Boot Windows 11 & 10 into Safe Mode (With Networking Too)

Safe Mode disables third-party display drivers and non-essential background services instantly, forcing Windows to load basic VGA graphics and system-critical drivers so you can uninstall buggy updates, malware, or broken graphics drivers without crashes. If your PC boots normally to the desktop right now, press Win + R, type msconfig, press Enter, check Safe boot under the Boot tab, click OK, and restart. If your machine is stuck at a black screen or login crash, holding the Shift key while clicking Restart instantly triggers the recovery environment.

What Safe Mode Actually Does to Your System

When Windows boots under normal conditions, it initializes dozens of background services, loads complex third-party display drivers, launches startup applications, and mounts network stack configurations. When a corrupted display driver or malicious script hooks into that boot chain, your system locks up in a blue-screen loop or a blank desktop. Safe Mode bypasses that entire routine by loading a stripped-down kernel along with bare-bones VGA display parameters and basic hardware components.

Inside Safe Mode, your resolution might look stretched or low-resolution. That is completely normal behavior. Microsoft uses generic display drivers here so that your dedicated GPU drivers—whether NVIDIA, AMD, or Intel—are entirely isolated. If your display was flickering or going pitch black under normal operation, entering Safe Mode removes the offending driver software from active memory, allowing you to run clean uninstallers like Display Driver Uninstaller (DDU) or roll back recent driver installations.

Furthermore, non-essential background processes like third-party antivirus suites, startup apps, and custom registry launches remain unexecuted. This isolated environment provides a clean environment to isolate software bugs, clear stubborn file locks, and run system file scans without operating system interference. Nothing you do during a standard diagnostic pass in Safe Mode damages your system files.

Safe Mode exists in three distinct operational environments depending on your diagnostic requirements. Selecting the wrong environment might prevent you from accessing web-based tools or logging into accounts secured by online verification, so choosing the appropriate variant before initiating a restart saves substantial diagnostic time.

How to Boot to Safe Mode in Windows 11

In Windows 11, Microsoft relocated system recovery features away from legacy applets into the central Settings app. If your operating system functions normally and you can navigate the desktop using your mouse or keyboard, this is the most reliable graphical path into the Advanced Startup menu without needing special key combinations at power-on.

Before proceeding, close all active application windows and save any open documents. This procedure requires a full system reboot, and Windows will not prompt you to save unsaved files once the recovery restart sequence initiates.

Method 1: Using Windows 11 Settings

1. Press Win + I to launch the Settings app directly.
2. Ensure System is selected on the left sidebar, then scroll down on the right pane and click Recovery.
3. Locate the Advanced startup tile under Recovery options and click the Restart now button located on the right side.
4. A confirmation dialog box will appear. Click Restart now again to confirm. Your system will close desktop applications and restart into a blue selection screen.
5. On the blue choice screen, select Troubleshoot → Advanced options → Startup Settings.
6. Click the Restart button at the bottom-right corner of the Startup Settings screen.
7. When your computer restarts and displays the numbered Startup Settings menu, press 4 or F4 on your keyboard to launch standard Safe Mode, or press 5 or F5 for Safe Mode with Networking.

How to Boot to Safe Mode in Windows 10

Although Windows 10 reached its official End of Support on October 14, 2025, millions of enterprise and legacy workstations continue running Windows 10 build 22H2 under extended coverage. The recovery framework in Windows 10 is almost identical in concept to Windows 11, though menu sub-categories inside Settings differ slightly in layout.

If you are maintaining a Windows 10 device, keeping system diagnostic steps handy is vital for troubleshooting post-update driver issues or clearing corrupted local accounts. Here is how to navigate the native Windows 10 recovery pathway cleanly.

Method 2: Using Windows 10 Settings

1. Click the Start menu button and select the gear icon to open Settings (or press Win + I).
2. Click on Update & Security near the bottom of the main settings grid.
3. Select Recovery from the left-hand menu column.
4. Under the Advanced startup header on the right, click Restart now.
5. Your monitor will switch to the blue recovery layout. Click Troubleshoot, then select Advanced options.
6. Click Startup Settings, then click the Restart button.
7. Once the startup list displays, press key 4 for basic Safe Mode, or key 5 to retain network card drivers.

The MSConfig Route: Force Booting into Safe Mode

The System Configuration utility (msconfig) is the fastest, most reliable method to force Windows straight into Safe Mode without navigating through multiple recovery screens. This method works identically across Windows 11 and Windows 10, including Home, Pro, and Enterprise editions.

