Being unable to sign in is frustrating, especially when the computer contains work or personal files. Avoid downloading “password recovery” programs from unknown websites. They can expose your data, install unwanted software or make the problem harder to solve.
First, identify your account type
Look at the sign-in screen. If you normally use an email address to log in, the computer is probably using a Microsoft account. If you only see a name and do not use an email address, it may be a local account.
For a Microsoft account
- On another trusted device, use Microsoft’s official account recovery page.
- Choose a strong new password that you have not used elsewhere.
- Complete the identity check using your recovery email, phone number or authenticator app.
- Connect the locked computer to the internet, then sign in with the new password.
For a local account
After an incorrect password attempt, Windows may show a Reset password option. Follow the security questions if you created them when the account was set up. If there is another administrator account on the same computer, that administrator may be able to reset the local account password.
When to stop and ask for help
If the device belongs to an employer, school or client, contact their IT administrator instead of trying workarounds. Managed devices can use encryption and security policies that make self-service recovery unsafe. You should also stop if you are asked for a recovery key you do not recognize.
Prevent the next lockout
- Add a recovery email and phone number to your Microsoft account.
- Use a password manager to store unique passwords.
- Keep the BitLocker recovery key somewhere safe if encryption is enabled.
- Create a standard user account for everyday use and keep an administrator account for maintenance.