Forgot Your Windows Password? Every Way Back In (11 & 10)

Locked out of your own PC — take a breath, because the road back in is almost certainly shorter than it feels right now. If your sign-in screen shows an email address, you have a Microsoft account: reset the password from your phone at account.live.com/password/reset and you are done in three minutes. If it shows just a name, you have a local account: type the wrong password once and a Reset password link appears, ready to accept your security questions. Your files, in both cases, are sitting exactly where you left them. But before you reach for the famous fix — the boot-from-USB command-prompt trick every YouTube tutorial has taught since 2016 — here is what those tutorials have not caught up with: on modern Windows 11 machines that trick no longer opens the door, it welds it shut. New PCs encrypt the disk by default now, and booting from outside triggers a BitLocker recovery screen instead of a command prompt. This page walks every road that still works, in the order you should try them.

Jake changed his password on a Sunday night — a good, strong, brand-new password — and by Monday morning it was simply gone from his head. Not misremembered: gone. After the fourth failed attempt, he did what everyone does — searched, found a confident video from years back, made the bootable USB stick, and followed the steps to swap in a command prompt from the sign-in screen. Except his year-old laptop did not show him a command prompt. It showed a blue screen demanding a 48-digit BitLocker recovery key he had never heard of, and now the machine would not even boot normally without it. One lockout had become two. The actual rescue took three minutes and none of that drama: the sign-in screen had been showing his email address all along, which meant his password lived with his Microsoft account, not inside the laptop. He reset it from his phone, over breakfast, and the laptop accepted the new password on the first try. The recovery-key scare? That, mercifully, was waiting in the same Microsoft account too.

Ethan: "A Microsoft account is a hotel room: lose the key and the front desk cuts you a new one after checking your ID — the lock was never the only way in. A local account is your own house: the only spare key that exists is the one you cut in advance — the security questions, the reset disk. And the USB trick? That was always climbing in through an unlocked window. Modern PCs finally locked the window — and honestly, that is good news, because it kept out everyone who was not you, too. The lesson is not ‘beat the window.’ It is: know which building you live in, and cut a spare key while the door is still open."

First question: which kind of account are you locked out of?

Everything about your rescue depends on this, and the sign-in screen already tells you the answer. Look under your name: an email address (yourname@outlook.com, gmail.com, anything) means a Microsoft account — your password is stored with Microsoft, not on the PC, which is why it can be reset from any device on Earth. No email, just a name means a local account — the password exists only inside this machine, and so do all the ways of resetting it. One glance, and you know which half of this page is yours:

Microsoft account: reset it from your phone, right now

This is the happy path, and most people locked out of Windows 11 are standing on it without knowing. Because the password belongs to your online account, the locked PC is not even required for the reset:

1. On your phone (or any device), open account.live.com/password/reset.
2. Enter the email address shown on the PC’s sign-in screen.
3. Microsoft verifies it is you — a code to your recovery email or phone number, or a tap in the Authenticator app if you have it.
4. Set the new password. Make it one you can type on a keyboard without autocorrect’s help.
5. Back at the PC: make sure it is connected to the internet (the sign-in screen shows a network icon in the bottom-right corner — connect there if needed), then sign in with the new password. The PC checks with Microsoft, accepts it, and you are home.

Two honest footnotes. If the PC has been offline since the reset, it may still expect the old password it last knew — the internet connection at the sign-in screen is what lets it learn the new one. And if Microsoft’s verification step defeats you because the recovery phone number is three phones ago, the account recovery form is the longer road — fill it from a device and location you usually use, which genuinely improves its odds.

Wait — is it actually the PIN you forgot?

Here is a distinction that rescues thousands of people a day: most Windows 11 machines sign in with a PIN, not the password — and they are different things. The PIN is short, numeric, and lives only on that one PC. If the sign-in box is asking for a PIN, the password you cannot remember may not even be what is being requested. Click I forgot my PIN right on the sign-in screen: Windows verifies you with your Microsoft account password (this needs internet), then lets you invent a fresh PIN on the spot. So the sequence for a fully-forgotten-everything morning is: reset the account password from your phone first, then use it to feed the forgot-my-PIN flow at the PC. Ten minutes, no USB sticks, nothing lost.

Local account with security questions: the built-in spare key

If you set up a local account on Windows 11 or 10, setup made you pick three security questions — and they are wired directly into the sign-in screen:

1. Type any wrong password once and press Enter.
2. A Reset password link appears under the password box. Click it.
3. Answer the three questions — first pet, birth city, the classics you chose years ago.
4. Set a new password immediately and you land on your desktop, files untouched.

