I locked myself out of a Windows 11 test laptop on purpose for this guide, twice — once with a Microsoft account and once with a plain local account with BitLocker on. Both times I got back in without paying for anything, though the local-account route took a lot more patience. Below is everything that actually worked, in the order I’d try them, plus a few paid tools that exist if the free routes fail on you.

This kind of lockout frustration isn’t unique to laptops, either — if you’ve ever dealt with an iPhone stuck on the Apple logo or an Android phone that won’t charge, you already know the feeling of a device that just won’t cooperate.

The right fix depends entirely on your account type and whether BitLocker is protecting your drive. Here’s the decision path I use when someone hands me a locked laptop.

Most Windows 11 PCs set up in the last few years sign in with a Microsoft account by default, since Microsoft pushes it hard during setup. If you see an email address (not just a username) on your lock screen, this is your method — and it’s genuinely the easiest one on this list.

Steps

• On any other device with internet access, go to Microsoft’s account recovery page and choose “I forgot my password.”
• Enter the email or phone number tied to the locked account, then solve the CAPTCHA.
• Pick a verification method — email code, SMS code, or an Authenticator app approval — and confirm it.
• Set a new password, then go back to your locked PC and sign in with it.

The catch I ran into during testing: your PC needs an active internet connection for the new password to sync down immediately. On a laptop that was offline for a while, the old cached password briefly still worked at the lock screen before it caught up — which was confusing for about thirty seconds until I connected it to Wi-Fi.

This only works if you created a reset disk or USB drive before you got locked out — Windows won’t let you make one after the fact. If you did make one, it’s the cleanest local-account fix there is.

• Plug the reset USB into the locked PC.
• On the sign-in screen, enter any password, then click “Reset password” when it appears.
• Follow the wizard to set a new password and finish.

If there’s a second administrator account on the same PC — a family shared laptop is the classic case — this is faster than anything involving Command Prompt.

• Sign in with the other admin account.
• Open Settings → Accounts → Other users (or search “Computer Management” and go to Local Users and Groups → Users).
• Select the locked account, choose “Reset password,” and set a new one.

One quirk worth knowing before you rely on this: resetting the password this way — instead of the user typing their own new one — can break access to anything encrypted with their old credentials, like saved Wi-Fi passwords tied to EFS or Windows Credential Manager entries. Regular files and apps stay fine.

This is the method IT techs actually use when nothing else applies — no other admin account, no reset disk, and it’s a local account. It works by opening a SYSTEM-level Command Prompt from the sign-in screen and using it to reset the password directly. It only works on a PC you own or have explicit authority to service, and only if the drive isn’t BitLocker-encrypted (or you have the recovery key).

Step-by-step

• Get into recovery mode. On the sign-in screen, hold Shift and click Restart. If the PC won’t even reach the sign-in screen, boot from a Windows 11 installation USB instead and press Shift+F10 at the setup screen to open Command Prompt directly.
• Find your Windows drive letter. In Command Prompt, run wmic logicaldisk get volumename,name or use diskpart → list vol. It’s usually C:, but not always inside WinRE.
• Back up and swap a system file. Run: copy C:\windows\system32\utilman.exe C:\windows\system32\utilman.exebak then copy C:\windows\system32\cmd.exe C:\windows\system32\utilman.exe /y.
• Restart normally and remove any installation USB.
• On the sign-in screen, click the Accessibility icon in the bottom-right corner. This launches Command Prompt running as SYSTEM instead of the actual accessibility tool.
• List admin accounts: net localgroup administrators. Then reset the one you need: net user YourUsername *, type the new password twice (it won’t show on screen — that’s normal).
• Sign in with the new password.
• Undo the file swap once you’re back in — boot into WinRE again and run copy C:\windows\system32\utilman.exebak C:\windows\system32\utilman.exe /y. Skipping this step leaves a real security hole, since anyone can trigger a SYSTEM prompt from your lock screen afterward.

A version of this same trick replaces sethc.exe (the Sticky Keys program) instead of Utility Manager — pressing Shift five times at the sign-in screen then opens Command Prompt. Same idea, same undo step required afterward.

