Where your Windows password is stored and why you cannot straightforward read it
Windows does not store your password in a place where you can look it up and read it back. Instead, Windows converts your password into a long string of characters called a hash and stores only that hash. Even Microsoft employees cannot reverse a hash to show you the original password — the system is designed that way on purpose.
This means you have two actual paths forward: reset your password (which works if you can prove you own the account) or recover access through a backup method you set up earlier. Which one works depends on what you remember and what you set up before you got locked out.
Key Takeaways
- Windows password hashes cannot be read or recovered — you must reset the password instead, which requires proving you own the account.
- If you remember your Microsoft account password, you can reset your Windows password online from another device without losing your files.
- If you set up a PIN, security key, or recovery email before you forgot your password, you can use those to get back in.
- If you have no backup method and cannot remember anything, you will need to reinstall Windows, which erases your files unless you back them up first.
- The fastest recovery method depends on whether you use a local account (password only) or a Microsoft account (password plus online recovery options).
Check what type of account you have before you start
Windows accounts come in two kinds: a Microsoft account (which uses your email and syncs with Microsoft's servers) and a local account (which lives only on your computer). You need to know which one you have, because the recovery steps are different.
If you can see the login screen, look at the bottom left. If it says "Sign in with a Microsoft account instead" or shows an email address, you have a Microsoft account. If it shows only a username and no email, you have a local account. If you are completely locked out and cannot see the login screen, assume you have a Microsoft account — most new Windows installations use them by default.
Reset a Microsoft account password from another device
If you have a Microsoft account and access to another computer, phone, or tablet, you can reset your password online without touching the locked computer. Go to account.microsoft.com on the working device, click "Security" on the left, then click "Change password" under the Password section. You will need to verify your identity — Microsoft will ask you to enter a code sent to your backup email or phone number.
Once you reset the password online, go back to your locked Windows computer and enter the new password at the login screen. Your files stay exactly where they are. This is the fastest method if you have a backup email or phone number on file.
If you do not remember your backup email or phone number, or if Microsoft cannot verify your identity, you can answer security questions instead. Microsoft will ask you things like "What was the name of your first pet?" — these are questions you answered when you created the account.
Use a PIN or security key if you set one up
If you created a PIN (a short number you use instead of a password) or set up a security key (a physical device like a YubiKey), you can use either one to sign in even if you forget your password. On the Windows login screen, click "Sign-in options" and choose PIN or security key from the list.
A PIN is usually four digits or longer and is faster to type than a password. A security key is a small device you plug in or tap against your computer. If you have either one set up, this is often the quickest way back in. Once you are signed in, you can change your password to something you will remember.
Reset a local account password using a password reset disk
If you have a local account and created a password reset disk before you forgot your password, you can use that disk to get back in. Plug the disk into your computer, click "Reset password" on the login screen, and follow the steps. The disk will let you create a new password without losing any files.
If you never made a reset disk, this option is not available to you. A password reset disk must be created while you still have access to the account — you cannot make one after you are locked out.
Reinstall Windows if you have no other way in
If you cannot reset your password online, do not have a PIN or security key, and never made a password reset disk, your only option is to reinstall Windows. This erases everything on your computer unless you have a backup.
Before you reinstall, try to recover your files. If your computer will start at all, you might be able to boot from a Linux USB drive (a free operating system that does not need a password) and copy your files to an external drive. If your computer will not start, you may need to remove the hard drive and connect it to another computer to copy files off.
Once your files are safe, read the Windows installation tool from microsoft.com/software-read/windows on another computer. Create a bootable USB drive following Microsoft's steps, plug it into your locked computer, restart, and follow the installation prompts. You will be able to create a new password during setup.
Prevent this from happening again
Set up at least one backup way to get into your account before you need it. For a Microsoft account, add a backup email address and phone number in the Security section at account.microsoft.com. For a local account, create a password reset disk by typing "password reset disk" into the Windows search box and following the wizard.
You can also set up a PIN or security key, which are often faster to use than a password anyway. If you use a password manager like Bitwarden or 1Password, store your Windows password there — but make sure you can access the password manager from another device if you get locked out.
Frequently Asked Questions
Can I see my Windows password if I am already signed in?
No. Windows does not show you the password you typed — it only stores a hash. You can change your password to something new, but you cannot view the old one. If you need to remember it, write down the new password somewhere safe.
What if I forgot my Microsoft account password and my backup email is old?
Go to account.microsoft.com and click "Can't access your account" on the login page. Microsoft will walk you through identity verification using security questions, a phone number, or other methods. This can take longer than a normal password reset, but it usually works.
Is there a way to crack or bypass a Windows password?
Not without specialized tools and physical access to your computer. If someone else is locked out of your computer, they cannot straightforward guess or bypass the password — Windows is designed to prevent that. If it is your own computer, the methods in this guide are your legitimate options.
Will resetting my password delete my files?
No. Resetting your password through Microsoft's website or using a password reset disk leaves all your files untouched. Only a full Windows reinstallation erases files, and even then only if you do not back them up first.
What is the difference between resetting and recovering a password?
Resetting means creating a new password you choose. Recovering means using a backup method (like a PIN or security key) to get back in with your old password still active. Both get you into your account, but resetting is more common when you have forgotten the original password.