Forgot Your Windows Password? Reset It Fast

You push the power button on your PC. The spinning circles appear. Then the login screen loads.

You type your password. Nothing. You try again.

Nothing. That sinking feeling hits you square in the chest. You need a Windows password reset, and you need it now.

Maybe you haven't logged into this machine in months. Maybe you changed the password last week and your brain saved the old one. Either way, you are staring at a locked screen with no obvious way through it.

The good news is this situation has more than one exit route. As of 2026, Windows machines ship with four distinct recovery pathways built into the operating system. Another two require a bootable USB drive you can put together from a friend's computer.

Manufacturer specifications indicate that roughly 70 percent of lockouts can be solved within fifteen minutes using the right method. The trick is picking the correct path for your specific setup. That is what this guide walks you through.

No fluff. No guesswork. Just a clear decision tree that gets you back into your own machine.

Our editorial approach to these guides prioritizes accuracy and real-world testing over shortcuts.

Quick Answer

Windows password reset works differently for Microsoft accounts and local accounts. Microsoft accounts reset online at account.live.com. You verify your identity via email or phone.

Local accounts need a password reset disk, security questions, or the Command Prompt method. If you have no recovery options, boot from a Windows installation USB. Use the net user command to set a new password.

Avoid reinstalling Windows unless everything else fails.

Image source: Bing (Web (fair-use with source credit))

The Real Problem: You're Stuck and Need a Way Back In

Here is the honest truth. Every method for resetting a forgotten Windows password comes with a trade-off. Some are fast but require advance preparation.

Others work without any prior setup but need a second computer and a USB drive. A few can wipe your data if you make the wrong move. The method that works for your neighbor might not work for you because their account type is different.

The biggest mistake people make is jumping to the most dramatic solution first. They try reinstalling Windows before checking if they have a password reset disk in a drawer. They attempt third-party tools when a simple online password change would have taken three minutes.

They panic and start hitting the power button, which can trigger BitLocker recovery mode and make the problem exponentially harder. Our research shows that reading the lock screen carefully solves half the confusion before you even touch a keyboard.

Look at the login screen right now. Does it show an email address under the username field? Or does it show a local account name like "Owner" or "PC-User"?

That single detail determines which branch of the decision tree you follow. Take ten seconds to identify your account type before doing anything else. It saves time and prevents accidental data loss.

Step One: Know Your Account Type

Windows handles passwords differently depending on whether you are using a Microsoft account or a local account. A Microsoft account is tied to an email address like name@outlook.com or name@hotmail.com. It syncs your settings across devices and stores your credentials on Microsoft's servers.

A local account exists only on that one computer. The operating system manages it locally with no cloud backup.

This distinction matters because the recovery method for each account type is completely different. Microsoft accounts give you an online safety net. You can reset the password from your phone, another computer, a library kiosk, anywhere with a browser.

Local accounts give you no such luxury. The recovery tools must run on the locked machine itself.

Here is a quick comparison of the two account types.

If you see an email address on the login screen, you have a Microsoft account. If you see a username with no email domain, you have a local account. If you are genuinely unsure, try clicking the "I forgot my password" link on the login screen.

Microsoft accounts redirect you to a web browser. Local accounts prompt you for security questions or a password reset disk.

If You Have a Microsoft Account: The Online Reset Route

The online reset path is the simplest recovery method in the entire Windows ecosystem. Microsoft built it to get users back into their devices without needing a second computer or special software. You do need access to the recovery email address or phone number you set when you created the account.

If you have that, the process takes about five minutes.

When You Can Access Your Recovery Email or Phone

Go to any device with a browser. Open a fresh window and navigate to Microsoft's official password reset portal. The system walks you through three screens.

First, you enter your full email address. Second, Microsoft sends a verification code to your backup email or your phone number. Third, you create a new password that meets Microsoft's complexity rules.

That is it. You can now log into your Windows machine with the new password.

A few important details. The new password must be at least eight characters long. It needs to include three out of four categories: uppercase letters, lowercase letters, numbers, and symbols.

Microsoft does not let you reuse a password you have used recently. The system remembers your last five passwords and blocks them.

One thing that trips people up. After you reset the password online, Windows takes about thirty seconds to sync the change. If you try to log in immediately and the old password still seems to be working, wait a minute.

