drive.
- A PC that still boots into Windows, a PC that only boots into Safe Mode, and a PC that cannot boot at all need three different copy routes. Do not force the normal-boot method onto a PC that cannot boot.
- The "Keep my files" reset option is not a backup: personal files are meant to be kept, but apps and settings are removed, and if the reset itself fails there is nothing to fall back on.
- A BitLocker-encrypted drive needs its 48-digit recovery key before you touch it. If you cannot find the key, stop and do not try to work around the encryption.
- If the drive itself looks physically unwell (strange noises, reads getting slower and slower, files that often fail to open), stop trying to copy from it repeatedly and send it for diagnosis.
Introduction
When a blue screen appears, most people's first instinct is to fix it right away: look up the stop code, run repair commands, restore the system, or even reinstall Windows. That instinct is understandable, but the order is wrong. A blue screen usually just means Windows hit an error it could not handle and stopped; the files themselves are usually still on the drive. What actually makes files disappear is often the repair steps that follow.
Take two examples: choosing "Remove everything" in a PC reset wipes the personal files on the system drive; a clean install formats the system partition. Run either of those before copying the one unbacked-up document on the Desktop, and it is gone for good. A disk repair command run on a drive that already has a physical problem can make things worse, too.
So this article covers one thing only: how to protect your data after a blue screen and before repairing the system. How to read stop codes, how to read dump files with WinDbg, and how to decide between reinstalling, replacing parts, or sending the PC for repair are already covered in our earlier articles, and this article only cross-references them. By the end, you should be able to do three things: tell which state your PC is in, use the right route for that state to copy the most important files, and verify the copies before starting any repair.
1. First, identify the state. Do not use the wrong route
Before opening File Explorer, work out whether the PC still gets into Windows. The state decides the route.
| PC state | How to tell | Copy route |
|---|---|---|
| Boots into Windows, but blue-screens from time to time | After a restart you can sign in and use the Desktop normally | Copy in normal mode (Section 2), the simplest and most direct route |
| Cannot boot normally, but Safe Mode works | Normal boot blue-screens or loops, but Safe Mode gets in | Copy in Safe Mode (Section 3), avoiding the faulty driver or program |
| Cannot get into Windows at all, not even Safe Mode | Blue screen on boot, stuck on a repair screen, or endless restarts | Copy from the Windows Recovery Environment, WinRE (Section 4), or read the drive from another PC (Section 5) |
| The drive itself may have a physical problem | Strange noises, reads getting slower, files that often fail to open or disappear | Do not keep powering on to copy. Stop and send it for diagnosis (Section 6) |
The reason for splitting by state is practical: copying in normal mode is easiest, but if the PC blue-screens every few minutes, a copy can break halfway and leave files half-copied. Safe Mode loads only the minimum drivers, so it is far more stable. When nothing boots, the only option is to read the drive from outside Windows. Skip this step and you risk copying forever without ever getting a complete set, or damaging an already unwell drive further.
2. Still boots into Windows: copy now, do not wait
If the PC still gets into Windows, this is the best state to be in, and you should not wait. A blue screen that happens "once in a while" can turn into "blue screen on every boot" after a single update or crash. While you can still get in, follow this order:
Step 1: copy the five most important categories first. Do not try to copy the whole drive at the start; time and stability may not allow it. The priority order is:
| Priority | Copy this | Why it comes first |
|---|---|---|
| First | Files you made yourself in Desktop, Documents, and Pictures | Most people's work lives here, and often there is no second copy |
| Second | Folders that have not finished syncing to the cloud | Cloud folders can hold files that are "on this PC only" or still syncing. If the PC fails, those files are gone |
| Third | Local email files and work folders | Some email programs store mail in local files that the mail server may not hold in full |
| Fourth | Application project files and databases | Video projects, accounting files, and design files are usually large and expensive to redo |
| Fifth | Exported browser bookmarks and application settings | Not life-or-death, but they save a lot of time after a reinstall |
Step 2: copy to a different drive. An external hard drive, an external SSD, or a shared folder on another PC all work. The one rule is do not copy back onto another folder on the same drive. The same drive means the same risk: if that drive fails, both folders fail together. Also, do not let the new backup overwrite an old backup. Keep the old backup where it is, so that if the new copy turns out to be faulty, the old one is still there.
Step 3: spot-check the copies right away. A finished copy is not the same as a usable copy. Check three things: first, the file count and total size roughly match the original folder; second, open a few files at random and confirm they actually open, rather than only checking file names; third, open the one or two most important files from start to finish and confirm the contents are complete. If a check fails, copy again. Do not start a repair on a "probably fine" backup.