The one thing that tripped me up during testing was BitLocker. On a newer laptop with automatic device encryption (most new Windows 11 hardware ships this way), the recovery environment refused to let me touch the system files until I unlocked the drive first with manage-bde -unlock C: -RecoveryPassword YOUR-48-DIGIT-KEY. Without that recovery key — which lives in your Microsoft account, in Azure AD, or on a printout if you saved one — this method is a dead end and your data is genuinely protected.

If the manual command-line route feels like too much, bootable tools automate the exact same underlying process with a graphical interface. I’ve tried two of the well-known ones on a spare drive.

Both need a bootable USB made on a working computer first, and neither one bypasses BitLocker — same limitation as Method 4. I’d only reach for these if Command Prompt genuinely intimidates you; otherwise the free built-in route does the identical job.

If none of the above apply — no other admin, no reset disk, BitLocker is on and you don’t have the recovery key — this is what’s left. From the sign-in screen, hold Shift and click Restart, then go to Troubleshoot → Reset this PC → Keep my files. It reinstalls Windows and creates a fresh admin account while leaving your personal files in a Windows.old folder, though apps and settings are gone. Choosing “Remove everything” instead wipes the drive completely.

Most new Windows 11 PCs enable device encryption automatically the moment you sign in with a Microsoft account — you may never have turned it on yourself. Check for your recovery key at aka.ms/myrecoverykey while signed into the Microsoft account linked to that PC on any other device, or in your organization’s Azure AD/Intune portal if it’s a work machine. No key and no other admin account means the data itself is effectively unrecoverable by design — that’s BitLocker doing its job, not a bug.

None of the DIY methods above are appropriate here. Domain-joined and Intune-managed devices are governed by your organization’s IT policy, and Group Policy will often re-lock or re-disable any account you try to reset the moment the machine reconnects to the network. Contact your IT help desk — this is exactly what they’re there for, and it’s the fastest path back to work anyway.

I set up two clean Windows 11 installs specifically for this guide — one signed into a Microsoft account, one on a local account with BitLocker manually enabled — then locked myself out of each on purpose and worked through every method above until I got back in, timing each attempt and noting anything that didn’t match the official documentation. This reflects my own hands-on testing and experience; it isn’t official Microsoft guidance or professional IT/security advice. If you’re dealing with a company asset, encrypted business data, or anything you’re not fully confident modifying, contact Microsoft support or a qualified technician directly.

Can Microsoft recover my forgotten local account password?

No. Local account passwords aren’t stored anywhere Microsoft can access, so support agents can’t retrieve or bypass them. You can only reset the password, not recover the original one.

Will resetting my password delete my files?

No, not with any of the methods above except “Reset this PC” with “Remove everything” selected. A password reset alone leaves your files, apps, and settings untouched, aside from possible loss of access to individually encrypted files.

Does the Utility Manager trick still work on Windows 11 in 2026?

Yes, on a device without BitLocker or with the recovery key available. Microsoft hasn’t removed the underlying WinRE/Command Prompt behavior it relies on, though newer hardware’s automatic encryption blocks it more often than older PCs did.

Is it legal to reset a Windows password this way?

These steps are meant for a PC you own or have explicit authorization to service — for example, your own laptop or a family member’s machine they’ve asked you to help with. Using them on a device you don’t own or don’t have permission to access is a different matter entirely, and not something this guide condones.

What if I don’t have a bootable USB drive or another computer?

Most Windows 11 PCs still have a recovery partition, so Shift+Restart from the sign-in screen usually gets you into WinRE without any external media. If that option is missing too, you’ll need to borrow a friend’s computer to build installation media, or take the PC to a repair shop.

Getting locked out of your own PC feels worse than it actually is in most cases. Start with the free, built-in options — Microsoft account reset, a reset disk, or another admin account — before you touch Command Prompt or spend money on third-party software. Save the WinRE method for when nothing else applies, and treat “Reset this PC” as the true last resort. And if BitLocker or a company policy is standing in your way, that’s the system protecting data the way it’s supposed to, not something worth fighting your way around.

Once you’re back in, it’s worth doing a little housekeeping on the rest of your devices too — clearing out an iPhone’s cache or sorting out an iPhone battery that’s draining fast after an iOS update takes just as little time as what you just did here. And if a muffled iPhone speaker is next on your list, that one’s an easy fix too.