How to Remove Administrator Password in Windows 11 and 10

If you know the password and simply want it gone: press Ctrl+Alt+Delete, choose Change a password, type the current one, then leave both new password boxes completely empty and press Enter. Same on Windows 11 and Windows 10.

If you have forgotten it, everything depends on one question, and most guides never ask it: is your sign-in a Microsoft account or a local account? A Microsoft account is reset online from your phone in two minutes. A local account lives on that machine and needs a different route entirely.

Look at your sign-in screen. An email address under your name means a Microsoft account. No email address means a local one. That single check decides which half of this page you need.

Everything here needs physical access to the machine and applies to a PC you own or administer. If it is a work or school laptop it is managed by an IT department who can reset it for you in seconds — ask them, because the methods below are deliberately blocked on managed devices anyway.

Jake's Shelf of Laptops Nobody Could Open

Jake runs a small mobile phone shop, and takes second-hand laptops in part-exchange because customers keep asking him to. By March he had four of them on a shelf behind the counter, roughly ₹38,000 of stock, and he could not sign in to a single one.

Three were straightforward once someone asked the right question. One was not, and it cost him more than the laptop was worth.

"I did what the videos said," he told Ethan. "Reinstalled Windows. Fresh machine, works perfectly. Then the woman rang and asked if her photos were still on it, because her phone had died the year before and everything was on that laptop."

"You asked her if there was anything on it."

"She said no. She meant no documents." Jake refunded her, kept the laptop, and did not get the referral from her sister that he had been expecting.

Ethan was blunt about it. "The reinstall wasn't the mistake. Doing it before you'd worked out which kind of account she had was the mistake. Three of those four laptops probably had a Microsoft account on them, and a Microsoft account password is reset from a phone in two minutes. You spent a Saturday solving the wrong problem."

That is the whole reason this page is arranged the way it is. Nearly every guide to this topic starts handing out methods before establishing which problem you have — and the wrong method for your situation ranges from harmless to permanently destructive.

Microsoft Account or Local Account? Answer This First

These are two completely different problems that happen to look identical at the sign-in screen.

If you can still sign in: the twenty-second check

Open Settings (Windows+I), go to Accounts, and look at the top of the Your info page. An email address under your name means a Microsoft account. The words Local account mean the other thing. Our short guide to checking whether you are signed in with a local or Microsoft account shows exactly where to look on both versions of Windows.

If you cannot sign in: reading the login screen

You still get a strong signal without getting in.

• An email address printed under the name — Microsoft account. Go straight to the online reset. Note that some people deliberately hide the email address on the sign-in screen, so its absence is suggestive, not proof.
• Type a wrong password on purpose. If a Reset password link appears underneath, that is a local account with security questions set, and you are getting in today.
• A "Reset it here" or "I forgot my password" link that opens a web page — Microsoft account.
• Nothing at all but "The password is incorrect" — local account, no recovery configured. That is the hard case, and it has its own section below.

Why you probably have a Microsoft account even if you never wanted one

This is worth knowing because it changes the odds enormously in your favour.

Windows 11 Home has required an internet connection and a Microsoft account during setup since early builds, and with 24H2 and later Microsoft removed the last of the convenient escape hatches — the OOBE\BYPASSNRO command that tech blogs had been recommending for years stopped working in 2025 updates. Windows 11 Pro kept a narrow offline route via the "set up for work or school" option; Home did not.

The practical result: any PC set up new from roughly 2022 onwards, by a shop or by the owner, is overwhelmingly likely to be on a Microsoft account. Machines that upgraded from Windows 7 or Windows 10 often kept their old local account. So the age of the machine is a decent predictor, and Jake's shelf was exactly that split — the two recent laptops were Microsoft accounts, the two old ones were not.

Stop. Find Your BitLocker Recovery Key First

This is the most valuable paragraph on the page, and almost no guide to removing a Windows password contains it.