3. Safe Mode works: copy steadily
If normal mode fails but Safe Mode works, this is the second-best state. Safe Mode loads only basic drivers and services, so a faulty third-party driver or startup program does not load, and the PC is much more stable for a slow, careful copy.
The method is the same as Section 2: connect the external drive, open File Explorer, and copy in the priority order above. Watch two points: first, some programs and cloud sync tools may not run automatically in Safe Mode, so files that have not synced yet need to be checked by hand. Do not assume the cloud already has them. Second, networking may be limited in Safe Mode, so if you plan to copy to a network location, confirm the network is on first rather than discovering a broken connection halfway through.
After copying in Safe Mode, spot-check the same way. Only once the checks pass should you move on to repairs such as rolling back a driver, uninstalling a recent update, or checking system files. The detailed steps for those repairs are in our first blue screen guide and our recurring blue screen guide; this article does not repeat them.
4. Cannot get into Windows at all: copy from the Recovery Environment
The hardest state is when even Safe Mode fails. At this point, do not keep pressing the power button and hoping: every failed boot is another round of reads and writes, and that does no good for a drive that may already be unwell. The right move is to enter the Windows Recovery Environment (WinRE) and copy files from outside Windows.
Common ways into WinRE are: on the sign-in screen, hold Shift while clicking Restart; or after several failed boots, Windows enters the Recovery Environment on its own. Once in, choose "Troubleshoot", then "Advanced options", then "Command Prompt".
When copying from the Command Prompt, remember three points:
1. Confirm the drive letters first. In WinRE, drive letters are not necessarily the same as in normal Windows: the system drive may not be C:, and the external drive may be another letter. Before copying, use the dir command to look at each drive's contents and confirm which one is the system drive and which one is the external drive. Never guess from memory.
2. Copy whole folders in one command. A copy tool such as robocopy can copy a folder together with all its subfolders to the external drive, and it records files it could not copy instead of silently skipping them. The source path must be the user folder on the system drive, and the target must be a new backup folder on the external drive.
3. Encrypted drives need the recovery key first. If the system drive uses BitLocker, WinRE will ask for the 48-digit recovery key before the drive can be read. The key may be stored in your Microsoft account, on a printed copy, or with your company's IT department. If you cannot find the key, stop. Do not try any method that claims to bypass encryption: without the key, the data on an encrypted drive cannot be read, and that is exactly how encryption is designed to work. For the full key-preparation steps, see the "before you start repairs" section of our recurring blue screen guide.
After copying from WinRE, verify on another PC: open the external drive and spot-check that files open. Only once verification passes should you go back into WinRE for other repair options such as System Restore, uninstalling updates, or resetting the PC.
5. Reading the drive from another PC: the last copy route
If WinRE cannot be entered, or WinRE cannot read the system drive, one route remains: take the drive out and connect it to a working PC as an external drive. The advantage is that nothing depends on the faulty PC's system. The disadvantage is that it needs the PC to be opened, and opening a laptop can affect its warranty.
This route has three hard rules: first, do not write anything to the faulty drive from the other PC, including formatting, partition changes, or disk repairs. Read and copy only. Second, the copy target must again be a different drive, not the faulty drive itself. Third, if the drive cannot be read on the other PC either, reads extremely slowly, or makes strange noises, stop at once and do not keep trying. That is already beyond what you should handle yourself.
When opening the PC, remember: if you do not know how to open it, do not force it. Cables and screws are easy to break, and a break made during opening makes later diagnosis harder. At that point, sending the PC for diagnosis is the steadier choice.
6. Before the data is copied, actions to avoid
Every action below must wait until the data has been copied and verified. Do not skip the copy step because you are in a hurry:
| Action to avoid | Why |
|---|---|
| Resetting the PC at once and choosing "Remove everything" | It wipes personal files on the system drive, and there is no way back |
| Clean-installing Windows at once | It formats the system partition, and files in Desktop and Documents go with it |
| Treating "Keep my files" as a backup | "Keep my files" is only a reset option. Apps and settings are removed, and if the reset itself fails, there is no second copy |
| Running a disk repair on a drive suspected of physical damage | Disk repair writes to the drive, and on a physically damaged drive it can widen the area that cannot be read |
| Powering on and off repeatedly to try your luck | Every boot is more reading and writing, and for a drive that is already unstable, more attempts mean more harm |
| Deleting an old backup to make room for a new one | The old backup is the only copy you know works. Delete it, and if the new copy is faulty, nothing is left |
| Using a "one-click fix" tool from an unknown source | What such a tool changed is hard to trace, so if something goes wrong you cannot even say which step caused it |
7. After the data is safe, the repair order
Once the data is copied and verified, repairs can follow a light-to-heavy order, without worrying about the data any more:
1. Start with steps that do not remove personal files, such as rolling back a faulty driver, uninstalling a recent update, or checking system files.