When you enable Safe Boot inside MSConfig, Windows alters its boot configuration data (BCD) permanently until you manually turn it off. This guarantees that every subsequent reboot lands directly in Safe Mode, making it exceptional for deep troubleshooting passes requiring multiple system reboots.

1. Press Win + R to launch the Run dialog box.
2. Type msconfig into the text field and press Enter or click OK.
3. Switch to the Boot tab at the top of the System Configuration window.
4. Under the Boot options section, check the box labeled Safe boot.
5. Select your sub-option radio button:
   • Minimal: Standard Safe Mode without network drivers (recommended for general graphics/driver removal).
   • Alternate shell: Safe Mode directly into Command Prompt without desktop interface elements.
   • Network: Safe Mode loaded with network hardware drivers enabled.
6. Click Apply, then click OK.
7. A pop-up message will ask if you want to restart now or exit without restarting. Select Restart to boot straight into Safe Mode.

Shift + Restart: The Login Screen Shortcut

If Windows boots successfully to the sign-in screen but crashes or hangs the moment you enter your password and load your desktop shell, you do not need desktop access to enter Safe Mode. The physical Shift key modifier forces the Windows Boot Manager to redirect the next power state directly into the Windows Recovery Environment (WinRE).

This trick is entirely safe, causes zero data loss, and functions universally across Windows 11, Windows 10, and older legacy releases down to Windows 8.1.

Here is the exact sequence to execute from any active login screen:

1. On the login or lock screen, press Win + L if you need to lock your screen immediately.
2. Locate the Power icon situated at the bottom-right corner of your screen.
3. Press and hold down the physical Shift key on your keyboard. Do not release it.
4. While holding Shift, click the Power icon and choose Restart.
5. If Windows warns you that other people might lose unsaved work, click Restart anyway while continuing to hold the Shift key.
6. Release the Shift key only when the blue screen titled Choose an option appears on your display.
7. Navigate to Troubleshoot → Advanced options → Startup Settings → Restart.
8. Press 4 for standard Safe Mode or 5 for Safe Mode with Networking.

Command Line Method: Booting via CMD or PowerShell

System administrators and power users managing local systems or remote terminal sessions often prefer command-line options. Using Windows Boot Configuration Data store commands (bcdedit) or the Windows Shutdown utility allows you to trigger instant diagnostic reboots without manually clicking graphical submenus.

You must execute these commands from an elevated administrative command prompt or PowerShell terminal. If you run them in a standard non-elevated prompt, Windows will return an Access Denied error.

Option A: Trigger Advanced Startup GUI via CMD

If you want to invoke the blue recovery menu directly without opening Settings, execute this single shutdown command inside CMD or Run:

shutdown /r /o /f /t 00

Here is what those flags execute: /r mandates a system restart, /o redirects the boot path directly into the Advanced Options recovery menu, /f forces running applications to close immediately without hanging, and /t 00 sets the delay timer to zero seconds.

Option B: Force Direct Safe Boot via BCDEdit

To bypass the blue selection menu entirely and force the system straight into Safe Mode upon next boot, modify the BCD parameters directly:

For standard Safe Mode, run:

bcdedit /set {current} safeboot minimal

For Safe Mode with Networking, run:

bcdedit /set {current} safeboot network

Once you execute your chosen bcdedit string, restart your PC by running shutdown /r /t 00. Windows will immediately cycle down and reboot straight into Safe Mode.

How to Enter Safe Mode When Windows Won't Boot (Black Screen)

When your computer hits a severe boot error—such as a critical system file failure, corrupted registry hive, or total graphics black screen—you cannot access Settings, MSConfig, or the login screen. Under these circumstances, you need to trigger Automatic Repair interrupt protocols built into your computer's UEFI/BIOS motherboard layer.

In legacy hardware running Windows 7, holding down the physical F8 key during startup opened the Advanced Boot Options menu. Modern Windows 11 and Windows 10 devices utilize Fast Startup and UEFI initialization, which renders key-tapping speeds humanly impossible because boot times drop below 200 milliseconds. Instead, you trigger recovery through forced hardware interruptions.

Nothing in this forced interrupt procedure harms your SSD or hard drive. It simply alerts the motherboard bootloader that primary OS initialization failed repeatedly, prompting Windows to initiate self-diagnostic routines.