Modern Windows encrypts the system drive by default. On Windows 11 24H2 and later Microsoft relaxed the hardware requirements for automatic Device Encryption, so it now switches itself on during setup on the great majority of machines — including Home edition, which people assume is exempt. It is quiet about it. There is no banner, no icon, nothing on the desktop to tell you the drive is encrypted.

How to tell whether your drive is encrypted

Open File Explorer and look at the C: drive icon. A small padlock means BitLocker. A padlock with a keyhole means it is locked; a plain padlock means it is unlocked but encrypted.

More reliably, open Settings and search for Device encryption, or on Pro editions look for BitLocker drive encryption in Control Panel. If you prefer a command, open Command Prompt as administrator and run:

manage-bde -status C:

Conversion Status: Fully Encrypted means yes. Fully Decrypted means no. (manage-bde is simply the BitLocker management command; -status asks it to report rather than change anything, so it is safe to run.)

Where the key actually is

In order of likelihood:

1. Your Microsoft account. From any phone or other computer, go to account.microsoft.com/devices/recoverykey and sign in. If the PC was set up with a Microsoft account, the key was escrowed there automatically at first encryption. Most people never knew this happened.
2. A printed sheet or a .txt file on a USB stick, if you or a shop turned BitLocker on manually.
3. A work or school account, if the machine was ever enrolled — the key sits in Entra ID or in the organisation's Active Directory, and only their IT can retrieve it.

Our step-by-step on finding your BitLocker encryption key walks through each of those, and the companion guide to device encryption on Home and Pro explains the difference between the two versions, which trips people up constantly.

Do it now, before any method below. It takes ninety seconds. Save the key to your phone, email it to yourself, write it on paper — anywhere except the encrypted computer, which is the one place it is useless.

Situation 1 — You Know It and You Just Want It Gone

This is what most people typing "remove administrator password" actually want, and it is the easy half of the page. There are two genuinely different outcomes here, and they are worth separating because they have very different consequences:

• Remove the password entirely — the account has no password at all. Anyone can sit down and click straight in, and remote connections to the machine become impossible by default.
• Keep the password but sign in automatically — the password still exists, Windows just types it for you. You stop seeing the prompt, but the account is still protected in the ways that matter.

Ethan's opinion, stated plainly: the second one is almost always the right choice, and we will come back to why.

Windows 11 — blank the password with Ctrl + Alt + Delete

The fastest route, and it works identically on both versions of Windows, so if you are on Windows 10 you can follow this too.

1. Press Ctrl+Alt+Delete. A blue screen of options appears.
2. Choose Change a password.
3. Type your current password in the top box.
4. Leave New password and Confirm password completely empty. Do not type a space.
5. Press Enter or click the arrow.

That is it. Next time the PC starts, it goes straight to the desktop.

If nothing happens when you press that key combination, the machine may have the Ctrl + Alt + Del sign-in requirement configured unusually — use the Settings route below instead.

Windows 11 — the Settings route

Some people prefer a visible menu, and on Windows 11 the panel moved:

1. Windows+I for Settings.
2. Accounts → Sign-in options.
3. Expand Password → Change.
4. Enter the current password, then leave the new boxes blank and continue.

Windows 11 trap: if the Password entry is greyed out or missing here, you are on a Microsoft account. Windows 11 hides the option rather than explaining why, which is maddening. Skip to the Microsoft account section just below.

Windows 10 — the same job, slightly different panel

The Ctrl + Alt + Delete method above is identical on Windows 10. The only thing that differs is the Settings layout:

1. Windows+I → Accounts → Sign-in options.
2. Click Password, then Change.
3. Confirm the current password on the first screen.
4. On the next screen leave all three boxes — new password, confirm, and hint — empty, then Next and Finish.

Windows 10 asks for the hint on the same screen, which is the one visible difference. Leaving it blank is fine and expected. Our older walkthrough on changing the password for a user account covers the same panel if you would rather follow screenshots.