A quiet warning while you are here: whatever answers get you in today, anyone who knows you well could guess too — that is the eternal trade of security questions. Once you are back inside, consider tightening them (answers do not have to be true, only memorable to you) — and if you struggle keeping passwords generally, letting a proper password manager remember them for you is the honest fix, not one more sticky note.

No questions, but another admin uses this PC? Borrow them

A spouse’s account, a parent’s, the old account you made "just in case" — if any other account on the machine has administrator rights, your lockout is over: they sign in and reset your password from their side in under a minute. We keep a dedicated step-by-step for exactly that rescue in how to reset another user’s password using an admin account — do it that official way rather than any offline trickery, because the official way updates everything cleanly. (Afterward, changing your password properly from inside your account is a two-minute settings visit.)

The famous USB trick — and why it now locks you out harder

For a decade, the internet’s favorite answer — including the video that used to live on this very page — was the boot trick: start the PC from Windows installation media, use its command prompt to swap a sign-in-screen tool for cmd.exe, reboot, and reset the password from an all-powerful command prompt. It worked because the disk was readable to anyone holding a USB stick. Understand that sentence fully and you understand why it had to die: the disk was readable to anyone holding a USB stick.

Modern Windows 11 machines — and effectively all new ones shipped with 24H2 or later, Home edition included — encrypt the drive with BitLocker device encryption by default. Boot from external media now and the drive is mathematically unreadable without the recovery key; the machine greets you with a blue 48-digit prompt instead of a command prompt, and until that key is supplied, even normal booting can be blocked — exactly Jake’s double lockout. So treat the old tutorials as history, with two practical takeaways. First: check whether your key exists at aka.ms/myrecoverykey (signed in with your Microsoft account, from any device) — knowing it is there turns BitLocker from a monster back into a bodyguard; our finding-your-BitLocker-key guide covers every hiding place. Second: on an older, unencrypted machine the trick may still physically function — but if the ladder above has a single rung available to you, use the ladder. And there is a silver lining worth saying out loud: the same wall stopping you is what stops a laptop thief from strolling through your files — device encryption is protecting you even mid-lockout.

"Password reset software": the honest warning

Search this topic and you will meet a wall of paid utilities promising one-click rescue. The honest picture: the legitimate ones are mostly automations of that same boot-from-USB approach — which means BitLocker stops them cold on modern machines, a limitation their sales pages mention quietly or not at all. The rest range from overpriced to outright malware, and a locked-out, panicking person is precisely who scam software is priced for. If a tool demands payment before proving it can even see your disk, walk away. Nothing sold in an ad can do more than the free ladder on this page.

The last resort: Reset this PC (keeping your files)

Local account, no questions, no other admin, no reset disk — then the truthful answer is that Windows offers no supported way to recover that account, and the road forward is rebuilding the system around your files. From the sign-in screen: hold Shift while clicking Power → Restart, and the machine reboots into the recovery environment (the same blue menus you may know from advanced startup). Choose Troubleshoot → Reset this PC → Keep my files. Windows reinstalls itself, keeps personal files, and removes installed apps and accounts — you set up a fresh account at the end and your documents are waiting. Know the honest costs before you start: apps must be reinstalled, and on an encrypted drive the recovery environment will ask for the BitLocker key before it touches anything — the aka.ms/myrecoverykey check comes first. If even that key is nowhere to be found, Remove everything plus a clean install is the true bottom of the ladder; it is a full wipe, so treat it as the admission price of the lesson in the next section.

The five-minute kit that makes this your last lockout

Once you are back in, spend five minutes so this page never sees you again. One: if you run a local account by choice, at least set the security questions (Settings → Accounts → Sign-in options → Password → Update your security questions) — or link a Microsoft account, which converts every future lockout into a phone-and-three-minutes problem. Two: confirm your recovery phone and email at account.live.com are numbers you still own. Three: open aka.ms/myrecoverykey and lay eyes on your BitLocker key — today, not the day the blue screen asks. Four: let a password manager carry everything except the one master password. Five minutes of boring beats a Saturday of blue screens, every time.

