When you sign in to Windows on a new PC using a Microsoft account, Windows uses the built-in device encryption option and automatically saves the recovery key to your Microsoft account.