One honest note for anyone still on Windows 10: it reached end of support on 14 October 2025. A machine with no password and no security updates is a meaningfully worse combination than either problem alone, so if you are removing the password on a Windows 10 laptop that goes out of the house, read that page before you do.

If you are on a Microsoft account and want no password at all

You cannot blank a Microsoft account password. It is the same password as your Outlook mail, your OneDrive files and your Xbox account, and Microsoft is not going to let a blank one exist. Two sensible options:

Option A — switch the PC to a local account, then blank it. Settings → Accounts → Your info → Sign in with a local account instead. Follow the prompts, then use the Ctrl + Alt + Delete method above.

Read the cost first, because it is not nothing: you lose OneDrive sync of your desktop and documents, Microsoft Store purchases tied to the account behave oddly, settings no longer roam between your devices, and — this is the important one — your BitLocker recovery key stops being escrowed to your Microsoft account. If you go local, save that key manually first.

Option B — keep the account and stop the prompt appearing. This is the one we recommend, and it is next.

netplwiz — sign in automatically without removing anything

netplwiz is the old User Accounts control panel that Microsoft never got round to replacing. The .exe is still shipped in every version of Windows, and it does one thing Settings cannot: it lets Windows store your password and enter it for you at boot.

1. Press Windows+R. This opens the Run box — a small window in the corner that launches a program by name, which is quicker than hunting through menus.
2. Type netplwiz and press Enter.
3. Select your account in the list.
4. Untick "Users must enter a user name and password to use this computer".
5. Click Apply. It asks for the password twice to confirm it can store it.
6. OK, then restart to check.

Windows now boots straight to the desktop, but the password still exists. Our dedicated guide to making Windows sign in automatically without a password covers the same steps with screenshots if you get stuck.

Why is the netplwiz checkbox missing on my PC?

Because Windows Hello sign-in is being enforced, and this catches out nearly everyone on a modern Windows 11 machine.

Settings → Accounts → Sign-in options → turn off the switch that reads "For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device". Close netplwiz, open it again, and the checkbox is there.

If you cannot find that switch — it moves between builds — the same thing can be done in the registry. Open Registry Editor, navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device

and set DevicePasswordLessBuildVersion from 2 to 0. The registry is Windows' central settings database; that value simply tells the sign-in system whether to offer the old password-based options. Changing it back to 2 restores the previous behaviour.

Is removing the Windows password a bad idea?

It depends entirely on where the machine lives, and a straight answer helps more than a lecture.

Two consequences people meet later and blame on something else:

• Remote Desktop stops working. Windows refuses network sign-ins for accounts with blank passwords by default. This is a security feature, and it is why "my Remote Desktop broke for no reason" so often traces back to a password removed weeks earlier.
• Some network shares and scheduled tasks refuse to run for the same reason.

The better middle ground: keep the password, add a PIN

Almost everyone who wants to remove their password actually wants to stop typing sixteen characters every morning. A PIN does that without giving up anything.

A Windows Hello PIN is not a shorter password. It is tied to that one device by the TPM security chip, so it is worthless to anyone who steals it and types it elsewhere — unlike your password, which unlocks your email from anywhere in the world. Four digits, one second, and the account stays protected. Our guide to adding, changing or removing a PIN covers the setup, and if the PIN is what you have forgotten, there is a separate walkthrough on resetting the PIN.

Related and frequently confused: if your complaint is that Windows asks for the password every time it wakes up, that is a different setting entirely and does not require removing anything — see stopping Windows asking for a password after sleep.

Situation 2 — Forgotten, and It Is a Microsoft Account

Good news, and it genuinely is good news: you do not need the locked PC to fix this. No USB stick, no command prompt, no downloads.

1. On any phone, tablet or other computer, go to account.microsoft.com.
2. Enter the email address shown on your locked PC's sign-in screen.
3. Choose Forgot password.
4. Pick a verification method — a code to your recovery email, a text to your phone, or an approval in the Microsoft Authenticator app.
5. Enter the code and set a new password.
6. Go back to the PC and sign in with the new one.

