If the screen lock password is forgotten and sign-in is not possible, the only supported options are to use the built-in recovery and reset mechanisms provided for the device/account type, or to contact the appropriate administrator or support team. The exact steps depend on whether this is a personal Windows device, a work/school account, or a Remote Desktop/AD environment.
- If this is a personal Windows 10/11 device
- At the sign-in screen, use the available recovery links:
- Select I forgot my password if signing in with a Microsoft account, then follow the prompts to reset it online.
- Select I forgot my PIN if using a PIN, and follow the reset flow.
- If using a local account and the password is forgotten, follow the guidance in Reset your Windows local account password from the sign-in screen.
- For general sign-in problems, use the troubleshooting entry points listed in Troubleshoot Problems Signing In to Windows.
- If this is a work or school account (Microsoft Entra / Azure AD)
- If self-service password reset is enabled by the organization, use the security info to reset the password:
- Follow the steps in Reset your password using security information to use a registered phone, email, or app to reset the work or school password.
- If self-service reset is not enabled or recovery options are not available, contact the organization’s IT/helpdesk or global admin and request a password reset.
- If this is a Remote Desktop / domain (Active Directory) sign-in
- After too many incorrect attempts or an unknown password, the account may be locked or the password may not meet domain policy.
- Contact the Active Directory administrator and ask them to:
- Reset the password, and
- Unlock the account if it is locked.
- If two-step verification or security info is blocking access
- If the password is known but security info is partially lost, sign in to the Advanced security options page and add a new sign-in method, then remove the old one.
- If all security info is lost but the password is known, start sign-in, choose I don't have any of these, and follow the process to replace security info (note: access may be restricted for up to 30 days).
- If both password and all security info are unavailable, complete the account recovery form as described in Common problems with two-step verification for a work or school account.
- If none of the above works
- For work/school/partner scenarios where no admin is available, use the contact paths in Troubleshoot sign-in issues and account access problems to reach the appropriate Microsoft support/data protection team and request assistance with password reset or account access.
If the device is encrypted with BitLocker and prompts for a BitLocker recovery key before the Windows sign-in screen, access cannot be restored without that recovery key; in that case, data recovery is only possible if the key can be found via the documented locations.
References: