It’s every Windows user’s worst nightmare: you try to log in one day, and every attempt is denied. Whether you’ve forgotten your password, it’s been changed, or you need access without knowing the password, there’s a way to break back in.

The Backdoor

Warning: This method involves interrupting your system’s startup process, which can be harmful to your hard drive. Use it only if absolutely necessary.

Step 1: Prepare Your Laptop (If Applicable)

If you’re using a laptop, remove the battery and plug it into the mains.

Step 2: Force a Startup Repair

  1. Start Windows as usual.
  2. While it’s booting up, unplug the power to force an automatic startup repair on the next boot.

image1

Note: This may take a few attempts. If you see a screen with safe boot options instead, keep trying until you reach the Windows Error Recovery screen.

  1. Once you see the Windows Error Recovery screen, select Launch Startup Repair (recommended).

image2

Windows will then begin loading files and initiate the startup repair process.

Step 3: Trigger the Command Prompt

  1. Wait a few minutes. A pop-up will appear asking, “Do you want to restore your computer using System Restore?” Click Cancel.
  2. After another 5 to 10 minutes, a message will appear saying, “Startup Repair cannot repair this computer automatically.”
  3. Click on View problem details.
  4. In the details window, look for the final .txt link, usually addressed as X:\windows\system32\en-US\erofflps.txt. Click on this link to open Notepad.
  5. In Notepad, go to File > Open.
  6. Navigate to C:\Windows\System32.
  7. Change the Files of type dropdown to All Files.
  8. Locate sethc.exe, right-click on it, and rename it to sethc1.
  9. Find cmd.exe, right-click on it, and select Copy. Then, rename the copied file to sethc.
  10. Close Notepad and press Cancel on the Startup Repair window to restart Windows.

Step 4: Reset Your Password

  1. Let Windows start normally and wait until the user profile login screen appears.
  2. Press the Shift key five times quickly. This will open the Command Prompt, thanks to the renamed cmd.exe.
  3. In the Command Prompt, type net user and press Enter to see a list of users.
  4. Identify your user from the list. To reset their password, type: net user USERNAME * (Replace USERNAME with the actual username from the list.)
  5. Enter a new password for the user, or leave it blank and press Enter.

Step 5: Log Back In

You should now be able to log back into your account with the new password. Welcome back to Windows!