Two minutes, and it works on Windows 11 and Windows 10 identically because the password is not stored on either machine.

The step that catches people: the PC needs internet at the sign-in screen

This is the failure everybody hits and almost nobody writes about.

Windows caches your last known password so you can sign in offline. Reset it online, walk back to a PC with no network, and the old password still works and the new one does not. People conclude the reset failed and go round again.

Fix: at the sign-in screen, look at the bottom-right corner. There is a small network icon there. Click it, pick your Wi-Fi, enter the Wi-Fi key, wait for it to connect, and then type the new password. On a desktop, plugging in an Ethernet cable does the same job with no clicking.

Once it has synced once, the new password is cached and works offline again.

When you cannot receive the verification code

Old phone number, dead recovery mailbox, lost authenticator. Microsoft has an account recovery form for exactly this — it appears as "I no longer have access to these" during the reset flow.

Be realistic about it. You are asked for old passwords you remember, subject lines of recent emails, contacts you write to, and things you have bought. Answer as much as you can from a device and location you have used the account from before, because that helps. Then expect up to 24 hours for a verdict, and expect the possibility of a refusal if you cannot demonstrate enough.

Meanwhile, do not reinstall Windows in frustration. The Microsoft account is not stored on the PC, so wiping the machine achieves nothing towards recovering it — and it destroys your files for no benefit. That was exactly Jake's mistake.

What if I forgot my PIN but remember my password?

Very common, and it is not the same problem at all. A PIN and a password are two separate credentials on the same account.

At the sign-in screen, click Sign-in options underneath the PIN box — a small row of icons appears. Choose the key icon to type your password instead. Once you are in: Settings → Accounts → Sign-in options → PIN (Windows Hello), and either set a new one or remove the PIN entirely.

If you have forgotten both, use the I forgot my PIN link on the sign-in screen, which pushes you through the online password verification and then lets you set a fresh PIN.

Situation 3 — Forgotten, and It Is a Local Account

The harder half, and the honest framing is this: a local account password is not stored anywhere except that PC, so your options are limited to what was set up in advance. There are three of those, and they are worth trying in this order.

How do I reset a forgotten local account password without a disk?

Start with security questions, because they are the official route and they are far more common than people expect.

Since Windows 10 version 1803 (April 2018), creating a local account has meant choosing three security questions from a fixed list — first pet, birth town, and so on. Windows 11 carried this forward. Most people picked three, clicked past them, and forgot it happened.

1. At the sign-in screen, type any wrong password and press Enter.
2. A Reset password link appears under the box. If it does not, this account has no security questions and you should move to the next method.
3. Click it. Windows shows your three questions one at a time.
4. Answer them. Capitals do not matter; spelling does.
5. Set a new password and sign in.

Nothing is deleted, nothing is reinstalled, no tools are needed. This is the single best outcome for a forgotten local password, and it is the reason the very first thing to do once you are back in is set the questions on every local account on the machine.

Another administrator account on the same PC

If somebody else in the house has an account on that machine and it is an administrator account, you are five minutes from fixed. Sign in as them, then pick whichever of these you find easiest:

Via netplwiz: Windows+R → netplwiz → select the locked-out account → Reset Password → type a new one.

Via Computer Management (Pro editions): Windows+R → lusrmgr.msc → Users → right-click the account → Set Password. The .msc ending simply means Microsoft Saved Console — a small management panel Windows opens by name rather than from the Start menu. This one is not present on Home edition.

Via Command Prompt — fastest if you are comfortable with it. Open it as administrator and run:

net user
net user "Account Name" NewPassword123

The first line lists every account on the machine so you can copy the name exactly — useful, because names with spaces need the quotation marks and people usually get this wrong on the first attempt. To leave the account with no password at all, use net user "Account Name" * and press Enter twice at the prompts. There is also a longer walkthrough on listing the user accounts on your PC if the names are not obvious.

