Windows 11 local account password

[%a]

Hey so i just bought a new laptop with w11/home made a local account and put a password. just a question apparently on YouTube you can bypass the password and reset it? is this true? because having a password is clearly not secured.

[Bad 💀 Motha]

Resetting or wiping a WinOS local account pw has always been easy.
I've had to do it plenty of times over the years for people who forgot their local account pw.

Still, it's better then tying an Online Account to an actual PC.

[%a]

Αναρτήθηκε αρχικά από Bad 💀 Motha:

Still, it's better then tying an Online Account to an actual PC.

how come?

[kingjames488]

Αναρτήθηκε αρχικά από %a:

no im saying if i set a password, and if the laptop got stolen CAN someone get into my windows and view my files.

yes...

unless you encrypt your drive all of the files are just sitting there, all you have to do it take out the drive and plug it into another PC.

[Crashed]

Αναρτήθηκε αρχικά από %a:

Hey so i just bought a new laptop with w11/home made a local account and put a password. just a question apparently on YouTube you can bypass the password and reset it? is this true? because having a password is clearly not secured.

From a system security perspective a local account is no more or less secure than a Microsoft Account. For Microsoft Account login Windows still creates a local account behind the scenes and caches your account password in it for offline login.

[Bad 💀 Motha]

Αναρτήθηκε αρχικά από Crashed:

Αναρτήθηκε αρχικά από %a:

Hey so i just bought a new laptop with w11/home made a local account and put a password. just a question apparently on YouTube you can bypass the password and reset it? is this true? because having a password is clearly not secured.

From a system security perspective a local account is no more or less secure than a Microsoft Account. For Microsoft Account login Windows still creates a local account behind the scenes and caches your account password in it for offline login.

It doesn't cache the password. The Microsoft account uses a one-time code, not your actual password. And after done this it will ask you to create a PIN to log into the PC; not the password.

[Crashed]

Αναρτήθηκε αρχικά από Bad 💀 Motha:

Αναρτήθηκε αρχικά από Crashed:

From a system security perspective a local account is no more or less secure than a Microsoft Account. For Microsoft Account login Windows still creates a local account behind the scenes and caches your account password in it for offline login.

It doesn't cache the password. The Microsoft account uses a one-time code, not your actual password. And after done this it will ask you to create a PIN to log into the PC; not the password.

If you're offline you can still log in with the last password used.

[Bad 💀 Motha]

It uses the PIN. You have a PIN for each device.
I use my Work Laptop all the time off-line this way.
There is no password.

[Thesoxplace]

Yes it can be bypassed, there are tools out there, some shady, some real, I work in a school system and have legit tools that unlock local accounts even with tpm enabled.

[%a]

So should I put a local password or not getting mixed messages

[Inhume]

Any decent PE(preinstalled environment) Software will bypass any windows password.

[Talby]

Αναρτήθηκε αρχικά από Omega:

Αναρτήθηκε αρχικά από %a:

no im saying if i set a password, and if the laptop got stolen CAN someone get into my windows and view my files.

Yes, they can simply pull out the drive and pull all files from it using another machine, unless you enable Bitlocker or some other form of disk encryption. Bitlocker is only available for the Pro versions of Windows.

VeraCrypt[www.howtogeek.com] should also work well, I have used it on win10 but should work just as well on 11...

[Crashed]

Αναρτήθηκε αρχικά από Talby:

Αναρτήθηκε αρχικά από Omega:

Yes, they can simply pull out the drive and pull all files from it using another machine, unless you enable Bitlocker or some other form of disk encryption. Bitlocker is only available for the Pro versions of Windows.

VeraCrypt[www.howtogeek.com] should also work well, I have used it on win10 but should work just as well on 11...

Does it support UEFI and Secure Boot or would you have to enable CSM and bypass both Secure Boot and TPM (since TPM 2.0 doesn't support legacy BIOS)?

[Bad 💀 Motha]

Αναρτήθηκε αρχικά από %a:

So should I put a local password or not getting mixed messages

That is fine but that alone don't stop anyone from getting into the system or files.

Use WinOS Pro + BitLocker with TPM + SecureBoot enabled in BIOS and set a BIOS password

[%a]

i dont have important files, HOWEVER i do have steam installed but if i change my password and do the steam guard wipe thing that means no one can get into my account right after accessing the hard drive?

[Bad 💀 Motha]

Αναρτήθηκε αρχικά από %a:

i dont have important files, HOWEVER i do have steam installed but if i change my password and do the steam guard wipe thing that means no one can get into my account right after accessing the hard drive?

Sure I could, if you left it configure to remember your login on the app, I could easily get into that if I had your drive.

99% of users don't have "important files" but that's not the issue, the issue at-hand is all of your precious online accounts. And most users set the various apps and websites they use to "remember me" to avoid the inconvenience of entering that info all the time. Think of what you could potentially lose if you lost access to all of those.

The only real reason to use a Windows Account PW is to keep others who share the system from going onto your account. If a person was able to steal your actual device, then they have plenty of time to sit down and get around your passwords and such.

However they most likely couldn't get around a BIOS password + Disk Encryption.