Tutorials Methods To Bypass Windows 10 Password When Locked Out

[Jerry_Xristos]

You must be registered for see links

In the present world, data is very important and most people keep the same on computers and protect it from unauthorized users via Password.
But, sometimes the situation becomes worse and even users failed to recollect the password.
So, if you have forgotten Windows 10 password and got stuck at the login screen, then don’t scratch your head because here you will find the most useful and efficient methods
to bypass Windows 10 password.

You must be registered for see links

Method 1: Command Prompt​

Command Prompt is a vital tool in Windows 10 that will help you to bypass Windows OS password effectively. Here, you will get to know the entire way to reset Windows 10 password even when you are stuck at the login screen. But, before moving ahead, you must have Windows Installation Disc or System Recovery Disk. However, if you don’t have the installation disc, then you can create a one using Microsoft Media’s Creation Tool using your friend’s computer.
Insert Windows 10 Installation disc on your computer. Restart your computer and make sure to change the boot order and keep the primary boot order as Disk. Also, ensure to disable UEFI and secure boot. Thereafter, your computer will start and will show Windows Setup on the screen. Here, you need to press the Shift and F10 keys together to launch the command prompt.
Your job in the command prompt is to replace the utilman.exe with cmd.exe , but before doing that you must make a copy of Utility Manager. Type the command provided below to copy and move utilman.exe. Make sure to press the ‘Enter’ key after the completion of each command.

move d:\windows\system32\utilman.exe d:\windows\system32\utilman.exe.bak
copy d:\windows\system32\cmd.exe d:\windows\system32\utilman.exe

Note: Here, drive d is provided because Windows is installed on drive D, however, if you have installed on some other drive, then you can change the drive name to the respective name where your Windows 10 is installed.
Now, restart your computer by typing the command listed below and then press the Enter key

wpeutil reboot

After restarting the Window you will be back to the Login screen, but this time you have some more options and one such is the Utility Manager that is located at the bottom of the screen, click on it and choose Command Prompt .
On the command prompt section, you just type two commands listed below. The first command will help you to create a new user account and the second command will give you control over the admin account. Make sure to press the Enter key after typing each command.

net user XYZ/add

net localgroup administrators XYZ /add

Note: Here, XYZ is the local user account name and you can name one as per your solace.

Close the command prompt and then restart your computer. After that, your computer will boot Windows 10 installation disk and you must press Shift and F10 keys to reach the command prompt section.

Step 10: Now, it’s time to restore Utility Manager and for that, type the command listed below and make sure to press the Enter key.

copy d:\utilman.exe d:\windows\system32\utilman.exe

After that, a confirmation of the overriding message will appear, press Y key to confirm the action. Now restart your computer by typing the command listed below and also ensure to remove Windows Installation DVD.
After restarting the computer, you will be back to the Login screen, but this time you will get a new account. Hence, click on the created account to access Windows 10.
Well, this method is a lengthy one and you must have the technical knowledge to perform this task. On the off chance, if you fail to provide the right input then you will be stuck again and this time the error may be different.

Method 2: PassGeeker Windows Password Recovery (unfortunately you have to buy it)​

The earlier method was a bit tough one and a lengthy too, so here you will get the easiest one, i.e.

You must be registered for see links

This is the revolutionary tool that breaks Windows 10 password in a short time without giving much effort and the best part is; it can be accessed by a mere novice too. PassGeeker supports a wide range of Windows OS, starting from Windows XP and goes to Windows 10.

Step 1: Arrange one secondary computer and then install PassGeeker on it. After installing the application on the secondary computer, insert a USB flash drive and then launch PassGeeker.

You must be registered for see links

Step 2: On the home page, you will get two options, i.e. CD/DVD and USB Flash Drive. Select the location of your USB drive and then click on the Burn button. However, if you are using CD/DVD, then select the CD/DVD option from the home screen and further click on the burn button.

Step 3: The burning process will take a couple of minutes and after its completion, close the application and remove the USB drive.

Step 4: Now, insert the USB on the locked computer and then restart it. Make sure to set the primary boot order as the USB drive. Soon after the boot resumes, you will get the PassGeeker window on your screen also with the list of user accounts

You must be registered for see links

Step 5: Select the locked account and click on the Remove Password button. Soon after the passage of the time, you will get a successful message that your password is removed. At this point, you must click on the Reboot button.

You must be registered for see links

​

Step 6: That’s it; you have successfully reset Windows 10 password.