A password reset disk — and the honest catch

Windows can put a small recovery file on a USB stick that resets a local password on that specific PC. It works even if you have changed the password several times since making it, and it does not expire.

The catch, which is the whole problem with this feature: you had to make it before you got locked out. If you have not, this section is not going to help today. It is here because it is the right answer for next time, and because a surprising number of people made one years ago and forgot — check any old USB stick in a drawer for a file called userkey.psw.

Using one: at the sign-in screen enter a wrong password, click Reset password, plug in the stick, and follow the wizard.

Making one, for afterwards: plug in a USB stick, search the Start menu for Control Panel → User Accounts → Create a password reset disk in the left column. Sixty seconds. Then label it and put it somewhere that is not the laptop bag.

Can I use the hidden built-in Administrator account to get in?

This is the most repeated piece of advice on the entire topic, and for a locked-out person it is almost always useless. We would rather say so than pad the page with it.

Windows does contain a built-in account literally called Administrator, and it does normally have no password. But it is disabled by default on every consumer install, and the command that enables it — net user administrator /active:yes — has to be run from an administrator command prompt. Which requires you to already be signed in as an administrator. Which is the thing you cannot do.

It is genuinely useful in one narrow case: somebody enabled it earlier, in which case it appears as an extra tile at the sign-in screen. If you can see it, try it. Our guide to enabling and disabling the super administrator account explains what it is for and why leaving it on is a bad habit.

If the "administrator password" prompt only appears when you install things

A meaningful share of people searching for this are not locked out at all. They can use the PC perfectly, but every time they install a program or change a setting, a box demands an administrator password they do not have.

That is UAC — User Account Control — and it means your account is a standard account, not an administrator one. There is no password to remove; you need an administrator account on the machine to approve the action or to promote your account.

Check which you have with our guide to finding whether your account is standard or administrator, and if the prompts themselves are the irritation, how UAC works and what changing it costs you is the honest version. Short answer: turning UAC off does not grant you rights you do not have, so it will not solve this.

Situation 4 — You Bought or Inherited the PC

This is Jake's shelf, and it is a bigger category than the internet acknowledges — second-hand machines, a parent's laptop after they have died, a relative's PC handed over with a shrug.

I bought a second-hand laptop and cannot sign in. What are my options?

In order, and the first one is not a formality:

1. Message the seller. One reply solves this in most cases, and it costs you two minutes. Ask them for the password and to remove the device from their Microsoft account at account.microsoft.com/devices.
2. Check for security questions — wrong password, look for the Reset link. Sellers frequently leave a local account with questions still set, and the answers are sometimes guessable if you know them.
3. Look for a second account at the sign-in screen. Ex-family machines often have three or four, one of which is passwordless.
4. Otherwise, clean install. See the section below.

If it is an inherited machine and the owner has died, Microsoft has a next-of-kin process, but be realistic: it is slow, evidence-heavy, and often ends in a refusal. If the goal is the photos rather than the machine, taking the drive out is usually the faster route — provided it is not encrypted.

The trap nobody mentions: an ex-work laptop that was never released

A machine that was once enrolled with a company can be joined to their Microsoft Entra ID or under Autopilot. That enrolment is recorded against the hardware, not the installed copy of Windows. Reinstalling does not remove it. The fresh install reaches the setup screen, phones home, recognises the serial number and demands a company sign-in you do not have.

Only the original organisation can release the device. If you bought it privately from someone who "got it from work", this is a genuine possibility, and it is the strongest single argument for testing a second-hand laptop before money changes hands.

A UEFI or BIOS supervisor password is a different, worse problem

If the password prompt appears before the Windows logo — a plain screen, often with a manufacturer logo, sometimes showing a system disabled code — that is a firmware password, not a Windows one. Nothing on this page touches it.

