How to Change Your Windows Password, PIN & More (11 & 10)

Changing your Windows password takes two minutes — once you know which of three different locks you actually mean, because here is the fact that derails everyone: on most modern PCs, the thing you type at login is not your password at all. It is a PIN, which only works on that one machine. Behind it sits either a Microsoft account password (changing it changes your email, Xbox, and Office too) or an old-style local password (this PC only). The quick routes: PIN → Settings → Accounts → Sign-in options → PIN → Change. Microsoft account → account.microsoft.com → Change password. Local account → press Ctrl + Alt + Del → Change a password — a veteran shortcut that still works perfectly. This page sorts out which lock is yours and walks each one.

Jake fields this one as a "my password change didn't work" panic. A customer, spooked by a breach notification, dutifully changed her Microsoft account password from her phone — strong new password, done properly. Next morning her laptop accepted the same old four digits it always had, and she came to the shop convinced the change had silently failed and her account was compromised. Nothing had failed: the laptop's four digits were a PIN, a lock that lives only in that machine's security chip, deliberately untouched by the password change. Her account was safer than ever — she just didn't know she owned two different keys.

Ethan: "The building master key and your own apartment's deadbolt code. She changed the master key at the head office — correctly! — and then was alarmed that her deadbolt still took the old code. Different lock, different door, and the deadbolt code never leaves the building. Once you see the two keys, every mystery on this page dissolves."

First: find out which locks you actually have

Open Settings → Accounts and read the top of the page. An email address under your name means a Microsoft account — your login is backed by a cloud password that also opens Outlook, Xbox, OneDrive, and Office. "Local account" means the old style: one password, living only on this PC. Then check Sign-in options on the same page: if PIN (Windows Hello) is set up — it is on nearly every modern machine, because Windows pushes it hard during setup — the thing you type daily is that PIN, not either password. Most people therefore own two locks (PIN + one account password); knowing which is which turns the rest of this page into a menu.

Lock one: change the PIN (the thing you type daily)

1. Settings → Accounts → Sign-in options.
2. Click PIN (Windows Hello) → Change PIN.
3. Enter the current PIN, then the new one twice. Tick "include letters and symbols" if you want a PIN stronger than digits — allowed and underused.
4. Done instantly — no restart, and nothing else about your account changes.

Worth absorbing why the PIN system exists: the PIN never leaves your machine — it unlocks a key stored in the PC's security hardware — so a shoulder-surfer in a café who sees your four digits has learned nothing that works anywhere else. That is why typing a short PIN daily is genuinely safer than typing your real password daily, and why "my PIN feels too simple" is usually misplaced guilt. Forgot the PIN? Click I forgot my PIN on the login screen — you prove yourself with the account password and mint a new one on the spot.

Lock two: change a Microsoft account password

Go to account.microsoft.com (any device, any browser), sign in, open Security, and choose Change password (approving the sign-in with your usual second factor). Two honest notes travel with this one. First, the blast radius: this password guards Outlook/Hotmail mail, OneDrive files, Xbox, and Microsoft 365 — changing it after a breach scare is exactly right, and expect other devices to ask you to sign in again. Second, the anticlimax from Jake's counter: your PC's PIN will not change, by design — do not interpret that as failure. If the account may be compromised (password reused on a breached site, odd sign-in alerts), use the "sign out everywhere" option on the same Security page after changing, and turn on two-step verification while the tab is open — it is the single biggest upgrade on the whole page.

Lock three: change a local account password

1. The veteran's route: press Ctrl + Alt + Del → Change a password → old once, new twice, Enter. Works on every Windows back to antiquity, and it is the fastest path on this page.
2. The Settings route: Settings → Accounts → Sign-in options → Password → Change — same result, more clicks, and it walks you through updating the security questions.
3. While there, set or refresh those security questions — on a local account they are your only self-service recovery if the password is ever forgotten, and "I set them in 2019 and remember nothing" is the shop's most common confession.

Forgot it entirely? The recovery fork

Changing needs the old credential; forgetting is a different mission with a fork in it. Microsoft account forgotten: the "Forgot password?" link at login (or account.live.com/password/reset from any device) runs the online recovery — code to your backup email or phone, new password, done; this is the payoff moment for keeping that recovery info current. Local account forgotten: the login screen offers your security questions after a wrong attempt — answer them and reset on the spot. No questions set, or answers lost to time? That deeper rescue — and the honest talk about what it involves — is exactly what our forgotten-password guide exists for; it is the companion piece to this page, not a paragraph inside it.

