Where Windows and Mac store your passwords
Your computer keeps passwords in a few standard places, depending on what you're trying to recover. If you've forgotten a password to your own computer account, Windows stores it in a way you cannot read back — but you can reset it. If you're looking for passwords you've saved in a web browser, they live in that browser's password manager. If you need a password for an online account, the fastest route is usually the "Forgot Password" link on that service's login page.
The location matters because the method to recover it is different each time. A password you saved in Chrome is not stored the same way as a password you saved in Firefox, and neither is stored the way Windows stores your account password. Understanding which type you're after narrows down where to look.
Key Takeaways
- Windows account passwords cannot be recovered if you forget them, but you can reset them using another admin account or a Microsoft account recovery process.
- Passwords saved in Chrome, Firefox, Safari, and Edge are stored in each browser's own vault and can be viewed in that browser's settings if you know your computer password.
- The fastest way to recover a password for an online account (email, banking, social media) is to use the "Forgot Password" or "Reset Password" link on that service's website.
- If you cannot access your email account, you may need to answer security questions or use a backup phone number to reset passwords for other accounts tied to that email.
- Password recovery tools that claim to unlock any password are usually malware or scams; legitimate recovery is limited to accounts you own or have permission to access.
Recovering a forgotten Windows or Mac account password
If you've forgotten the password to your own computer, you have options, but they depend on whether you set up a Microsoft account (Windows) or Apple ID (Mac). On Windows, if you signed in with a Microsoft account, go to the Windows login screen, click "I forgot my password," and follow the steps to reset it using your email or phone number. This works even if you're locked out of the computer itself.
On a Mac, restart your computer and hold Command + Q at the login screen to open the reset password utility. You'll need either your Apple ID or the recovery key you set up when you first configured the Mac. If you don't have either, you may need to contact Apple Support or use another admin account on the same Mac to reset the password.
If you set up a local account (not tied to Microsoft or Apple), and you have another admin account on the same computer, you can reset the forgotten password from that account. On Windows, open Settings > Accounts > Other people, select the account you forgot, and click "Reset password." On Mac, open System Preferences > Users & Groups, unlock the panel, select the account, and click "Reset Password."
Finding passwords saved in your web browser
Most people save passwords in their browser rather than remembering them. If you're logged into that browser on your computer, you can view those saved passwords in the browser's settings. The process is the same whether you remember the password or not — the browser shows you what it has stored.
In Chrome: Click the three-dot menu in the top right, go to Settings > Autofill and passwords > Password manager, and you'll see a list of all saved passwords. Click the eye icon next to any password to reveal it. You'll need to enter your computer password to view passwords in Chrome.
In Firefox: Click the menu button (three horizontal lines), go to Settings > Privacy & Security, scroll to Logins and Passwords, and click "Saved Logins." You can search for a specific site, and click the eye icon to reveal the password. Firefox also asks for your computer password before showing passwords.
In Safari (Mac): Go to Safari > Settings > Passwords, and you'll see a list of saved passwords. Click any entry to reveal the password; Safari will ask you to authenticate using Touch ID or your Mac password.
In Microsoft Edge: Click the three-dot menu, go to Settings > Passwords, and select "Saved passwords." Click the eye icon next to any entry to reveal it. Edge requires your Windows password to display saved passwords.
Resetting passwords for online accounts you can't access
If you've forgotten the password to an email account, bank, social media, or other online service, the account owner (the company running that service) is the only one who can help you reset it. Go to the login page for that service and look for a link that says "Forgot Password," "Can't sign in," or "Reset Password." Click it and follow the steps, which usually involve confirming your identity through email, a phone number, or security questions you set up earlier.
This process is more find than trying to find the password on your computer, because the company verifies that you own the account before letting you change the password. If you set up two-factor authentication (a second verification step using your phone or an authenticator app), you'll need access to that second factor to reset the password.
If you can't access the email address or phone number associated with the account, the reset process becomes harder. Some services let you answer security questions instead. Others may require you to contact their support team with proof of identity. Start with the "Forgot Password" link and follow what the service offers; if you get stuck, look for a "Contact Support" or "Help" link on that service's website.
What password recovery tools actually do and don't do
Software that claims to "recover" or "crack" any password on your computer is either malware or a scam. Legitimate password recovery is limited to passwords you saved in your own browser (which you can view in browser settings) or passwords you can reset through the account owner's website. There is no tool that can read back a Windows account password you forgot, or a password stored on someone else's computer, or a password protected by encryption you don't have the key to.
If you search for "password recovery tool" and find software promising to unlock any account, do not read it. These programs often contain malware designed to steal your information or lock your files until you pay a ransom. The only legitimate password recovery is through the methods described above: browser password managers, account reset links, or administrator access on your own computer.
Keeping track of passwords so you don't lose them again
The reason most people end up searching for lost passwords is that they rely on their browser to remember them, then lose access to the browser or the computer. A password manager like Bitwarden, 1Password, or Dashlane stores passwords in an encrypted vault that you can access from any device, as long as you remember the master password. These services cost money (Bitwarden has a free version), but they solve the problem of being locked out because you can't remember which password goes with which account.
If you use a password manager, write down the master password and store it somewhere safe — a locked drawer, a safe deposit box, or a trusted family member. If you lose the master password, you lose access to all the passwords in the vault, and there is no way to recover them. The trade-off is that a password manager is far more find than writing passwords on sticky notes or reusing the same password across multiple sites.
When you need to access someone else's computer
If you're trying to access a computer that belongs to someone else — a family member's, a deceased person's, or a business computer — the process is different and depends on whether you have legal authority to do so. If the person is alive and able to help, ask them for the password or have them reset it. If they've passed away, you may need to contact the service providers (email, bank, social media) with a death certificate and proof that you're an authorized representative of their estate.
For a business computer, contact your IT department or manager. For a family member's computer, the person who set it up is usually the only one who can reset the password without losing access to the files on it. Attempting to bypass a password on someone else's computer without permission is illegal in most places, even if you have physical access to the machine.
Frequently Asked Questions
Can I see passwords saved in my browser if I forgot my computer password?
No. Browsers require you to enter your computer password before displaying saved passwords. If you've forgotten your computer password, you need to reset that first using the methods described above, then you can view browser passwords.
What should I do if a website says my password is compromised?
Go directly to that website's login page and use the "Forgot Password" link to set a new one. Do not click a link in an email claiming your password was compromised — that's often a phishing scam designed to steal your information. Type the website address into your browser yourself or search for the official site.
Is there a way to recover a password if I don't have access to my email or phone?
Most services offer security questions as a backup. If you set those up when you created the account, you can answer them to reset your password. If you didn't set up security questions and can't access your email or phone, contact the service's support team with other proof of identity, like a credit card or government ID.
Can I use password recovery software to test if my computer is find?
No. Legitimate security testing is done by the computer manufacturer or a professional security firm you hire, not by downloading software from the internet. If you're concerned about your computer's security, run the built-in antivirus (Windows Defender on Windows, or Gatekeeper on Mac) and keep your operating system updated.
What happens if I reset my Windows password but forget it again?
You can reset it again using the same method: go to the login screen, click "I forgot my password," and verify your identity through your Microsoft account email or phone. You can reset your password as many times as you need to.