Method 3: Offline NT Password & Registry Editor​

You must be registered for see links

is a recovery tool that will help you to bypass Windows 10 Password. The features are excellent but its algorithm is a bit different from other password recovery tools. To access the salient features of Offline NT password, follow the steps listed below.

Visit Offline NT Password and Registry Editor Website and navigate to the download section. From there, download the USB version. Wait a few seconds and extract the file as it is in zip format and then burn the ISO file using a burning tool. Then remove the CD/USB and then insert it on the locked computer.

Now, restart your locked computer and then move to the BIOS section. Here, you need to set the primary order as CD/USB. If you are using CD then keep the primary boot order as CD drives. However, if you are using a USB drive, then your primary boot order will be USB. After making the changes, the boot will resume and will load Offline NT Password. Here you will have to press the Enter key to start the process.

You must be registered for see links

​

Now, select the partition where your Windows is installed and for that, you can type the respective numbers. However, if you have installed only one OS, then go with the default and press the Enter key. After that, select the password reset option by typing the respective number or else you can press the Enter key to go with the default settings.

Once the Windows registry is loaded, the application will fetch additional options, select Edit user data and passwords . Thereafter, you will get the list of user accounts, select the locked account by typing the number and then press the Enter key.

You must be registered for see links

​

On the screen, you will find additional options at the bottom of the screen, type 1 to clear user password , and then press the Enter key. Soon, a password cleared message will come on the screen, and here you need to type**!** And then press the Enter key. Your job is done, now type q to close Edit user data and password section.

Now, type Y and press the Enter key to confirm the password reset action. Close the application and remove CD/USB as your job is done.

Method 4: Bypass Windows 10 Password using Hiren’s Boot CD​

You must be registered for see links

is an old tool but still much powerful and can easily bypass Windows 10 password. Well, the method of Hiren’s Boot CD is very simple and it will reset the Windows 10 password in an efficient way.

Create a bootable USB from Hiren’s Boot CD ISO using another computer. Now, insert the bootable USB on the locked computer and then change the boot order to a USB drive. Restart your computer and soon, Hiren’s Boot CD PE will start booting the device and at this stage, you must press any key to start the operation.

You must be registered for see links

Thereafter, you will be directed to Windows PE and at the Desktop, you will get Utilities folder, click on it. Under the Utilities section, you will get the Security folder, click on it. Select Password folder that is available in the Security folder. After that choose NT Password Edit .

Under NT Password Edit section, you will get Path to SAM File and here you need to upload the Windows Installation Partition, click on the ‘Open’ button and then upload the partition. After that, you will get the User list , select the Administrator folder and further click on the Change Password button that is located at the bottom of the menu.

You must be registered for see links

​

A new pop-up window will open and will ask you to enter the new password, either you can create a new password or else you can leave it blank. To reset the password, keep the section blank and click on the OK button. Now click on the Save changes button.

After completing the above task, restart your computer and then remove Hiren’s bootable USB and you will be able to access Windows 10 without any password.

Hiren’s Boot CD is a conventional method and works fine with all the versions of Windows OS. However, this method is easy but you need to create a Hiren’s Bootable USB using another computer. So, if you can do the same then you can choose this method.

You must be registered for see links

 

[Jimmy Collaros]

Thank you for the tutorial Jerry_Xristos
I was always trying to find out how to bypass the password.
But i never did.

 

[AChira]

Thank you so much !

 

[DGrigorescu]

"

DANGER WILL ROBINSON!
If password is reset on users that have EFS encrypted files, and the system is XP or newer, all encrypted files for that user will be UNREADABLE! and cannot be recovered unless you remember the old password again If you don't know if you have encrypted files or not, you most likely don't have them. (except maybe on corporate systems)

"

(from pogostick net website)

 

[MediumSteak]

it reminds me of a movie called Mr. Robot

 

[RedDove]

I wish this was around last year
when I was locked out my own laptop
because I forgot the password. I had to
open the back and jump the stupid thing to reset it.

Best believe I will be bookmarking this, just in case.
Thank you,

You must be registered for see links

 

[akramses04]

Last time i remember about koonboot to bypass windows password without reset it. Is there any alternative way to do that?

 

[Cyler]

Last time i remember about koonboot to bypass windows password without reset it. Is there any alternative way to do that?

I made this comment about Kon-boot (if that's the one you were taking) and I think you will find it useful.

You must be registered for see links

 

[akramses04]

I made this comment about Kon-boot (if that's the one you were taking) and I think you will find it useful.

