Quick fix: Local Windows account password reset requires the password reset disk (created in advance) or a boot from Windows install USB to swap in a new password. If you set up security questions during account creation, click Reset password at the sign-in screen, answer questions, set new password. Otherwise, boot from install USB → Command Prompt → use net user to set new password.

You can’t sign in to your local Windows account. You forgot the password. There’s no “Forgot password” link like web services because Windows’ local accounts don’t have one by default. Recovery requires preparation (password reset disk, security questions) or a recovery boot via Windows install USB.

Symptom: Forgot local Windows account password; need to regain access without losing data.
Affects: Windows 11 (and Windows 10) with local accounts (not Microsoft Account).
Fix time: ~30 minutes (with install USB).

What causes this

Local Windows accounts store password hashes in the SAM database. There’s no “reset link” mechanism. Microsoft assumes you set up: a password reset disk (USB created when password was set), security questions (Windows 10 1803+), or a Microsoft Account (which has cloud reset). For accounts without any of those, recovery requires booting another OS to manipulate the SAM.

Caveats: this works for local accounts only. Microsoft Account sign-in resets at account.microsoft.com. Domain accounts reset at the domain controller. BitLocker-encrypted drives require the BitLocker recovery key first.

Method 1: Security questions reset (Windows 10 1803+)

If you set them during account creation.

At the sign-in screen, click the password field. Try a password (wrong is OK).
After failed attempt, a Reset password link appears below the password field.
Click Reset password.
Answer the three security questions you set up.
Set a new password. Click Reset.
Sign in with the new password.
If you didn’t set security questions or don’t remember answers: proceed to Method 2.

This is the easiest recovery, but only works if you prepared.

Method 2: Reset via Windows install USB (no preparation needed)

The recovery path for unprepared accounts.

Create a Windows 11 install USB on another PC using Media Creation Tool.
Boot the locked PC from USB. At install screen, press Shift + F10 to open Command Prompt.
Identify Windows install drive (typically C: but can be D: in WinPE):
```
dir C:\Windows
dir D:\Windows
```
The drive with a Windows folder is your install.

Replace Utility Manager (utilman.exe) with Command Prompt — gives you a Command Prompt at sign-in screen:

copy C:\Windows\System32\utilman.exe C:\Windows\System32\utilman.bak
copy C:\Windows\System32\cmd.exe C:\Windows\System32\utilman.exe

Reboot normally. At the sign-in screen, click the Accessibility icon (bottom-right corner). Command Prompt opens.
Reset password: net user YourUsername NewPassword. Replace with your actual username and a new password. If you don’t know username: net user lists all accounts.
Close Command Prompt. Sign in with the new password.
After signing in: boot back to install USB and restore the original utilman.exe:
```
copy C:\Windows\System32\utilman.bak C:\Windows\System32\utilman.exe
```
This is a security hygiene step.

This works for any local account with admin rights. Caveat: works only on unencrypted drives.

Method 3: Use third-party password reset tools

For users who prefer GUI tools.

Download Hiren’s BootCD PE (free, hirensbootcd.org). A bootable rescue ISO with many tools.
Burn to USB. Boot the locked PC from USB.
From the Hiren’s menu, run NT Password Reset or similar tool. Navigate to your Windows install. Find your account. Set new password or blank.
Or use Offline NT Password & Registry Editor (older, command-line). Download from pogostick.net/~pnh/ntpasswd/.
For password-cracking (slower, only on simple passwords): Ophcrack with rainbow tables.
For BitLocker-encrypted drives: you need the recovery key first. Get from account.microsoft.com/devices/recoverykey if Bitlocker was tied to MSA before this issue.
Caveat: third-party tools may trigger antivirus flags (legitimate but security-sensitive). Use only on PCs you legitimately own.

This is the right path for non-technical users.

How to verify the fix worked

Reboot normally. At sign-in screen, enter the new password.
Successfully sign in. All your files, apps, settings intact.
For Method 2: confirm utilman.exe was restored to original.

If none of these work

If you can’t reset the password: BitLocker encryption: if the drive is encrypted, you can’t access SAM without the recovery key. Find recovery key at account.microsoft.com/devices/recoverykey (if MSA-tied), or written down somewhere, or printed from setup. Without the key, the drive is essentially destroyed-by-design. Microsoft Account on this PC instead of local: at sign-in, click Use a different sign-in option → pick PIN, security key, or Microsoft password. Reset MSA at account.microsoft.com. Domain account: contact your IT admin. They reset via Active Directory. For the truly stuck: backup data via Linux Live USB. Boot Ubuntu USB, mount the Windows drive, copy /Users/<you>/Documents, Pictures, etc. to external drive. Then Reset This PC or fresh-install Windows. Family/Child accounts: parent can reset at account.microsoft.com/family.

Bottom line: Security questions (set up during creation) are the easiest reset. Otherwise, boot from Windows install USB, swap utilman.exe with cmd.exe, use net user at sign-in screen to set new password.