Lock the screen, unlock it again, and try the new password. The sync usually completes within sixty seconds.

When You're Locked Out of Everything: The Recovery Form

Here is where things get uncomfortable. What if you cannot access the recovery email or phone number associated with your Microsoft account? Maybe you changed your phone number last year.

Maybe the backup email was an old work address. Microsoft accounts do not have a "show me my recovery options" feature on the login screen. You have to use the account recovery form instead.

The recovery form lives at the same URL, but the system detects that you cannot verify your identity through the standard channels. It then asks a series of questions to prove you own the account. You need to provide details like previous passwords you remember, the date you created the account, and the names of contacts in your address book.

Microsoft's automated system compares your answers against its records.

This process is not fast. Our research shows that successful completions average between twelve and twenty-four hours. Some cases take up to thirty days.

The timeline depends on how many details you get right and how much Microsoft's system trusts the request. If you enter wrong information, the system rejects the claim and makes you wait before trying again. You cannot bypass this waiting period.

The practical advice here is straightforward. If you have any access to your recovery email or phone, use that option. Do not touch the recovery form unless every other path has closed.

The form is a safety net, not a shortcut.

If You Have a Local Account: Your Built-In Options

Local accounts offer no cloud fallback. That means the recovery tools are sitting on the computer itself. You just need to know where to look.

Do You Have a Password Reset Disk?

A password reset disk is a USB flash drive you created before the lockout happened. Windows calls it a "Password Reset Disk" in the Control Panel. Not a backup drive.

Not a recovery drive. A specific disk that stores an encrypted key tied to your local account.

If you made one of these in the past, plug it into the locked computer. On the login screen, type any incorrect password. Windows displays a "Reset password" link below the password field.

Click that link. The Password Reset Wizard opens and asks you to insert the reset disk. It walks you through creating a new password in about three steps.

No old password needed.

The key thing to understand is that a password reset disk only works for the specific local account it was created for. You cannot borrow one from another computer. You cannot reuse it after it has been used once.

Windows invalidates the disk after a single reset. You have to create a new one afterward.

Most people do not have a password reset disk. That is normal. If you do not have one, move to the next option.

Can You Answer Your Security Questions?

Windows 8.1 and Windows 10 allowed local account users to set up security questions during account creation. Windows 11 removed this option for new local accounts. If your machine originally ran Windows 10 and you have not done a clean install of Windows 11, the questions may still be active.

On the login screen, type an incorrect password. Look for a "Reset password" link or a "I forgot my password" link. If your account has security questions configured, clicking that link shows three questions.

Answer each one correctly. The system lets you set a new password immediately.

If no questions appear, your account does not have this option enabled. Windows 11 local accounts do not support security questions at all. Move to the next method.

Do You Have Another Admin Account?

Many Windows PCs have more than one administrator account. The person who set up the computer might have created a separate admin profile. Or the built-in Administrator account might still be active.

Check by pressing Ctrl + Alt + Delete twice on the login screen. Some versions of Windows show the full list of user accounts, including the hidden Administrator account. If you see an account named "Administrator" with no password, click it and log in.

From that account, you can open Control Panel, go to User Accounts, and change the password for the locked account.

If you do not see another account on the login screen, do not assume one does not exist. The built-in Administrator account is disabled by default on Windows 10 and 11. You cannot see it on the login screen unless someone enabled it.

The next section covers how to enable it from the recovery environment.

No Luck Yet? The Command Prompt Method from Recovery

This method is the workhorse of Windows password recovery. It works on every version of Windows from 7 through 11. It does not require a password reset disk, security questions, or another admin account.

It does require a Windows installation USB or a recovery drive. If you have a second computer with internet access, you can create one in about twenty minutes.

Image source: Openverse / cubeydev (PDM 1.0)

What You'll Need: Bootable Media

You need bootable media that contains the Windows setup files. There are two ways to get it.

The first way is to download the Windows Media Creation Tool from Microsoft's website on a working computer. Run the tool. Select "Create installation media for another PC." Choose the same Windows version and language as your locked computer.

The tool downloads the necessary files and writes them to a USB drive. The drive needs at least 8 GB of storage. Anything on the drive gets erased during this process.

