BIOS PASSWORD

Question

Dear Support,

Can you help me find the BIOS PASSWORD for my HP EliteBook for Series Number: 5C59350549?

Bryon

Answer 1

Nobody can provide you with your BIOS password. You either remember it or not.

Answer 2

Microsoft and HP cannot provide or recover a BIOS/UEFI password based only on a device’s serial number.

For enterprise-managed devices where BIOS passwords were configured and stored via Microsoft Intune, an Intune administrator can retrieve or remove them:

1. Retrieve BIOS password via Intune and Microsoft Graph
   • Intune stores BIOS passwords per device when using BIOS configuration and other settings policies.
   • An Intune admin with appropriate permissions can use the Microsoft Graph hardwarePasswordInfo API to read them:
     • Per device: https://graph.microsoft.com/beta/deviceManagement/hardwarePasswordInfo('<deviceID>')
     • Or all devices: https://graph.microsoft.com/beta/deviceManagement/hardwarePasswordInfo
   • This requires either:
     • A custom Intune RBAC role with Managed devices → Read Bios Password permission, or
     • At minimum, the Intune Administrator role in Microsoft Entra ID.
2. Remove BIOS configuration password via Intune
   • In the Intune BIOS configuration policy, set Disable per-device BIOS password protection to Yes and assign the policy.
   • When the device checks in with Intune (or is manually synced), the policy removes the BIOS password; then reboot the device.
   • Important: Unenrolling the device from Intune does not remove the BIOS password. If the device is unenrolled before disabling the password, the password must be changed or cleared manually in the BIOS.
3. If the device is not Intune-managed
   • If the BIOS password was set manually or by a previous owner and the device is not managed by Intune, the password cannot be retrieved through Microsoft tools.
   • For consumer or second-hand devices, the only practical options are:
     • Contacting the seller or original owner for the password.
     • Contacting HP support for OEM-specific recovery or motherboard service, if available.

If the device is second-hand and locked with a firmware password that cannot be cleared, some OEMs and Microsoft have historically offered out-of-warranty exchanges only while the device model is still supported; once a model is out of support, exchange options may no longer be available.

---

References:

• Use BIOS configuration profiles on Windows devices in Microsoft Intune
• Original Equipment Manufacturer (OEM) pages for Secure Boot
• bios access is password protected on surface book 2, Need to access to enable TPM. Dont know password. - Microsoft Q&A