[Tro yeh]

Microsoft is making every effort to make its Windows 10 Fall Creators Update bigger than ever before by beefing up its security practices and hardening it against hackers and cyber attacks in its next release.
Microsoft is finally adding one of the much-requested features to Windows 10: Pin and Password recovery option directly from the lock screen.
Yes, the next big update of Windows 10, among other features, will allow you to recover your forgotten pin and password, allowing you to reset your Windows password directly from the lock screen.
In Windows 10 Fall Creators Update, you will see "Reset password" or "I forgot my PIN" options on the login screen along with the sign-in box, mspoweruser confirmed.
windows-10-password-reset
Once you click on the option, Windows 10 will take you to the OOBE where Cortana will help you reset your password, after you successfully verify your identity using either your secondary email, your phone number, or Microsoft Authenticator.
windows-10-password-reset
A verification code will be sent to the option you chose, and once you entered and verified your identity, you will be able to reset the password and regain access to your computer directly from the login screen.
The tech giant is currently testing this new feature in its Windows 10 Insiders build 16237, making it much easier for them to recover their Microsoft Accounts.
You can use this option if you have either activated the Windows Hello authentication system or have a PIN to secure your account.

>>Read More

[aana]

I'm not sure how i feel about this update considering there are already so many privacy issues with windows 10.. wouldn't this mean they would be archiving your password in a database? or would it just be pulling it from your account directly? because my computer passwords are not stored anywhere as far as i know... when we first upgraded to windows 8.1 i used the local login now work uses windows 10.

We use windows 10 at work and i absolutely hate its good for the average user but if you are doing anything remotely illegal i would see this as huge red flag as a way to beat encryption on your computer... but i am not an expert in this field so it may be my paranoia but at home ill stick with my full disk encryption on my *nix like O/S

[Tro yeh]

because my computer passwords are not stored anywhere as far as i know...

You really don't know that, Internet is hideous.

[Mr. Robot]

because my computer passwords are not stored anywhere as far as i know...

Whenever you login your password can be recovered from RAM using mimikatz.

Chill.

[Tro yeh]

Whenever you login your password can be recovered from RAM using mimikatz.

Chill.

That is something i shouldn't know.
Ohh.. it's hard to handle now. xD

[Mr. Robot]

That is something i shouldn't know.
Ohh.. it's hard to handle now. xD

shouldn't know. ??

[Tro yeh]

shouldn't know. ??

yeah as of now i wasn't even sure if it gets stored somewhere or not.
simple words.
I trusted my windows. :'(

[Elitas]

Ofc your password gets stored. Windows stores it as a secure hash. Use a strong password and it won't be recoverable if someone looks through your computer.

[Trip2nite]

Windows passwords is irrelevant for offline accounts. You can literally liveboot linux and remove the password entirely.

[Mr. Robot]

Windows passwords is irrelevant for offline accounts. You can literally liveboot linux and remove the password entirely.

To be fair, you don't even need that.