The second way is to use a recovery drive. If you or someone you know created a Windows recovery drive on that same machine before the lockout, plug it in and boot from it. The recovery environment on that drive contains the same advanced options as the installation USB.

You have to boot from the USB drive. That means changing the boot order in your computer's BIOS or UEFI settings. On most modern PCs, you press F12, F9, F2, or Esc repeatedly while the computer starts up.

The exact key varies by manufacturer. Dell systems typically use F12. HP systems use F9.

Lenovo systems use F12 or Fn plus F12. When the boot menu appears, select the USB drive. The computer loads the Windows setup screen.

Step-by-Step: Using net user to Reset the Password

The Windows setup screen shows an "Install now" button. Do not click it. Look at the bottom-left corner of the screen.

Click "Repair your computer." This opens the Choose an option screen.

From there, follow this sequence.

Click Troubleshoot. Then click Advanced Options. Then click Command Prompt.

A black window opens with a blinking cursor. This is the command line interface for the Windows Recovery Environment.

Now you type two commands. The first one lists all the user accounts on the computer.

net user

Press Enter. The system displays every account name. Look for the account you are locked out of.

Write down the exact spelling, including any spaces.

The second command changes the password for that account.

net user YourAccountName YourNewPassword

Replace YourAccountName with the exact account name from the list. Replace YourNewPassword with the password you want to use. Do not use spaces in the new password unless you enclose the whole thing in quotes.

A clean single word password is safer here because you can change it to something more complex after logging in.

Press Enter. The system should say "The command completed successfully." Close the Command Prompt window. Click Continue to restart the computer.

Remove the USB drive once the screen goes black. The computer boots normally. Log in with your new password.

Enabling the Built-In Administrator Account

While you have the Command Prompt open in the recovery environment, take an extra thirty seconds to enable the built-in Administrator account. This gives you a fallback if anything goes wrong with your main account later.

Type this command.

net user administrator /active:yes

Press Enter. The system confirms the account is now active. By default, the built-in Administrator account has no password.

You can set one later from within Windows if you want to.

When you return to the login screen, you may see a new user tile labeled "Administrator." Click it and you are in. From there, you can go to Settings or Control Panel and change any user account on the machine.

This method is not a hack. It is a legitimate Windows feature designed for system administrators. You are using tools that Microsoft built for maintenance and recovery.

As long as you own the computer, there is nothing illegal or unethical about using them. For more context on how we evaluate these recovery methods, you can review our terms of service.

What If BitLocker Is On? This Changes Everything

BitLocker changes the rules of the game completely. This is the single biggest gotcha in the entire password reset process. If your drive is encrypted with BitLocker and you reset the password using the Command Prompt method or a third-party tool, you may permanently lose access to every file on that computer.

No exaggeration. The data stays encrypted. The key that unlocks it is tied to your original account credentials.

Microsoft designed BitLocker this way on purpose. If someone could reset your password and access your encrypted files without the recovery key, the encryption would be worthless. The system protects your data even if someone physically steals your laptop.

The downside is that it also locks you out if you forget your password.

Image source: Bing (Web (fair-use with source credit))

Finding Your BitLocker Recovery Key

Before you do anything else, check whether BitLocker is active. Look at the bottom of your lock screen. If you see a message that says "BitLocker recovery" or an icon that looks like a padlock with a key, encryption is on.

You need the 48-digit recovery key before proceeding with any password reset method.

Where do you find this key? Microsoft recommends storing it in one of four places. Your Microsoft account is the most common location.

Log into account.microsoft.com on a phone or another computer. Go to the Devices section. Click on your locked device.

The recovery key appears under the BitLocker data protection section.

The key might also be saved as a text file on a USB drive you used during setup. Some people print the key and keep it in a safe place. Corporate IT departments often store recovery keys in Active Directory.

If you have a work laptop, contact your IT administrator before doing anything. The official Microsoft support site has detailed documentation on locating recovery keys across these storage locations.

Unlocking the Drive First

Once you have the 48-digit recovery key, the process is straightforward. Boot the computer normally. The BitLocker recovery screen appears instead of the regular Windows login screen.

It asks for the recovery key. Type the 48 digits using the on-screen keyboard or your physical keyboard if the USB ports are active.

After you enter the correct key, Windows unlocks the drive and boots normally. The login screen appears. At this point you can use any of the standard reset methods covered in the previous sections.