Two honest points. The old advice about removing the CMOS battery to clear it has not worked on business laptops for many years; the password lives in a small chip that keeps its contents with no power. And the sites offering "master password generators" for those disabled codes are the same category of download we warn about further down. The legitimate route is the manufacturer, with proof of purchase, and it is often chargeable.

Ex-corporate Dell, Lenovo and HP machines are the usual source. If you are buying second-hand, boot the machine in front of the seller before paying — that single check would have saved Jake one of the four laptops on his shelf.

When There Is Genuinely No Way In

Most pages on this subject will not say this, because "there is no way in" does not sell a download. We will.

If all four of these are true, the account is not recoverable:

• It is a local account, not a Microsoft account
• No security questions were set
• No password reset disk exists
• There is no second administrator account on the machine

At that point the account is gone, and the remaining question is only whether the files can be saved. Two paths, and the order matters enormously.

Rescue the files first — take the drive out

Windows account passwords protect the running system. They do not encrypt the disk. So if the drive is not encrypted, everything on it is readable from another computer.

1. Remove the drive from the locked machine — one panel and a few screws on most laptops, an M.2 stick the size of a stick of gum on anything recent.
2. Put it in a USB enclosure or adapter. An NVMe M.2 enclosure costs very little and every repair shop has a pile of them.
3. Plug it into a working PC. The old Users folder appears as an ordinary folder.
4. Windows may say you need permission — click Continue to take ownership, which is normal for another machine's user folder.
5. Copy the photos and documents off.

Alternatively, boot the locked machine from a Linux live USB and copy the files over the network. Same result, no screwdriver, more steps.

If the drive is encrypted, none of this works without the 48-digit recovery key. The folders appear, the drive asks for a key, and there is nothing to be done. This is the point where people wish they had read the BitLocker section before they started.

Does a clean install remove the password and keep my files?

It removes the password because it removes the account. It does not keep your files unless you rescued them first with the step above.

The process, briefly: download the Media Creation Tool or the Windows 11 ISO from microsoft.com — typed into the address bar, not clicked from a search result — make a bootable USB, boot from it, and choose Custom rather than Upgrade. Our older walkthrough on reinstalling Windows covers the mechanics, and if the machine will end up on Windows 11 the notes on upgrading from Windows 10 to Windows 11 cover the hardware requirements you will hit.

Three things people are surprised by:

• You will not need a product key. Since Windows 10, activation is tied to the hardware. Reinstall on the same machine and it activates itself. Choose "I do not have a product key" at the prompt.
• Deleting the partitions is the safest choice if you are handing the machine on. Otherwise the old files sit in Windows.old, readable by whoever gets it next.
• Sign in with a Microsoft account this time. Not because Microsoft wants you to, but because it means the next forgotten password is a two-minute reset instead of this.

Before you wipe anything for good, set up a routine so this is never a data-loss event again — backing up files to an external drive without extra software takes about ten minutes to configure, and an external drive costs less than the recovery quote for one that has failed.

Do Not Download a "Windows Password Remover"

Search that phrase and you get a wall of near-identical products, each promising a one-click fix, each with a review site that exists to promote it.

Is it safe to use a third-party Windows password remover tool?

Our answer is no, and here is the reasoning rather than just the verdict.

• The search term is heavily targeted. Software categories where the user is desperate, unlikely to be technical, and about to disable their own security are exactly what malicious repackagers aim at. You are downloading an unsigned executable and running it as administrator, which is the whole ballgame.
• Most of them cannot help you anyway. They edit the local account database on the disk. They do nothing for a Microsoft account, which is what most locked-out people now have, and they cannot touch an encrypted drive at all.
• The technique is not secret. Where these tools work, they are doing the same thing the built-in routes do. You are paying for a wrapper.
• Some are ransomware-adjacent. There is a documented pattern of "recovery" tools that encrypt or exfiltrate rather than repair.