2. Then try System Restore: a restore point mainly affects system settings and programs, and personal files are meant to be unaffected, but having a backup first is still the right precaution. You already have one, so this step is safe.
3. Then consider a "Keep my files" reset: personal files are meant to be kept, but apps need reinstalling and settings need redoing.
4. Only last comes a clean install: this step formats the system drive, so it fits only when the data is copied and verified and every lighter step has failed.
How to decide which step to try first, and when to stop and send the PC for repair, is covered by our timeline decision guide: use a blue screen log and stop-code patterns to decide, rather than trying things by feel. After each step, write down the result and whether the PC blue-screened again. That is how you tell which step actually helped.
8. After this copy, build a backup habit so the next blue screen is not a scramble
The scramble of copying files in a hurry is itself a warning: with no backup habit, every blue screen becomes an emergency. Once this copy is done, do three low-cost things:
- External-drive backups: copy Documents, Desktop, and Pictures to an external drive regularly, and spot-check once after copying. Dragging files across and assuming it worked is not enough.
- Confirm cloud sync: open your cloud folders and check whether the files have really synced to the cloud, or are still "syncing" or "on this PC only".
- Restore points and system images: Windows System Protection and restore points are your way back during a repair. Keep them switched on, rather than discovering they were off when you need them.
The full 3-2-1 backup rule and tool choices are in our backup strategy article, and this article does not expand on them.
Frequently asked questions
Q: Is a "Keep my files" reset the same as having a backup?
A: No. "Keep my files" is only an option inside the reset process, meaning the reset tries to keep personal files, but apps and settings are removed. If the reset process itself fails partway, personal files are at risk too. A backup means an independent, usable copy on a different drive. Only when that copy exists before the reset can you say the data is backed up.
Q: The PC cannot get into Windows at all. How do I copy files?
A: Use the Command Prompt inside the Windows Recovery Environment (WinRE), or take the drive out and read it from another PC. Both methods need you to confirm drive letters first, copy to a different drive, and spot-check the copies on another PC. If WinRE cannot be entered and you do not know how to remove the drive, send the PC for diagnosis rather than forcing it.
Q: Why are drive letters different inside WinRE?
A: Because WinRE is a separate small environment that assigns drive letters in its own order, so the system drive is not necessarily the usual C:. That is why you must use the dir command to check each drive's contents before copying. Guessing from the usual letters risks copying the wrong drive or overwriting the wrong files.
Q: I cannot find my BitLocker recovery key. Is there another way to copy the files?
A: There is no reliable way. BitLocker is designed so that data cannot be read without the key, and no method that claims to bypass it should be trusted. Check your Microsoft account's device recovery-key page, any printed copy, or your company's IT department first. If the key cannot be found, you have to accept that the data may not be retrievable, and you should not keep trying other actions on the drive.
Q: Where should a backup be copied to be safest?
A: The minimum requirement is a different drive, not the same drive as the system drive. An external hard drive or external SSD both work. If time allows, a second copy to the cloud or to another PC is steadier still. What matters most is not which kind of drive you use, but that the copy is independent and verified to open.
Q: How do I know I have copied everything?
A: Three checks: the file count and total size roughly match the original folder; a few files opened at random actually open; and the one or two most important files read through from start to finish with complete contents. All three checks must pass before the copy counts as complete. Looking at file names and sizes without opening files is not enough.
Q: If I suspect the drive itself is failing, can I still copy files myself?
A: It depends on how serious the signs are. If the PC blue-screens but files still read normally, copy as soon as possible using the routes above. If there are already strange noises, reads getting slower and slower, or files that often fail to open, do not keep powering on to copy. Stop and send it for diagnosis. The more attempts made on a physically failing drive, the harder it becomes to retrieve the data.
Q: Once the data is copied, can I clean-install Windows right away?
A: You can, but it should not be the first step. A clean install is the heaviest step, and it belongs after driver rollback, update removal, system file checks, System Restore, and a "Keep my files" reset. The lighter steps may fix the problem without wiping files, and skipping straight to a clean install gives up all of those gentler options.
Summary
After a blue screen, the most important decision is not which repair command to run, but whether the data has been protected before any repair starts. Remember this order: identify the state, copy files using the route for that state, copy to a different drive, spot-check and verify, and only then start repairing. A "Keep my files" reset is not a backup, a BitLocker drive without its key means stop, and a drive suspected of physical damage means stop trying. Get this order right once, and the next blue screen will be a system problem to fix, not a data emergency.