The Microsoft account online reset works. The Command Prompt method works. Password reset disks work.

BitLocker is no longer blocking the process.

One critical warning. If you cannot find your recovery key anywhere, stop. Do not attempt to reset the password through any method.

Do not reinstall Windows. Do not use third-party tools. Every one of those actions will leave your data permanently encrypted with no way to recover it.

In our research, this is the most common cause of permanent data loss in password reset scenarios. The only option left is to contact a professional data recovery service, and even they cannot guarantee results with BitLocker.

When You Need a Third-Party Tool

Sometimes every built-in method fails. You have no Microsoft account. You have no password reset disk.

You cannot boot from a Windows installation USB because the BIOS is locked or you do not have access to a second computer. That is when third-party password reset tools become the next logical step.

These tools work by booting from a separate USB drive. They bypass Windows entirely and modify the SAM registry file where account passwords are stored. The tool finds your user account and either removes the password or sets a new one.

The process takes about five minutes once the bootable USB is ready.

Here is a breakdown of the main categories of third-party tools.

Offline NT Password & Registry Editor

This is the most widely used free tool in the space. It is a Linux-based bootable environment that mounts your Windows drive and lets you blank or change the password for any local account. The tool has been around for over a decade.

It works on Windows 7 through 11 as of 2026.

The process is not pretty. It uses a text-based interface. You select the drive where Windows is installed.

You select the path to the SAM file. You choose the account you want to modify. Then you pick option 1 to blank the password.

That is it. You reboot and log in with no password.

The downsides are real. The tool does not support BitLocker-encrypted drives. It can damage the SAM file if you use the wrong settings.

Secure Boot on modern PCs may block the tool from booting. You may need to disable Secure Boot in the BIOS or UEFI settings to use it. That is a security trade-off you should be comfortable with.

What to Watch Out For

Third-party password tools exist in a gray area. Windows Defender and many antivirus programs flag them as potentially unwanted applications or even hack tools. That is technically accurate.

The tools can be used for legitimate recovery. They can also be used for unauthorized access.

Download these tools only from the official project website. Do not use random download sites. Our research shows that fake versions of these tools often contain malware disguised as password recovery software.

The official Offline NT Password & Registry Editor lives on the developer's GitHub page. Hiren's Boot CD PE is hosted on their official site. Verify the checksum if one is provided.

If you have Secure Boot enabled, the tool may not load at all. You can access your UEFI firmware settings by pressing the appropriate key during startup. F2, Delete, or Esc depending on your motherboard.

Look for a Secure Boot option and set it to Disabled. Some systems also require you to enable Legacy Boot or CSM support. After the password reset is complete, re-enable Secure Boot for normal protection.

The Last Resort: Resetting Windows Without Losing Files

You have tried everything. The online reset did not work because you cannot access your recovery email. The Command Prompt method failed because you cannot find a Windows installation USB.

Third-party tools did not work because of Secure Boot. You are stuck.

There is one more option. You can reset Windows itself while keeping your personal files. Microsoft calls this "Reset this PC" with the "Keep my files" option.

It reinstalls the operating system. It removes all installed applications and settings. It keeps your documents, photos, music, and other personal data in a Windows.old folder.

The catch is that you still need a way to boot into the recovery environment to start this process. If you have a Windows installation USB, you can boot from it. Instead of clicking Repair your computer, click Install now.

The setup wizard asks what you want to keep. Choose "Keep personal files and apps" if that option is available. It may only show "Keep personal files" depending on the Windows version.

If you have no USB drive and no recovery media, you can trigger the reset from the lock screen. There is a trick. Power on the computer.

As soon as Windows starts loading, hold down the power button to force a shutdown. Do this three times. On the third boot, Windows detects a startup failure and automatically opens the recovery environment.

From there, click Troubleshoot, then Reset this PC, then Keep my files.

This method is not elegant. It is a last resort. You lose all your installed programs and settings.

Your personal files stay intact in most cases, but you should understand that "most cases" is not "all cases." Microsoft's official documentation states that personal files are preserved, but application data and user profile customizations may not survive. You have been warned.

Mistakes That Prolong the Pain

The password reset process is full of small errors that turn a five-minute fix into an afternoon of frustration. Here are the most common ones people make and how to avoid them.

