Password Reset Disk Works Only If You Made It Before Lockout
Of all the ways back into a local Windows account, the reset disk is the only one with zero side effects: no lost files, no lost saved passwords, nothing. Its single, unforgiving condition is timing. It must exist before the day you need it - this page explains why, and what to do with that knowledge either way.
By Technical AnshuWindows 10 / 115 minute read
Watch the full video - Reset Forgotten Windows Password, step by step
A password reset disk is a small USB drive holding one file, userkey.psw, created through the Forgotten Password Wizard. Windows builds it while you are signed in, and from then on it acts as a physical key for that one account on that one PC. If you are reading this before any lockout, you are five minutes from permanent peace of mind. If you are reading it locked out, read the honest second card first.
Forgotten Password Wizard - what the sign-in screen offers with the disk inserted
Insert the reset disk, then on the sign-in screen:
Wrong password once, then choose Reset password
Wizard reads: userkey.psw
Set a new password, then sign in with it
Disk made earlier for this account on this PCNew password set - nothing else lostCLEANEST ROUTE
Disk made for a different account or PCWizard refuses it - keys are not transferableNO MATCH
No disk exists yetCannot be created from the lock screen - everTOO LATE
Caption: the disk is a key cut in advance. Windows deliberately offers no way to cut one from outside.
⚖️ Ethics first: every route on this page is for a computer you own, or one its owner has asked you to recover. Using the same steps on someone else's PC without permission is illegal in most places, including under India's IT Act - and several of these routes permanently destroy the owner's encrypted files even when they "work". If the PC is not yours, stop here and hand it back.
1
How the Reset Disk Works
The mechanism is simpler than it sounds, and understanding it explains the timing rule:
While you are signed in, Windows generates a key pair for your account. One half stays protected inside Windows; the other half is written to the USB as userkey.psw.
At the sign-in screen, the wizard finds that file, matches it against the half inside Windows, and unlocks the password change function - not the account itself.
You set a new password and sign in normally, with every file and saved secret intact, because this is a legitimate password change, not a forced reset.
That last point is what makes the disk unique in this entire set: because the change is authorised by the key, the things tied to your password - EFS files, saved credentials, browser passwords - survive. No other fallback route can say that.
2
The Before Rule, Stated Without Sugar
If the disk does not already exist, this route is closed, and no trick reopens it:
The wizard can only run inside a signed-in session. There is no version of it on the lock screen, in recovery, or from another PC.
A disk made for a different account, or the same account on a different PC, will not match. The file is not a master key.
Any website or tool offering to "create a reset disk for a locked PC" is selling you one of the offline methods from the last-resort page under a friendlier name - with the same costs.
So if you are locked out today with no disk, close this page and use the routes that remain: security questions, another admin, or the honestly-priced offline path. Then, the day you get back in, make the disk - it is step one of this set's prevention stack precisely because of days like today.
3
Create One Now - Five Calm Minutes
For every local account on every PC you look after, while times are good:
Plug in any small USB drive - it does not get erased, but dedicate one anyway and label it.
Open the Control Panel, go to User Accounts, and choose Create a password reset disk from the side list.
Follow the Forgotten Password Wizard, enter your current password when asked, and finish.
Check the drive now contains userkey.psw, then store the drive somewhere safe - not in the laptop bag.
Two properties worth knowing: the disk keeps working even after you change the password later, so you never need to remake it; and it only ever serves that one account on that one machine, so a family PC with three local accounts wants three labelled disks or - better - the fuller prevention stack from the last card.
4
Guard the Disk Like a Key, Because It Is One
The honest security footnote, so the cure never becomes the disease:
Anyone holding the disk can reset your password and sign in as you. Windows asks them nothing else. Treat it like a house key, not like a cable.
It does not expire and cannot be revoked individually - if the disk is lost, the real fix is to change the account password and create a fresh disk, which retires the old one's match.
On a PC with BitLocker or sensitive work data, weigh it honestly: the disk is a deliberate, physical back door you chose. Many people accept that trade at home and refuse it at work - both answers are reasonable.
Used with open eyes, the reset disk remains the kindest recovery Windows offers. It simply refuses to be invented in an emergency - which is rather the point of a key.
5
Never Get Locked Out Again - the Five-Minute Stack
Every recovery story on this page ends the same way: with the boring little setup that makes the next lockout a two-minute job instead of a lost weekend. Do it while you are signed in and everything is calm:
Local account? Create a password reset disk now (Case 3 shows how) and keep the USB somewhere safe.
Microsoft account? Open your account page and make sure the recovery phone number and backup email are current.
Save the BitLocker recovery key in two places - your Microsoft account plus a printed copy or a USB kept away from the PC.
Add a second administrator account with its own strong password, stored in your password manager.
Store the passwords themselves in a password manager, not in memory, not in a notebook, not in a file called passwords.txt.
Watch the Complete Process in the Video
Watch the video for the wizard on screen - and if you are currently signed in anywhere, pause it and make your disk first.
Can I create a password reset disk after I am already locked out?
No. The Forgotten Password Wizard runs only inside a signed-in session, by design. A locked-out local account without a disk must use another route - security questions, another administrator, or an offline method with its stated costs. Anyone claiming to create one for a locked PC is describing an offline method under a nicer name.
Does a password reset disk still work after I change my password?
Yes. The disk is matched to the account, not to one specific password, so it remains valid across later password changes. You only need to create it once per account per PC - unless the disk is lost, in which case change the password and make a fresh disk to retire the old one.
Will using a reset disk delete my files or saved passwords?
No, and that is its great advantage. Because the disk authorises a genuine password change, everything tied to your password - EFS-encrypted files, saved credentials, browser passwords - survives intact. Forced resets by another admin or by offline tools cannot promise this.
This guide is based on the Technical Anshu video linked above - Stuck on a step? Ask in the video comments - you will get an answer