You must be registered for see links

Ok thanks. In the comment section, you said it will reset the password, anyways i'll try it first.

 

[Cyler]

Ok thanks. In the comment section, you said it will reset the password, anyways i'll try it first.

Not even Kon-boot bypass it. There is no way to bypass in the way you mean it. Either you make another admin account with a new password (which you can erase after) or change the password of a current one. The only exceptions are
1. To brute-force but I think this is not the way one might choose as it might take time. Needless to say, if the boot drive is protected by TPM and/or Bitlocker... not much a simple user can do.
2. A personal favorite and the method I often like to use (as it's not widely known) is to replace temporarily the kernel and disable the Windows authentication subsystem but that can be the content of a future post.

Note that files that are protected with BitLocker or are encrypted won't be able to be accessed with any method. You need to decrypt the files or break BitLocker, something that hasn't happened yet to my knowledge.

Ideally, you can add an account to install a keylogger to figure the password, but a smart admin can check from the logs unless you modify the logs too.

 

[akramses04]

Not even Kon-boot bypass it. There is no way to bypass in the way you mean it. Either you make another admin account with a new password (which you can erase after) or change the password of a current one. The only exceptions are
1. To brute-force but I think this is not the way one might choose as it might take time. Needless to say, if the boot drive is protected by TPM and/or Bitlocker... not much a simple user can do.
2. A personal favorite and the method I often like to use (as it's not widely known) is to replace temporarily the kernel and disable the Windows authentication subsystem but that can be the content of a future post.

Note that files that are protected with BitLocker or are encrypted won't be able to be accessed with any method. You need to decrypt the files or break BitLocker, something that hasn't happened yet to my knowledge.

Ideally, you can add an account to install a keylogger to figure the password, but a smart admin can check from the logs unless you modify the logs too.

Ok noted, thanks for the info

 

[2go2ozz]

Thank you. Wonderful tutorial

there is also another software by www ------ asunsoft ------ com

and noticed a copy of the version 4.1 through the internet searches named Asunsoft Windows Password Geeker Advanced 4.1

Anyone has any info about it compared to the rest please

 

[Cyler]

Thank you. Wonderful tutorial

there is also another software by www ------ asunsoft ------ com

and noticed a copy of the version 4.1 through the internet searches named Asunsoft Windows Password Geeker Advanced 4.1

Anyone has any info about it compared to the rest please

This software does essentially the same as what has been described above. You can see it in its description. I highlighted the key elements.

Not saying if it's good or bad, just saying it's nothing more than what the original poster has in his thread. Keep in mind that most software will try to sell itself as unique but the methods they use are virtually the same.

 

[agoti]

Thanks for these neat tricks. Its a surprise to me I didn't know most of it.

 

[SlavkoPejic]

Thanks a lot, much appreciated

 

[Charles]

I used to use KonBoot to bypass passwords on both Windows and Mac.
The guys who make it are complete asses, truth be told. I bought the software, and made a USB flash drive. Well, I have about 400 USB flash drives of software, OS, etc laying around, "just in case", because I am anal retentive like that. Long story short, I couldn't find the KonBoot USB drive, when I needed it, so I shot them an e-mail, asking if they would allow me to create another...and those little dirt bags sent me back an e-mail, threatening to sue me, for a product I paid for.
So, needless to say, I can see no reason to pay for software, when the authors won't even allow you do recreate a flash drive of software you purchased from them, without threat of a lawsuit, so I haven't used the product, nor have I paid them up upgrade it.
If you can find a "free version" on the internet that isn't 3 or 4 years old, it should work fine.

 

[SydneyM]

Just another comment. I don't like passwords to boot into Windows on my computers. "Netplwiz" command inside windows used to be a good utility to get Windows to bypass/put the password in by itself, but this does not work anymore on the newer versions of Windows 10. I use Pc Unlocker Enterprise to get rid of the password.

 

[jaabaz03]

Thank you so much !!!

 

[Megaraider]

2. A personal favorite and the method I often like to use (as it's not widely known) is to replace temporarily the kernel and disable the Windows authentication subsystem but that can be the content of a future post.

Yes, a less common / known method patching m s v 1 _ 0 .dll if that's what you're referring to.
Yet one needs 3 different patches (in fact 6 because: x86 or x64): one Medicines for 2000 to w7 (or Server 2008 R2), another for w8.x, and other for w10.
A script file will do it though.