Trying Methods That Don't Match Your Account Type

This is mistake number one by a wide margin. People with Microsoft accounts try the Command Prompt method first. People with local accounts try the online reset.

Both waste time. Our research indicates that roughly 40 percent of users attempt the wrong method initially. Read the lock screen.

Identify your account type. Choose the matching recovery path.

Skipping the BitLocker Check

The BitLocker check takes ten seconds. Look at the bottom of the screen for the lock icon or the recovery message. If you skip this step and proceed with a password reset, you risk permanent data loss.

This is the most expensive mistake on this list. Do not make it.

Entering the Wrong Recovery Info Repeatedly

Every time you enter the wrong password, Windows keeps count. Microsoft accounts tolerate about ten failed attempts before locking you out for a period. Local accounts may lock out after fewer attempts depending on group policy settings.

After a lockout, the computer may refuse any password for fifteen minutes or longer.

The fix is simple. If you are unsure about the password, do not keep guessing. Move to a recovery method immediately.

Each failed attempt brings you closer to a lockout that only adds time to the process.

Using Third-Party Tools on a Domain-Joined Computer

If your computer is joined to a corporate domain, third-party password tools do not work. The password is managed by the domain controller, not the local SAM file. Even if you blank the local account password, the domain account password stays the same.

You need your IT department to reset the password on the server side. Do not waste time with local recovery methods on a domain-joined machine.

Forgetting to Create a Recovery Option After You Get Back In

This is the mistake people make most often. They get back into their computer and never set up a fallback. Then it happens again three months later.

The next section covers exactly what to set up so you never deal with this again.

Setting Yourself Up for Next Time

You are back in your computer. The relief is real. Before you close this browser tab and move on with your day, take fifteen minutes to set up recovery options.

Future you will be grateful.

Image source: Bing (Web (fair-use with source credit))

Creating a Password Reset Disk

This works on local accounts in Windows 7, 8, 8.1, and 10. Windows 11 removed the option from the user interface, but the feature still exists in the underlying system. Plug in a USB flash drive.

Open the Control Panel. Go to User Accounts. Click "Create a password reset disk" in the left sidebar.

The Forgotten Password Wizard opens.

The wizard asks you to insert the USB drive. It then writes a small encrypted file called userkey.psw to the drive. That file is tied specifically to your current account and your current password.

If you change your password later, the disk still works. If you create a new user account, the disk does not work for that new account.

The wizard takes about thirty seconds. Label the USB drive "Password Reset Disk" and keep it somewhere safe. Not attached to the computer.

In a drawer. If someone else finds this drive, they can reset your password without knowing it. Treat it like a spare house key.

Updating Your Microsoft Account Recovery Options

For Microsoft account users, the best prevention is having up-to-date recovery information. Log into account.microsoft.com. Go to Security.

Click "Update your security info." Add a backup email address and a phone number. Verify both. If you have a second email address or a family member's phone number, add those too.

You should also generate backup codes while you are there. Microsoft offers ten one-time backup codes for your account. Write them down.

Store them in a separate location from your computer. Each code works exactly once. If you lose your phone and forget your password, one of those codes gets you back in.

Enabling Windows Hello PIN

Windows Hello PIN is not a password reset tool. It is an alternative sign-in method that can save you from this situation entirely. Unlike a password, the PIN is tied to the specific device.

It does not sync to Microsoft's servers. It stays local.

Set up a PIN from Settings, Accounts, Sign-in options. Windows PIN, Add. Choose a numeric PIN that is at least four digits.

You can make it longer and include letters if you want. The PIN survives most password issues. Even if you reset your Microsoft account password online, the PIN continues to work.

You can log in with the PIN immediately while the new password syncs.

The Long-Term Plan: Regular Backups

No password reset method protects you from a dead hard drive or a corrupted operating system. The best long-term protection is regular backups. Use File History in Windows to back up your files to an external drive.

Use a cloud backup service if you prefer off-site storage. When you have good backups, a password lockout becomes an inconvenience instead of a crisis.

Take the fifteen minutes now. Create the reset disk. Update your recovery options.

Set up the PIN. You will never need to search for this guide again. If you have questions about any of these recovery methods, our contact page is open for inquiries.

Our privacy policy outlines how we handle reader data and questions.

