Your options depend on whether you forgot your password or need to access a computer that isn't yours
If you forgot your own Windows 10 password, Microsoft offers built-in recovery paths that work without needing a technician. If you're trying to access someone else's computer, the technical methods exist but cross into territory where you need to own the device or have explicit permission from the owner. This guide covers the legitimate routes for each situation.
The fastest path forward depends on what you set up when you created your account — whether you linked a phone number, backup email, or security questions. If you set up none of those, recovery takes longer but is still possible through Microsoft's account recovery process.
Key Takeaways
- If you forgot your password on your own computer, use the "I forgot my password" link on the Windows login screen to reset it through your Microsoft account recovery options.
- Password reset through Microsoft requires either a phone number, backup email, or security questions you set up when you created the account.
- If you have no recovery method set up, you can still recover your account through Microsoft's identity verification process, which typically takes a few days.
- If you need to access a computer you own but cannot log in any other way, a Windows 10 installation disc or USB drive lets you reset the password from the command line, though this requires physical access to the machine.
- Accessing someone else's computer without permission is illegal regardless of the technical method used.
Resetting your password through your Microsoft account
On the Windows 10 login screen, click "I forgot my password" beneath the password field. Windows will ask you to enter your Microsoft account email address, then present you with recovery options based on what you set up when you created the account.
If you added a phone number, Microsoft will text a code to that number. If you added a backup email address, Microsoft will send a reset link there. If you set up security questions, you can answer those instead. Choose whichever method you still have access to, complete the verification, and you'll be able to set a new password when ready.
This process works from any internet-connected device — you don't need to be at the locked computer. Once you reset your password through Microsoft's website, you can return to the Windows login screen and sign in with your new password.
What to do if you have no recovery method on file
If you didn't link a phone number, backup email, or security questions to your Microsoft account, the reset process takes longer but still works. Click "I forgot my password" and select "I don't have this info" when asked for your recovery method.
Microsoft will ask you to verify your identity through other means — usually by answering questions about your account history, recent activity, or devices you've used. This verification can take anywhere from a few minutes to several business days depending on how much information Microsoft can cross-reference.
Once Microsoft verifies your identity, you'll receive a password reset link via email. Use that link to create a new password, then sign back into Windows 10.
Using a Windows 10 installation disc or USB to reset a local account password
If your computer uses a local account (not a Microsoft account) and you have no other way to log in, you can reset the password using a Windows 10 installation disc or bootable USB drive. This method requires physical access to the computer and another device to create the installation media.
On another computer, read the Windows 10 Media Creation Tool from Microsoft's website. Use it to create a bootable USB drive. Insert that drive into the locked computer, restart it, and boot from the USB (usually by pressing F12, F2, or Del during startup, depending on your computer's manufacturer).
When the Windows setup screen appears, press Shift + F10 to open the command prompt. From there, you can use the net user command to reset the password on your local account. The exact command is net user [username] [newpassword] — replace [username] with your account name and [newpassword] with what you want the new password to be.
After running the command, restart the computer normally and log in with your new password. This method only works if you own the computer or have explicit permission from the owner.
Why you cannot bypass Windows 10 security without owning the device
Windows 10 is designed so that resetting a password requires either knowledge of your recovery information (phone, email, security questions) or physical access to the device combined with administrative tools. There is no legitimate "back door" that lets you into someone else's computer without one of those two things.
Methods that claim to bypass Windows 10 without these requirements — such as using third-party password-cracking software or exploiting vulnerabilities — exist, but using them on a computer you don't own is illegal under the Computer Fraud and Abuse Act and similar laws in most countries. Even if you own the computer, using these tools can damage Windows or make it unbootable.
If you need to access a computer that belongs to your employer, school, or family member, the legitimate path is to contact the owner or the IT department responsible for that device. They can verify your identity and reset your access through official channels.
Setting up recovery options so you don't get locked out again
Once you regain access to your Windows 10 account, add recovery information so the next time you forget your password, you can reset it in minutes instead of days. Open Settings, go to Accounts, then select "Security info" or "Your info" depending on your Windows version.
Add at least one phone number and one backup email address. You can also set up security questions. Microsoft will ask you to verify each method as you add it — this verification step is what makes recovery possible later.
If you use a local account instead of a Microsoft account, consider switching to a Microsoft account. Local accounts have fewer recovery options and are harder to reset if you forget the password. You can convert a local account to a Microsoft account through Settings without losing your files or programs.
What happens if your Microsoft account itself is compromised
If someone else has access to your Microsoft account email or phone number, they could reset your Windows password and lock you out of your own computer. If you suspect this has happened, go to account.microsoft.com from another device and change your Microsoft account password when ready.
Then review your account's security settings. Check which devices are signed in, look at your recent activity log, and remove any devices you don't recognize. If you see suspicious activity, you can also report it to Microsoft through the account recovery page.
After securing your Microsoft account, sign back into Windows 10 with your new password. Your computer will sync the new credentials automatically.
Frequently Asked Questions
Can I reset my Windows 10 password without a Microsoft account?
If you use a local account, you cannot reset your password through Microsoft's website. You'll need either the installation disc method described above or contact with someone who has administrative access to the computer. If possible, convert your local account to a Microsoft account so you have more recovery options.
How long does Microsoft account recovery take?
If you have a phone number or backup email on file, password reset takes minutes. If you have no recovery method set up, Microsoft's identity verification process typically takes a few hours to a few business days, depending on how much information they can verify about your account.
What if I don't remember my Microsoft account email address?
Go to account.microsoft.com and click "Can't access your account." Microsoft will ask you to enter a phone number or alternate email associated with your account. If you can verify one of those, you can recover access to your Microsoft account and then reset your Windows password.
Is it legal to use password reset tools I find online?
Using password reset tools on a computer you own is legal. Using them on someone else's computer without permission is illegal. Even on your own computer, third-party tools can damage Windows or create security vulnerabilities, so Microsoft's built-in recovery methods are safer.
Can I prevent someone from resetting my Windows password if they have physical access?
Not completely. If someone has physical access to your computer and a Windows installation disc, they can reset a local account password using the command-line method. Using a Microsoft account with strong recovery security (phone number and backup email only you control) makes this harder but not impossible. Full-disk encryption adds another layer, but the most reliable protection is physical security — keeping your computer in a locked location.