The three locks, one table

Screenshot-worthy summary of everything above — the reference Jake keeps taped by the shop's register, because this exact three-way confusion walks in weekly. Reading tip: the "where it works" column is the one that prevents panics; a lock that only exists on one machine can never be "hacked from the internet," and a lock that works everywhere deserves the strongest key you own:

What to change it TO (the two-minute strength briefing)

Length beats cleverness: a passphrase of three or four unrelated words ("marble-chai-tornado-lamp" style) is both stronger and more typeable than P@ssw0rd contortions that fool no software and every human. Never reuse the Microsoft account password anywhere else — reuse is how breaches at random forums become sieges on your email, the exact scare that sent Jake's customer changing hers. And the ranking that surprises people: two-step verification on the account matters more than the password's strength, the PIN system means you rarely type the big password anyway, and if typing daily still annoys you, the honest options are a better PIN or — on a trusted home desktop — auto sign-in, done properly, never a weaker password.

Common situations, routed

FAQ — Windows passwords and PINs

How do I change my Windows login password?

Identify the lock first: the daily login is usually a PIN (change in Settings → Sign-in options), backed by a Microsoft account password (change at account.microsoft.com) or a local password (Ctrl + Alt + Del → Change a password).

What's the difference between my PIN and my password?

The PIN lives only in that one PC's security hardware and works nowhere else; the password is the account's real key, valid across Microsoft's services. Different locks, deliberately independent.

I changed my Microsoft password but my PC accepts the old login. Why?

Because your PC login is the PIN, which a password change never touches — by design, not by failure. Change the PIN separately if you want both refreshed.

How do I change my PIN?

Settings → Accounts → Sign-in options → PIN (Windows Hello) → Change PIN. Letters and symbols are allowed if digits feel thin.

I forgot my PIN. Am I locked out?

No — click "I forgot my PIN" on the login screen, prove yourself with the account password, and set a fresh one immediately.

Does changing my Microsoft account password sign me out everywhere?

Other devices will re-prompt over time; for a security scare, use the deliberate "sign out everywhere" option on the account's Security page rather than relying on that.

Does Ctrl + Alt + Del still work for changing passwords?

Perfectly — "Change a password" on that screen remains the fastest route for local accounts, decades on. On Microsoft-account machines it points you to the online change instead.

How do I change another user's password on this PC?

As an administrator, you can reset a local user's password (their account in Settings, or the classic User Accounts panel). A family member's Microsoft account can only be reset by them, online — as it should be.

How often should I change my password?

Not on a schedule — that ritual died officially years ago; forced rotation breeds weaker passwords. Change on events: a breach alert, a shared password, a suspicious sign-in, a person leaving your trust circle.

What makes a strong password in 2026?

Length and uniqueness: a several-word passphrase, used nowhere else, beats short symbol soup. Two-step verification on the account outranks both — turn it on while you are in there.

Is a 4-digit PIN really safe?

Safer than it feels: it only works on that physical machine, wrong guesses are throttled, and it protects the real password from daily exposure. A longer or alphanumeric PIN is still a free upgrade.

Should I switch my local account to a Microsoft account (or back)?

Microsoft accounts buy online recovery, sync, and find-my-device; local accounts buy independence. For most households the online recovery alone decides it — forgotten local passwords are this topic's biggest heartbreak.

Where are my browser-saved passwords in all this?

A separate vault entirely — changing Windows locks does not touch what Edge or Chrome store. Managing that vault is its own guide.

Can I remove the password requirement instead?

Two flavors exist — auto sign-in (keeps the password, skips typing it; sane on home desktops) and full removal (rarely wise). Both have dedicated guides on this site with the honest trade-offs attached.

What are passkeys and do they replace all this?

Passkeys let sites verify you through your device's own lock — no password to type or steal — and Windows supports them through the same Hello system as your PIN. They are the direction of travel; the locks on this page are the present tense.

I'm completely locked out. What now?

Microsoft account: the online reset from any device. Local account with dead security questions: the deep-rescue path in our forgotten-password guide — doable, but budget patience and read it before improvising.

Where to go next

Revision note. Originally published August 2015, when a Windows password was one thing and changing it was one menu. Rewritten August 18, 2026 for the three-lock era: PIN, Microsoft account, local account — which is which, how each changes, and the recovery fork for the day one is forgotten. If you ever changed your password properly and panicked when the laptop still took the old digits, you met the two-keys mystery this page was rebuilt to solve. Spotted something wrong or something missing? Tell me through the contact page and I will fix it. Lock up well.