If you are curious how much of this material circulates, our write-up on the 16 billion leaked passwords story is a useful calibration on how ordinary credential theft actually works.

Where we were wrong: the utilman.exe trick we published in 2015

The original version of this article recommended the Sticky Keys swap — boot from install media, open a repair command prompt, rename utilman.exe, and get an administrator command prompt at the sign-in screen from which you could change any password with net user.

In 2015 that advice was correct. It worked reliably, and we used it.

We no longer recommend it, and we have removed it. Four things changed:

1. Encryption. On an encrypted drive the trick simply fails — the repair environment cannot write to a volume it cannot read. Worse, booting from that USB in the first place is one of the actions that triggers the recovery-key prompt, so the attempt itself can be what locks you out for good.
2. Microsoft accounts. It edits the local account database. It cannot change a password held on Microsoft's servers, and that is what most people have now.
3. Detection. Windows Defender and every endpoint product treat that file swap as a known persistence technique. On a machine with any managed security, you will get flagged.
4. It leaves the machine weakened until you undo it precisely, and people rarely undo it.

That is the honest position. A trick that was good advice for a decade is now the wrong first move in most situations, and a ten-year-old blog saying so is worth more than a new page pretending the landscape never moved. If you need a command prompt for legitimate repair reasons, our guide to accessing CMD at boot covers the supported route, and safe mode is usually the gentler starting point for anything that is not a password problem.

Five Minutes That Stop This Happening Again

Do these now, while the memory of the last hour is fresh. In priority order.

1. Save your BitLocker recovery key off the machine

Thirty seconds, and it is the one that prevents a total loss rather than an inconvenience. account.microsoft.com/devices/recoverykey, copy the 48 digits, put them in your phone's notes or on paper in a drawer. Do it for every Windows machine in the house.

2. Set the security questions on every local account

Settings → Accounts → Sign-in options → Password → Update your security questions. Three questions, one minute, and it converts the hard case into the easy one permanently. If a family member has their own local account on the PC, do theirs too.

3. Check your Microsoft account recovery details are current

The commonest reason an online reset fails is a phone number from two handsets ago. At account.microsoft.com → Security, confirm the recovery email and phone are ones you still control, and add a second method.

4. Add a PIN instead of removing the password

If the original irritation was typing a long password, this is the fix that costs you nothing. Four digits, device-bound, useless to anyone who steals the laptop.

5. Get the password out of your head and into something that remembers

A password manager, or a piece of paper somewhere sensible. Both are better than memory, and a written password at home is a far smaller risk than losing a drive. Jake keeps a sealed envelope in the shop safe with the credentials for every machine he takes in — a habit that started with the laptop he wiped.

Windows 11 vs Windows 10 — What Actually Differs

Less than you would expect. The mechanics of Windows account passwords have barely moved; what changed is the defaults, and the defaults are what decide your outcome.

The row that matters most is the third. A Windows 10 machine from 2018 with a forgotten local password is usually recoverable by pulling the drive. A Windows 11 machine from 2025 with the same problem often is not, because the drive quietly encrypted itself on day one. Same symptom, completely different outcome, and the difference is invisible from the sign-in screen.

Questions People Actually Ask

How do I remove the administrator password in Windows 11?

Sign in, press Ctrl+Alt+Delete and choose Change a password. Type the current password, leave both new boxes empty, press Enter. Local accounts only — on a Microsoft account, switch to a local account first via Settings → Accounts → Your info.

How do I remove the administrator password in Windows 10?

Exactly the same way. Ctrl+Alt+Delete → Change a password → current password → leave the new fields blank. Or Settings → Accounts → Sign-in options → Password → Change, leaving the new password and hint empty.

Can I remove the password if I use a Microsoft account?

Not directly — it is the same password as your Outlook and OneDrive, so it cannot be blank. Either switch the PC to a local account and then blank it, or keep the password and use netplwiz to sign in automatically so you never see the prompt. The second is safer.

I forgot my Windows password. What do I do first?