For IT admins: the fleet checklist

Password lockouts stop being an emergency the day the plumbing is in place; if you run more than a handful of machines, that plumbing is:

1. Self-service password reset (SSPR) in Microsoft Entra, so staff rescue themselves from the sign-in screen instead of queuing at your desk — measure your Monday-morning ticket count before and after and enjoy the graph.
2. BitLocker recovery keys escrowed centrally — Entra ID or Active Directory, verified by actually retrieving one, not by assuming the policy worked. A key that exists only on a user’s personal account is a resignation letter waiting to be written.
3. LAPS (Windows Local Administrator Password Solution, built in since 2023) for the local admin account on every endpoint — unique, rotated, retrievable; the break-glass entry that makes USB tricks unnecessary and shared admin passwords indefensible.
4. A written helpdesk verification script for reset requests. "Urgent, locked out, reset it now" is the single most-worn social-engineering costume in existence; your process, not your staff’s intuition, should be what decides.
5. For any Windows 10 stragglers in the fleet, remember support realities while you plan migrations — consumer ESU runs to October 12, 2027, but the modern account-recovery plumbing above is a Windows 11 story.

When the roads themselves misbehave

FAQ — forgotten Windows passwords, answered straight

How do I reset a forgotten Windows 11 password?

Microsoft account: reset online at account.live.com/password/reset from any device. Local account: enter a wrong password once and click the Reset password link to answer your security questions.

How do I know if I have a Microsoft account or a local account?

Look at the sign-in screen: an email address under your name means Microsoft account; a plain name with no email means local account.

Will resetting my password delete my files?

No — every genuine reset road on this page leaves files untouched. Only the last-resort Reset this PC affects the system, and its Keep my files option preserves personal files.

What if I forgot my PIN instead of my password?

Click "I forgot my PIN" on the sign-in screen. Windows verifies you with your Microsoft account password over the internet, then lets you set a new PIN immediately.

Can I reset a Windows password without any disk or USB?

Yes — the Microsoft-account online reset, the security-questions link, and another admin resetting yours all need zero external media. USB-based approaches are the legacy road, and modern encryption blocks them anyway.

Does the old command prompt / utilman USB trick still work?

On modern encrypted machines, no — booting from external media triggers the BitLocker recovery-key screen instead, and can add a second lockout. On old unencrypted PCs it may still function, but try every other road first.

What is the 48-digit key Windows suddenly demands?

Your BitLocker recovery key — the drive is encrypted and an unusual boot triggered the challenge. Retrieve it at aka.ms/myrecoverykey signed in with your Microsoft account from any device.

I never set security questions on my local account. Now what?

Another admin on the PC can reset your password; a previously made reset disk works too. With neither, the supported road is Reset this PC with Keep my files.

Can another user on the same PC reset my password?

Yes, if their account has administrator rights — done from their session in under a minute. That is the easiest rescue for shared family PCs.

My new password is rejected at the PC after an online reset. Why?

The PC is offline and still expects the old password. Connect to the network from the sign-in screen’s network icon, then sign in with the new password.

Is paid password reset software worth buying?

Almost never — legitimate ones automate the USB approach that encryption now blocks, and the category is thick with scams targeting panicked buyers. The free roads on this page cover every recoverable case.

How do thieves not just use these tricks on a stolen laptop?

Encryption — the same BitLocker wall that blocks USB tricks makes a stolen drive unreadable, and online resets require the owner’s identity checks. Your lockout frustration is a thief’s dead end.

Does Reset this PC remove BitLocker or need the key?

On an encrypted drive the recovery environment asks for the BitLocker key before resetting — check aka.ms/myrecoverykey first. After a reset completes, encryption is set up fresh.

How is this different on Windows 10?

The roads are the same — online reset, security questions (1803 and later), admin rescue, Reset this PC. Older Windows 10 hardware is simply less likely to be encrypted, so legacy tricks fail less often there.

How do I stop this happening again?

Five minutes: set or refresh security questions, verify your recovery phone and email, view your BitLocker key once at aka.ms/myrecoverykey, and let a password manager carry the rest.

What is a password reset disk and should I make one?

A USB key that pre-authorizes a future local-account reset — created from Control Panel while signed in. Security questions made it mostly obsolete, but on a questions-less local account it is still worth five minutes.

Revision note. This page started in May 2016 as a short video walkthrough — and the method that video taught has since been retired by Windows itself, which is the best possible reason for a rewrite. Rebuilt top to bottom in August 2026: the account-type triage, the online reset, the PIN distinction, security questions, the honest truth about USB tricks on encrypted machines, and the last-resort ladder — each in the order that risks the least. If your lockout survives every road here, tell us through the contact page; the stubborn cases are how this page earns its next update. And if you are reading this at 1 a.m., locked out of the machine your whole week lives on: the odds are strongly with you — most lockouts end three minutes after someone finally shows you which door was yours.