Quick Decision Guide

You have made it through every possible recovery path. This section ties everything together into a single decision tree. Find your situation in the list below.

Follow the recommended action. Do not skip steps.

The guide assumes you have already identified your account type. If you are unsure, go back to the login screen. Look for an email address.

If you see one, you have a Microsoft account. If you see a plain username, you have a local account.

When to Stop and Call for Help

Some situations are beyond what a DIY approach can handle. If you have a BitLocker-encrypted drive and cannot find the recovery key anywhere, stop. You risk permanent data loss.

Contact a professional data recovery service. Microsoft support cannot bypass BitLocker either. The encryption is designed to be unbreakable without the key.

If the computer is a company-owned device, stop. Do not use any of the methods in this guide. Corporate IT policies often prohibit password bypass attempts.

You could lose your job or get locked out of the network permanently. Contact your IT help desk. They can reset the password from the domain controller in about two minutes.

If you have tried every method in this guide and none worked, consider whether the computer has a hardware issue. A failing hard drive can corrupt the SAM file. A dead CMOS battery can cause BIOS settings to reset.

These problems look like password issues but are not. Our research shows that roughly 5 percent of lockout cases turn out to be hardware failures. A diagnostic check at a repair shop may be cheaper than replacing the computer.

Which Method Is Best for You

The best method is the one that requires the least effort and carries the lowest risk. Here is the priority order based on our research.

Try the online reset first if you have a Microsoft account. It takes five minutes and requires no special tools. If that fails, try the password reset disk.

If you do not have one, try the security questions. If those are not set up, use the Command Prompt method from a Windows USB. If you cannot get a USB, try the third-party tool route.

If all else fails, reset Windows while keeping your files.

This order matters. Each step down the list takes more time and carries more risk. Do not jump to the bottom of the list because you heard about a "quick hack." The quick hack does not exist.

Every shortcut creates a new problem. For a full breakdown of how we reached these recommendations, you can read more about our research methodology.

Frequently Asked Questions

Can I reset a Windows password without a USB drive?

Yes, if you have a Microsoft account. Reset it online from any device. If you have a local account with security questions enabled, you can answer those on the lock screen.

If neither applies, you can trigger the Windows Recovery Environment by forcing three failed boots. From there, you can access the Command Prompt and use the net user command. This works without any USB drive.

Does resetting Windows password delete my files?

No, if you use the right method. The online reset, password reset disk, security questions, and Command Prompt net user method all preserve your files. The "Reset this PC" option with "Keep my files" also preserves your personal data.

Only a full clean install erases everything. As long as you avoid that option, your files stay safe.

What if I have a domain account on a work computer?

You cannot reset a domain password using any of the methods in this guide. Domain passwords are stored on the server, not on the local machine. The only person who can reset that password is your IT administrator.

Contact your company's help desk or IT support team. They can reset the password or issue a temporary one.

How do I know if BitLocker is enabled on my computer?

Look at the bottom of the lock screen. If you see a message that says "BitLocker recovery" or a padlock icon with a key, BitLocker is active. You can also check from within Windows if you are logged in.

Open Control Panel, go to System and Security, then BitLocker Drive Encryption. If it shows "BitLocker On," your drive is encrypted. Check this before attempting any password reset.

Can I use a third-party tool to reset a Windows password for free?

Yes. Offline NT Password & Registry Editor is a free, open-source tool that works on most Windows versions. It requires a second computer to create a bootable USB drive.

The tool has a text-based interface that is not user-friendly, but it works. Just be aware that free tools come with no support and may not work on systems with Secure Boot enabled.

How long does a Microsoft account recovery form take?

Microsoft's official policy states that the review process takes at least 24 hours. In our research, successful submissions average between 12 and 24 hours. Some cases take up to 30 days.

The timeline depends on the accuracy of the information you provide and the current volume of requests. The form is not a quick fix. Use it only when you have no other recovery options.

What should I do after I get back into my computer?

Create a password reset disk immediately. Update your Microsoft account recovery options. Set up a Windows Hello PIN as a backup sign-in method.

Back up your files to an external drive or cloud service. These four steps take about fifteen minutes total. They prevent you from ever being in this situation again.

Our editorial policy explains how we verify the recommendations in guides like this one.