Look at the sign-in screen for an email address under your name. If it is there, reset online at account.microsoft.com from your phone in two minutes. If not, it is a local account and your routes are security questions, a second admin account, or a reset disk made in advance.

How do I reset a forgotten local account password without a disk?

Type a wrong password at the sign-in screen. If a Reset password link appears, you have security questions set — answer them and choose a new password. Otherwise a second administrator account on the same PC can reset it from netplwiz or with net user. If neither exists, there is no supported way in.

Does resetting my Windows password delete my files?

Documents, photos and programs are untouched. A reset done without the old password does destroy EFS-encrypted files and everything saved in Credential Manager. Changing the password while knowing the old one loses nothing at all.

Will removing my password affect BitLocker?

Not by itself. But booting from a USB, changing a UEFI or Secure Boot setting, clearing the TPM or moving the drive to another machine all trigger the recovery prompt — and without the 48-digit key nobody can open that drive. Find the key before you start.

Where do I find my BitLocker recovery key?

Usually your Microsoft account: account.microsoft.com/devices/recoverykey from any device. Otherwise a printed sheet, a text file on a USB stick, or a work Entra or Active Directory account. Store a copy somewhere that is not the encrypted PC.

Is it safe to use a third-party Windows password remover tool?

No. It is one of the most abused download search terms there is, the results are full of repackaged installers, and the tools cannot touch a Microsoft account or an encrypted drive anyway. The built-in routes cover almost every genuine case.

Why is the netplwiz checkbox missing on my PC?

Windows Hello sign-in is enforced. Settings → Accounts → Sign-in options → turn off "For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device", then reopen netplwiz.

Can I use the hidden built-in Administrator account to get in?

Almost certainly not, and it is the most repeated useless advice on this topic. The account is disabled by default and the command to enable it needs an administrator prompt — which you cannot open if you are locked out. It only helps if somebody enabled it earlier, in which case it shows as an extra tile at sign-in.

What if I forgot my PIN but remember my password?

Click Sign-in options under the PIN box and pick the key icon to use your password. Then Settings → Accounts → Sign-in options → PIN, and set a new one or remove it. They are two separate credentials on one account.

I bought a second-hand laptop and cannot sign in. What are my options?

Message the seller first — one reply usually solves it, and ask them to remove the device from their Microsoft account. Failing that, check for security questions and for a second account. If it is a local account with nothing set up, a clean install is the answer. Before buying second-hand, boot the machine and confirm there is no firmware password.

Does a clean install remove the password and keep my files?

It removes the password by removing the account, and it does not keep your files unless you rescued them first by reading the drive in another machine — which only works if it was not encrypted. Activation survives on the same hardware, so no product key is needed.

Is removing the Windows password a bad idea?

On a home desktop nobody else touches, the real risk is small. On a laptop that leaves the house it is genuinely a bad idea — anyone who picks it up gets your email, your saved passwords and your files. Keep the password and add a PIN instead; it is faster to type and worthless on any other device.

What Happened to the Shelf

Two of Jake's four laptops turned out to be Microsoft accounts. He messaged both sellers; both replied the same day; both were resold that week.

The third had security questions set and the owner remembered her first pet. Four minutes.

The fourth was a local account, no questions, no second user, and an encrypted drive. That one got a clean install and the customer was told, before anything was touched, that the contents were gone. She was disappointed. She was not, this time, surprised — which is the entire difference between a refund and a returning customer.

Jake now asks two questions before he agrees a price on any trade-in: is there a padlock on the C: drive, and is there an email address on the login screen. Between them, those two questions decide almost everything on this page.

Related Guides

Originally published August 2015 as a guide to resetting a forgotten Windows password. Rewritten  in July 2026 for Windows 11 25H2. The utilman.exe / Sticky Keys method we recommended for years has been removed and the reasons for removing it are set out above; the BitLocker and Credential Manager consequences are new, and are the sections worth reading twice.