author avatar
26 June 2025  Amanda J. Brook  Senior Product Manager
Last update by Olivia Brown at 26 June 2025

Summary
Discover how to find administrator password on Windows 10/11 with trusted, step-by-step solutions for local accounts. This guide covers easy recovery and reset methods, catering to both Beginner and Advanced users who need quick, reliable access.



Table of contents

table iconUnderstanding Administrator Accounts
table iconWhere do Windows Store Local Account Passwords - SAM Database
table iconPassword Recovery Methods
table iconPreventive Measures for Future Access
table iconConclusion
Forgetting your Windows administrator password can be frustrating, especially when you need to access critical settings or install software. Whether you're using Windows 10 or 11, there are several reliable methods to get back your password without losing data. This guide provides step-by-step instructions for trusted third-party tools to help you regain access quickly and easily.

Understanding Administrator Accounts

What is an Administrator Account?

An administrator account has elevated privileges, allowing comprehensive system management, including:
- Installing and uninstalling software
- Modifying system settings
- Managing user accounts and permissions
- Accessing protected system files

Account Types and Their Implications

Local Accounts: Stored on your device, requiring local recovery methods like password reset disks or third-party tools.
Microsoft Accounts: Linked to an online Microsoft profile, offering online password reset options (Microsoft Support).
Local Account and Microsoft Account
In most cases, the Administrator account on your PC is a local account—not connected to a Microsoft or online login. And that’s exactly what this guide focuses on: helping you manage and recover access to your local admin account with ease.
If you need to get rid of Microsoft Account, Please refer to this article.

Where do Windows Store Local Account Passwords - SAM Database

Windows 10/11 stores local account passwords as cryptographic hashes in the Security Account Manager (SAM) database, located at C:\Windows\System32\config\SAM. This file is locked during normal operation and requires SYSTEM-level privileges to access.

Can Users Retrieve Passwords from SAM?

No, plain-text passwords cannot be retrieved from the SAM database due to one-way encryption (NTLM hashes). Recovery requires resetting the password or using specialized tools like Ophcrack.

Viewing SAM-Related Data in Registry Editor (Educational Purposes Only)

Step-by-Step Process:
1. Press Win + R to open the Run dialog
2. Type regedit and press Ctrl + Shift + Enter to run as administrator
3. Navigate to: HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users
4. Observe the structure: Each subkey represents a user account identified by its Security Identifier (SID)
5. Account details are stored in binary values (F and V values contain hashed passwords)
HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users
Important Technical Note: Direct access to the SAM file or its registry hive requires SYSTEM-level privileges, which exceed standard administrator privileges. During normal Windows operation, even administrators cannot directly view or modify the SAM file due to system-level protection mechanisms.

Password Recovery Methods

Method 1: Using Ophcrack to Brute force cracking of the password (Time-Intensive)

Ophcrack is effective for cracking short to moderately long Windows passwords—typically up to 8 characters
Ophcrack is a reliable and efficient tool for recovering forgotten Windows admin passwords. It is a free, open-source password recovery tool that employs rainbow tables to crack passwords. The tool is particularly favored for its ability to recover complex passwords swiftly. Follow the steps below to use Ophcrack to recover your Windows 10/11 admin password:
Step 1: Download and Install Ophcrack
To use Ophcrack, you will first need to download and install it on another computer with internet access. Once installed, create a bootable USB or CD/DVD using Ophcrack to run it on your locked Windows 10 desktop.
Step 2: Choose and download the Correct Tables
Ophcrack requires rainbow tables to crack passwords. These tables contain precomputed hashes for a wide range of possible passwords. Select the appropriate tables according to the Windows version you are using. In this case, select the tables for Windows XP.
Ophcrack Rainbow table
Step 3: Launch Ophcrack
Once you have prepared the bootable device, insert it into the ASUS laptop and restart the computer. As the laptop boots up, you will need to access the boot menu, which can typically be done by pressing a designated key (e. g., F2, F8, or F12) during the startup process. Select the bootable device from the menu, and the Ophcrack software will begin to load.
Launch Ophcrack
Step 4: Begin the Password Recovery Process
Once you have selected the correct tables, click on the “Load” button to load them into Ophcrack. Then, click on the “Crack” button to start the password recovery process. Ophcrack will begin analyzing the hashes and attempting to crack the password
Ophcrack Account List
By using Ophcrack, you can effectively recover your forgotten admin password on Windows 10. This method is particularly useful when other methods, such as using another admin account or a password reset disk, are not available.
Note: Success depends on password complexity and available rainbow tables. For faster results, consider resetting the password using other methods.