1. Ensure your desktop PC or laptop is powered completely off. Hold down the physical power button for 10 seconds if necessary.
2. Press the power button to turn on your system.
3. The instant you see the manufacturer logo (such as Dell, HP, Lenovo, or ASUS) or the spinning Windows loading dots appear on screen, press and hold the physical power button down for 5 to 10 seconds to force the machine immediately off.
4. Press the power button a second time to turn the system back on.
5. As soon as the logo or spinning dots appear again, press and hold the physical power button to force the power off a second time.
6. Press the power button a third time and allow your system to boot uninterrupted.
7. Windows will detect the consecutive startup failures and display a message stating Preparing Automatic Repair, followed by Diagnosing your PC.
8. When the Automatic Repair screen lands, click the Advanced options button.
9. On the blue choice screen, navigate to Troubleshoot → Advanced options → Startup Settings → Restart.
10. Press 4 or F4 to launch Safe Mode.

How to Exit Safe Mode and Return to Normal Windows

If you entered Safe Mode using the Settings app, the Shift + Restart shortcut, or forced hardware interrupts, exiting Safe Mode is simple: restart your computer normally through the Start menu. Because those methods trigger a single-instance boot flag, Windows defaults back to normal operation on the next power cycle.

However, if you entered Safe Mode by modifying settings inside MSConfig or executing direct bcdedit commands in the command prompt, Windows will continuously cycle back into Safe Mode indefinitely until you manually undo those configurations.

Here is how to release those persistent flags based on how you set them up:

Releasing MSConfig Safe Boot

1. While inside Safe Mode, press Win + R, type msconfig, and press Enter.
2. Switch to the Boot tab.
3. Under Boot options, uncheck the box next to Safe boot.
4. Click Apply, then click OK.
5. Select Restart when prompted. Your system will now boot into full desktop mode.

Releasing BCDEdit Safe Boot Flags via CMD

If you modified BCD parameters earlier via command line, open an administrative Command Prompt inside Safe Mode and execute:

bcdedit /deletevalue {current} safeboot

Once the prompt returns "The operation completed successfully," restart your computer by running shutdown /r /t 00 to restore standard operation.

What to Do When Safe Mode Fails or Gets Stuck

Sometimes entering Safe Mode fails due to corrupted boot loaders, account lockout scenarios, or system file degradation. Understanding how to handle these specific failure modes ensures you never remain stranded without system access.

Symptom 1: The Windows Hello PIN Lockout

If you rely exclusively on a PIN, fingerprint, or facial recognition login via Windows Hello, you may encounter an error stating "Something happened and your PIN isn't available" upon entering Safe Mode. This occurs because the Windows Hello security service is intentionally disabled in basic Safe Mode.

To bypass this, look directly beneath the password entry box and click Sign-in options. Switch the icon from the PIN keypad to the key symbol, which represents your full Microsoft Account password or local user password. If no alternate sign-in option is available, hold Shift while clicking Restart on the lock screen, choose Troubleshoot → Advanced options → Command Prompt, and enter the command: bcdedit /deletevalue {current} safeboot to return safely to normal mode.

Symptom 2: BitLocker Demanding Recovery Keys

Starting with Windows 11 24H2 and 25H2, Device Encryption (BitLocker) is enabled by default on new hardware and clean OS installations across both Home and Pro editions. When you alter the boot parameters via hardware interruptions or advanced recovery tools, BitLocker may detect a potential security violation and lock your drive partitions.

Do not panic; your data is completely intact. Open a web browser on a smartphone or alternate secondary computer, navigate to aka.ms/myrecoverykey, log into the exact Microsoft Account registered to your computer, and locate your matching 48-digit numerical BitLocker recovery key to unlock the drive and proceed into Safe Mode.

How to Bring Back the Classic F8 Key Menu

If you frequently maintain hardware, missing the classic legacy F8 startup boot menu can slow down your workflow. Microsoft disabled the F8 boot menu by default in Windows 8, 10, and 11 to optimize system boot speeds. However, you can manually re-enable the legacy boot policy using a single command prompt instruction.

Re-enabling this setting adds approximately one to two seconds to your total startup duration, but it grants instant access to diagnostic startup menus whenever you press F8 during machine POST.

1. Click Start, type cmd, right-click Command Prompt, and select Run as administrator.
2. To restore the classic F8 boot menu policy, type or paste the following string and press Enter:
   bcdedit /set {default} bootmenupolicy legacy
3. When CMD returns "The operation completed successfully," close the command prompt window.
4. Restart your system. During boot, repeatedly tap the physical F8 key.
5. The classic black-and-white Advanced Boot Options menu will display, allowing you to select Safe Mode using standard keyboard arrow keys.

If you ever wish to disable this feature in the future and return to modern fast boot speeds, open an administrative Command Prompt and run:

bcdedit /set {default} bootmenupolicy standard

Frequently Asked Questions

Does booting to Safe Mode work the same on Windows Home and Pro?

