Where Windows stores password hints and recovery options

Windows does not store your password anywhere you can retrieve it — by design, for security. What it does store is a password hint you created when you set up your account, and recovery methods like a phone number or backup email address. These are your actual tools for getting back in.

On the Windows login screen, if you enter a wrong password, you will see a link that says "I forgot my password" or a question mark icon. Click that, and Windows will show your password hint if you created one. The hint is meant to jog your memory, not to be the password itself — so if your hint is "my dog's name," you would type the actual name, not the word "dog."

If you do not remember the password even after seeing the hint, Windows can send a reset code to a recovery email address or phone number you registered. This is the most common path back in, and it works whether you are on a home computer or a work machine.

Key Takeaways

  • Windows password hints appear on the login screen when you click "I forgot my password," but they are reminders, not the actual password.
  • Recovery email addresses and phone numbers are the fastest way to reset a forgotten password — Windows sends a code to one of these.
  • If you set up a local account with no recovery email, you will need a password reset disk (created before you forgot the password) or another admin account on the same computer.
  • Work or school accounts linked to Microsoft 365 or Active Directory have different recovery paths than home accounts, and your IT department may need to help.
  • Third-party password recovery tools exist but require you to restart your computer and carry real security risks.

Using a recovery email or phone number to reset your password

This is the fastest method if you set up a recovery email or phone when you created your Windows account. Go to the Windows login screen, click "I forgot my password," and Windows will ask which recovery method you want to use — email or phone.

Choose the one you still have access to. Windows will send a code to that email or phone number. Enter the code on the next screen, then create a new password. You will be logged in within a few minutes. This works for both Microsoft accounts (which use your email address to sign in) and local accounts (which use a username).

If you no longer have access to the recovery email or phone number — for example, you changed phone carriers or closed that email — you will need to use a different method. Microsoft has a separate account recovery page at account.microsoft.com where you can verify your identity with other information and request a reset, but this process takes longer and may require you to answer security questions or provide a government ID photo.

Resetting a password with a password reset disk

If you created a password reset disk before you forgot your password, you can use it to create a new one without needing a recovery email or phone. This disk is a USB drive or external drive you made yourself using Windows' built-in reset disk tool.

Insert the disk into your computer, go to the Windows login screen, and click "I forgot my password." Windows will detect the disk and let you create a new password using it. The disk itself does not contain your password — it contains a key that lets Windows let you in to create a new one.

If you did not create a reset disk before you forgot your password, you cannot create one now. This is a security feature: if you could make a reset disk after forgetting your password, anyone with physical access to your computer could do the same.

Using another admin account on the same computer

If your computer has a second admin account that you can still log into, you can reset the forgotten password from there. Log into the second account, then open Settings and go to Accounts > Other people. Find the account with the forgotten password and click "Reset password." Windows will let you set a new password without needing the old one.

This only works if the second account has admin rights. If you are not sure whether an account is an admin, try this method — Windows will tell you if the account does not have permission.

If your computer has no other admin account you can access, this method is not available to you.

Password recovery for work or school accounts

If you sign into Windows with a work or school email address — usually because your employer or school manages the computer — the password recovery process is different. These accounts are often linked to Microsoft 365 or Active Directory, which means your IT department controls password resets, not you.

Go to the Windows login screen and click "I forgot my password." You will be directed to your organization's password reset page, which may ask you to verify your identity using a phone call, text message, or security questions. Some organizations let you reset it yourself; others require you to contact the help desk.

If you cannot reach the reset page or do not know your organization's process, contact your IT support team or help desk directly. They can verify who you are and reset your password for you, usually within a few hours.

Third-party password recovery tools and their risks

Software tools exist that claim to reset Windows passwords without a recovery email or admin account. These tools work by restarting your computer into a special mode where they can modify Windows system files. They do technically work, but they carry serious downsides.

First, they require you to restart your computer and boot from a USB drive or CD, which means you need to know how to access your computer's boot menu — a step that confuses many people. Second, some of these tools are bundled with malware or spyware, so downloading from the wrong source can infect your computer. Third, if your computer is encrypted with BitLocker (a Windows security feature), these tools often cannot bypass it, and you will be stuck anyway.

These tools are a last resort only — use them if you have no recovery email, no reset disk, and no other admin account. If you do use one, read only from well-known sources like Offline NT Password Editor, and scan the downloaded file with antivirus software before running it.

Preventing password loss in the future

The best time to prepare for a forgotten password is before you forget it. When you set up a Windows account, add a recovery email address and phone number in Settings > Accounts > Security options. Write down or save these somewhere safe — if you lose access to them later, you lose your fastest recovery path.

Create a password reset disk and store it in a safe place, like a drawer at home or a safe deposit box. You can create one by going to Settings > Accounts > Sign-in options > Password > Create a password reset disk. This disk will work even years later, as long as you do not change your password after creating it.

If you use a password manager like Bitwarden, 1Password, or KeePass, store your Windows password there along with your other passwords. A password manager is encrypted and backed up, so you can recover your Windows password from any device if you forget it.

Frequently Asked Questions

Can I see my Windows password if I am already logged in?

No. Windows does not display passwords anywhere, even to the person who set them. If you are logged in and want to change your password, go to Settings > Accounts > Sign-in options > Password and click "Change." You will need to enter your current password to prove you are authorized to change it.

What if I forgot my Microsoft account password, not my Windows password?

If you sign into Windows with a Microsoft account (your email address), forgetting that password is the same as forgetting your Windows password. Go to account.microsoft.com on any device, click "Can't access your account," and follow the recovery steps. You can then sign back into Windows with the new password.

Will resetting my password delete my files?

No. Resetting your password only changes how you sign in — it does not touch your documents, photos, or programs. Everything stays on your computer. If you use a local account and reset it from another admin account, your files remain in your user folder and you can access them after signing in with the new password.

Can I reset a password on someone else's computer?

Not without their permission and access to their recovery email, phone, or reset disk. Windows is designed to prevent this — if it were straightforward to reset someone else's password, anyone with physical access to a computer could take it over. If you need to reset a password on a computer you own but cannot access, contact Microsoft Support or your device manufacturer for help proving ownership.

What does "I forgot my password" do if I never set up recovery options?

Windows will show your password hint if you created one. If the hint does not help you remember, and you have no recovery email, phone, or reset disk, your options narrow to using another admin account on the same computer or using a third-party recovery tool. This is why setting up recovery options when you create your account matters.