Method 2: Using Renee PassNow (Password Reset Approach)

If you’ve forgotten your Windows 10 or 11 administrator password and don’t have a password reset disk, a third-party tool like Renee PassNow can be a lifesaver. Renee PassNow is a powerful and user-friendly software designed to help you reset your Windows password by creating a bootable USB or CD/DVD. This tool is especially handy when you need to regain access to a locked computer quickly and efficiently. Whether you’re dealing with a local account or need to convert a Microsoft account back to a local one, Renee PassNow simplifies the process with a straightforward interface.
Note: If you’re using a Microsoft account, Renee PassNow will convert it to a local account during the reset process. After resetting the password, you’ll need to reconnect your account to your Microsoft profile.
Here’s how to use Renee PassNow to reset your Windows administrator password:
Step 1: Download and Install Renee PassNow
Visit the official Renee PassNow website and download the software onto a computer you can access. Install it by following the prompts, ensuring you select the version compatible with your operating system.
Renee PassNow – Professional Windows System Rescue Tool

Remove Windows Login Password 3 steps for whole password remove process.

Recover the files Recover the deleted files without Windows system.

Transfer the data Transfer the important files of the computer with system.

Fix Windows startup error Fix various Windows startup failures or crashes.

Erase disk Completely erase disk files which will not be restored.

Remove Windows Login Password 3 steps for whole password remove process.

Recover the files Recover the deleted files without Windows system.

Transfer the data Transfer the important files of the computer with system.

Free TrialFree TrialNow 2000 people have downloaded!
Step 2: Create a Bootable USB or CD/DVD
Open Renee PassNow and insert a USB flash drive or a blank CD/DVD into the computer. In the software, choose the option to create a bootable media and follow the on-screen instructions to prepare the USB or disc.
Create New Windows 10 Password Reset Disk with Renee PassNow 
Step 3: Boot the Locked PC from the Bootable Media
Insert the bootable USB or CD/DVD into the locked computer.
Boot the target PC with the created password reset USB/CD/DVD.
Restart the PC and enter the BIOS settings by pressing the appropriate key (usually F2, Delete, or Esc—check your device’s manual). Adjust the boot order to prioritize the USB or CD/DVD.
Common Servers and Computers Boot Menu Access:
Server TypeEnter Boot Menu Method

DELL

Press F12 repeatedly before the Dell logo appears.

HP

Press F9 multiple times when the HP logo is displayed.

BIOS Name

Enter Boot Menu Method

ASRock

DEL or F2

ASUS

DEL or F2 for PCs/ DEL or F2 for Motherboards

Acer

DEL or F2

Dell

F12 or F2

ECS

DEL

Gigabyte / Aorus

DEL or F2

Lenovo (Consumer Laptops)

F2 or Fn + F2

Lenovo (Desktops)

F1

Lenovo (ThinkPads)

Enter then F1

MSI

DEL

Microsoft Surface Tablets

Press and hold Power and Volume Up buttons

Origin PC

F2

Samsung

F2

Toshiba

F2

Zotac

DEL

HP

Esc/ F9 for Boot Menu/ Esc/ F10/ Storage tab/ Boot Order/ Legacy Boot Sources

INTEL

F10

Step 4: Select the Password Reset Function
Once the computer boots from the media, Renee PassNow will load its interface. Select the “PassNow!” function to proceed with the password reset process.
click on passnow to reset login password
Step 5: Reset the Password
From the list, select the Windows system and the user account you want to reset. Click the “Clear Password” button to remove or reset the password for the chosen account.
Select target Windows system in the list 

Select target user account in the list 

Step 6: Reboot the PC
After the password is reset, safely remove the bootable media and restart the computer. You can now log into the account without a password.
Renee PassNow offers a fast and reliable way to regain access to your Windows system when you’re locked out. It’s a great alternative when you don’t have a pre-created password reset disk, making it a must-have tool for such emergencies.

Preventive Measures for Future Access

To avoid password recovery issues, implement these proactive steps:
- Create a Password Reset Disk: Use a USB drive via Control Panel > User Accounts > Create a password reset disk.
- Link to a Microsoft Account: Convert your local account to a Microsoft account for online recovery (Settings > Accounts > Your info).
- Set Up Security Questions: Add security questions for local accounts (Settings > Accounts > Sign-in options).
Tip: Store reset disks securely and update security questions regularly.

Conclusion

Forgetting your Windows 10 or 11 administrator password can be stressful, but with the right tools and methods, you can regain access without losing data. This guide covers multiple solutions, like Renee PassNow and Ophcrack. To prevent future issues, create a password reset disk and set up security questions. Always perform password recovery within legal and ethical boundaries.
Ethical Warning: Password recovery should only be performed with proper authorization to avoid legal or system issues.
Renee Passnow – Professional Windows Password Remover

Remove Windows Login Password 3 steps for whole password remove process.

Enable/Create Administrator One click for creating new administrator and enable the disabled account.

Widely Use New version supports UEFI boot model, which can be used on more computers, laptops and even surfaces.

Multifuctional Data transfer, data recovery, bootable problem recovery can be run without system.

Highly compatible Windows 10/8.1/8/7/XP/Vista.

Remove Login Password 3 steps for whole password remove process.

Enable/Create Administrator One click for creating new administrator and enable the disabled account.

Easy to use No need of any professional knowledge or password reset disk.

Free TrialFree TrialNow 2000 people have downloaded!

User Comments

Page 1

Leave a Comment


Your comment has been submitted and is awaiting moderation.