Yes, all core methods including MSConfig, Settings recovery, Command Prompt instructions, and Shift + Restart shortcuts function identically across Windows 11 Home, Windows 11 Pro, Windows 10 Home, and Windows 10 Pro. The only difference is that Pro edition users can also access Group Policy management tools once inside Safe Mode.

Do I need administrative permissions to enter Safe Mode?

Triggering Safe Mode through the graphical login screen or forced hardware interruptions does not require initial administrator access. However, modifying settings inside MSConfig, executing BCDEdit commands, or performing system driver removals inside Safe Mode will require local administrative account credentials.

Will booting into Safe Mode delete my personal files or software?

No, booting into Safe Mode does not remove, modify, or format your personal files, documents, or installed software applications. It simply starts Windows with non-essential background drivers disabled so you can isolate system faults cleanly.

How do I reverse Safe Mode if my PC keeps booting back into it?

If your PC continuously reboots into Safe Mode, press Win + R, run msconfig, navigate to the Boot tab, uncheck "Safe boot", and click OK. If you cannot reach the desktop, open Command Prompt from WinRE and run bcdedit /deletevalue {current} safeboot.

Why is my screen resolution stretched or blurry in Safe Mode?

Windows disables your dedicated NVIDIA, AMD, or Intel graphics card drivers while in Safe Mode, relying instead on generic Microsoft display adapters. This low-resolution visual appearance is intentional and necessary to ensure graphics driver bugs do not cause crashes.

Can viruses and malware execute while Windows is in Safe Mode?

Most standard malware, spyware, and adware scripts rely on Windows startup registry entries and third-party background services to initialize. Because Safe Mode blocks third-party startup scripts entirely, it provides an ideal environment to run offline security scans and remove malicious files.

Is there any charge or subscription needed to access diagnostic tools?

No, Safe Mode and the Windows Recovery Environment (WinRE) are built directly into the core operating system architecture. Microsoft provides all recovery features completely free of charge across all Windows versions.

How long does it take for a system to boot into Safe Mode?

On modern SSD-equipped systems, booting into Safe Mode typically takes under 15 seconds. Older mechanical hard drives may take between 30 and 60 seconds to process the reduced service initialization list.

Is there an easier way to enter Safe Mode without using commands?

Yes, holding down the physical Shift key on your keyboard while clicking Restart on your desktop Start menu or lock screen is the easiest non-command route into the recovery framework.

What should I do immediately after entering Safe Mode successfully?

Once inside Safe Mode, open Device Manager to uninstall bad graphics or network drivers, launch Control Panel or Settings to remove recently installed conflicting software, or execute diagnostic commands like sfc /scannow to fix corrupt operating system files.

Can I use Wi-Fi internet connections while inside Safe Mode?

Yes, but you must explicitly select Safe Mode with Networking (Option 5) on the startup selection screen. Standard Safe Mode (Option 4) completely disables all network hardware adapters.

Why does Windows Hello reject my PIN code inside Safe Mode?

The security sub-services responsible for biometric authentication and PIN verification are suppressed during Safe Mode initialization. You must switch sign-in options to use your account password or clear the safe boot state via command line.

How do I access Safe Mode on a tablet without a keyboard?

On Windows tablets or touch-screen 2-in-1 devices without physical keyboards, navigate to Settings → System → Recovery → Advanced startup → Restart now. Touch-screen support remains active across the blue Windows Recovery Environment submenus.

Can I install new software programs while running in Safe Mode?

Standard software installers relying on the Windows Installer Service (msiexec) are disabled by default in Safe Mode. However, driver removal utilities, portable anti-malware tools, and standalone executable files will run without issues.

What is the difference between Safe Mode and a Clean Boot?

Safe Mode loads generic Microsoft drivers and isolates core system components. A Clean Boot loads your standard graphics and hardware drivers while temporarily disabling third-party startup applications via Task Manager and MSConfig.

Why is BitLocker asking for my key when trying to boot to Safe Mode?

BitLocker Device Encryption flags system boot setting modifications to prevent unauthorized data tampering. You can immediately obtain your matching 48-digit decryption key by logging into aka.ms/myrecoverykey from any device.

Revision note. Originally published July 2016. Rewritten August 22, 2026 for Windows 11 and Windows 10. Updated to consolidate modern Windows 11 Settings navigation, outline Windows 10 ESU status parameters, provide forced command-line BCD recovery routes, and document default BitLocker device encryption locks. If you have spent hours staring at a frozen desktop or black screen today, know that hardware issues are rarely as permanent as they feel—taking a systematic breath and working step-by-step through Safe Mode will almost always bring your system back to safety.