Sources
1. Microsoft Support — Troubleshooting Windows unexpected restarts and stop code errors — https://support.microsoft.com/en-US/Windows/Experience/Performance-Optimization/troubleshooting-windows-unexpected-restarts-and-stop-code-errors — Source for the basic blue screen troubleshooting steps and recovery options. Accessed: October 29, 2026.
2. Microsoft Learn — Memory dump file options — https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/memory-dump-file-options — Source for crash dump file types and settings, background for the division of work between copying data first and analysing dumps afterwards. Accessed: October 29, 2026.
3. Microsoft Learn — Read a small memory dump file — https://learn.microsoft.com/en-gb/troubleshoot/windows-client/performance/read-small-memory-dump-file — Source for small dump file locations and reading methods. Accessed: October 29, 2026.
4. ComputerKing first blue screen guide — /blog/windows-bsod-deep — Source for the full first-time troubleshooting steps (stop codes, driver versus hardware first checks, tiered self-help steps). Cross-referenced only, not repeated here.
5. ComputerKing blue screen timeline decision guide — /blog/windows-bsod-repeat-pattern-decision — Source for deciding between reinstalling, replacing parts, or sending the PC for repair using a blue screen log and stop-code patterns. This article's post-copy repair order follows it.
6. ComputerKing recurring blue screen guide — /blog/windows-bsod-recurring-root-cause — Source for WinDbg dump reading, hardware isolation, and BitLocker recovery-key preparation. Cross-referenced only.
7. ComputerKing backup strategy article — /blog/backup-strategy-hk — Source for the 3-2-1 backup rule and everyday backup habits. Section 8 only introduces the topic; full details are in that article.
Related articles
- Windows Blue Screen Troubleshooting: Common Stop Codes and Self-Help Steps
- Blue Screen Keeps Coming Back? Use a Timeline and Stop-Code Patterns to Decide: Reinstall, Replace Parts, or Send for Repair
- Recurring Blue Screens: From WinDbg Dump Reading to Hardware Isolation
- Hong Kong User Backup Strategy: How to Do the 3-2-1 Backup Rule Properly
Frequently Asked Questions
Is a "Keep my files" reset the same as having a backup?
No. "Keep my files" is only an option inside the reset process, meaning the reset tries to keep personal files, but apps and settings are removed. If the reset process itself fails partway, personal files are at risk too. A backup means an independent, usable copy on a different drive. Only when that copy exists before the reset can you say the data is backed up.
The PC cannot get into Windows at all. How do I copy files?
Use the Command Prompt inside the Windows Recovery Environment (WinRE), or take the drive out and read it from another PC. Both methods need you to confirm drive letters first, copy to a different drive, and spot-check the copies on another PC. If WinRE cannot be entered and you do not know how to remove the drive, send the PC for diagnosis rather than forcing it.
Why are drive letters different inside WinRE?
Because WinRE is a separate small environment that assigns drive letters in its own order, so the system drive is not necessarily the usual C:. That is why you must use the dir command to check each drive's contents before copying. Guessing from the usual letters risks copying the wrong drive or overwriting the wrong files.
I cannot find my BitLocker recovery key. Is there another way to copy the files?
There is no reliable way. BitLocker is designed so that data cannot be read without the key, and no method that claims to bypass it should be trusted. Check your Microsoft account's device recovery-key page, any printed copy, or your company's IT department first. If the key cannot be found, you have to accept that the data may not be retrievable, and you should not keep trying other actions on the drive.
Where should a backup be copied to be safest?
The minimum requirement is a different drive, not the same drive as the system drive. An external hard drive or external SSD both work. If time allows, a second copy to the cloud or to another PC is steadier still. What matters most is not which kind of drive you use, but that the copy is independent and verified to open.
How do I know I have copied everything?
Three checks: the file count and total size roughly match the original folder; a few files opened at random actually open; and the one or two most important files read through from start to finish with complete contents. All three checks must pass before the copy counts as complete. Looking at file names and sizes without opening files is not enough.
If I suspect the drive itself is failing, can I still copy files myself?
It depends on how serious the signs are. If the PC blue-screens but files still read normally, copy as soon as possible using the routes above. If there are already strange noises, reads getting slower and slower, or files that often fail to open, do not keep powering on to copy. Stop and send it for diagnosis. The more attempts made on a physically failing drive, the harder it becomes to retrieve the data.
Once the data is copied, can I clean-install Windows right away?
You can, but it should not be the first step. A clean install is the heaviest step, and it belongs after driver rollback, update removal, system file checks, System Restore, and a "Keep my files" reset. The lighter steps may fix the problem without wiping files, and skipping straight to a clean install gives up all of those gentler options.