How to Create a Password Reset Disc in Windows
Locked out of your own computer is one of the most frustrating tech experiences imaginable — especially when it's your own local account password you've forgotten. Windows has a built-in solution for this scenario that most users never set up until it's too late: the password reset disc. Here's exactly how it works, what you need, and what shapes whether it's the right safety net for your situation.
What Is a Password Reset Disc?
A password reset disc is a recovery tool created in advance — before you forget your password — that lets you regain access to a Windows local account without wiping your data or reinstalling the operating system. It's not a disc in the CD/DVD sense anymore; in modern Windows, it's typically created on a USB flash drive.
Think of it like a physical key to your account. If you lose the password, you insert the drive, follow the on-screen prompts, and create a new one. Simple in theory — but with several important nuances.
Who This Actually Works For
This is the first major variable: password reset discs only work with local Windows accounts. If you sign into Windows using a Microsoft account (the email-linked login that syncs settings across devices), this method does not apply. Microsoft account users reset passwords through Microsoft's website using their email and phone verification.
Password reset discs are specifically for:
- Users who set up Windows with a local account (no email required)
- Older Windows setups (Windows 7, 8, or Windows 10/11 configured without a Microsoft account)
- Shared computers where a local admin account is the primary login
If you're unsure which type you have, go to Settings → Accounts → Your Info. If it says "Local Account," this guide applies to you.
What You'll Need Before You Start
- A USB flash drive (any size — even 1 GB is more than enough; the file created is tiny)
- Access to the computer while you're still logged in — you must do this before you're locked out
- A Windows local account with a password set
You cannot create a password reset disc after you've already lost access. It must be done proactively. 🗝️
Step-by-Step: Creating the Password Reset Disc on Windows 10 or 11
Step 1: Plug your USB flash drive into your computer.
Step 2: Open the Control Panel — search for it in the Start menu. (Note: this option is not available through the newer Settings app.)
Step 3: Navigate to User Accounts → User Accounts.
Step 4: In the left-hand panel, click "Create a password reset disk."
Step 5: The Forgotten Password Wizard will launch. Follow the prompts — select your USB drive and enter your current password when asked.
Step 6: The wizard creates a small file called userkey.psw on the drive. When it finishes, click Close.
That's it. The drive is now your recovery key.
How to Use It If You Ever Get Locked Out
If you forget your password, here's what happens at the login screen:
- Enter a wrong password — Windows will then display the "Reset password" link below the field
- Insert your USB reset disc
- Follow the Password Reset Wizard to set a new password
- Log in with the new password
One critical detail: you only need to create the disc once. Even if you change your password afterward, the disc still works — Windows updates the recovery data automatically each time your password changes. You don't need to remake it.
Factors That Affect Whether This Method Suits Your Setup
| Factor | Impact |
|---|---|
| Account type (local vs. Microsoft) | Disc only works with local accounts |
| Windows version | Works on Windows 7, 8, 10, 11 — same general process |
| USB drive availability | Required; older optical discs are no longer supported in modern Windows |
| Multi-user systems | Disc works only for the account it was created under |
| Organizational/domain accounts | Domain-joined computers use IT admin tools, not this method |
Security Considerations Worth Understanding
A password reset disc is essentially a master key — anyone who has physical access to that USB drive can reset your Windows password without knowing the original. That's the tradeoff built into the design.
This matters more in some situations than others:
- Home users with physical security over their space: the risk is relatively low
- Shared living situations or offices: the drive needs to be stored carefully — not left in the machine or in an obvious place
- High-security needs: some users prefer not to create one at all and instead rely on alternative recovery methods like Windows installation media combined with administrator-level recovery tools, or simply ensuring their Microsoft account is set up for web-based recovery
There's also the question of the drive itself. If it fails, gets lost, or is accidentally formatted, your recovery option disappears with it. Labeling it clearly and storing it somewhere secure but memorable — not your laptop bag — is a practical consideration. 💾
When Password Reset Discs Don't Apply
Several common scenarios fall outside the scope of this tool:
- Microsoft account users — use account.microsoft.com for password recovery
- Windows Hello PIN — a PIN is separate from your password; forgetting a PIN uses a different reset path
- BitLocker-encrypted drives — disk encryption adds another layer; recovery keys for BitLocker are distinct from account password recovery
- Domain/enterprise environments — IT administrators manage account recovery through Active Directory, not local tools
The Part That Depends on Your Setup
The mechanics of creating a password reset disc are straightforward and consistent across Windows versions for local accounts. But whether it's the right recovery strategy for you depends on factors only you can assess — how your account is configured, who else has access to your machine, whether you're in a managed IT environment, and how you weigh the convenience-vs-security tradeoff of keeping a physical key to your account.
Understanding the tool fully is the starting point. What makes sense from there comes down to your specific situation. 🖥️