How to Factory Reset a Locked Windows 11 Laptop Without the Password: Shift+Restart WinRE, BitLocker Recovery Key & USB Clean Install Guide (2026)

Verdict: To factory reset a locked Windows 11 laptop without signing in, wake the login screen, hold the physical Shift key, click the bottom-right Power icon > Restart, and choose Troubleshoot > Reset this PC > Remove everything inside Windows Recovery Environment (WinRE). If BitLocker demands a 48-digit key you cannot retrieve, boot from a Windows 11 USB installation drive and delete all existing drive partitions to reinstall cleanly.

Getting locked out of a Windows 11 laptop happens for mundane reasons: a forgotten local account password on a spare notebook, a corrupted Windows Hello TPM PIN cache after a motherboard repair, or a secondhand laptop whose previous owner forgot to wipe their profile. Before erasing the entire solid-state drive, however, take sixty seconds to verify whether you can reset your PIN non-destructively—because a lock-screen factory reset without credentials permanently erases every unbacked-up photo, document, and installed program on the system drive.

Editorial basis: This refreshed guide replaces our July 2026 article with verified procedures anchored in Microsoft’s Windows Recovery Options documentation, Microsoft’s BitLocker Recovery Key guide, and Windows Recovery Environment (Windows RE) technical specifications.

Choose the Right Lockout Recovery Path First

Pre-Check: Try Non-Destructive Microsoft Account PIN Recovery & Plug Into AC Power

Before wiping your SSD, confirm two essentials:

1. Check for lock-screen Microsoft Account recovery: Most Windows 11 Home and Pro laptops configured since 2022 link sign-in to an online Microsoft Account (@outlook.com, @hotmail.com, or your personal email). Connect the laptop to your home Wi-Fi using the network icon in the bottom-right corner of the lock screen, then click I forgot my PIN or Sign-in options > Password / I forgot my password. If you can verify your identity via your authenticator app, passkey, or backup email (see how recovery factors differ in our passkeys vs authenticator apps vs SMS 2FA recovery comparison), you can set a new PIN on the spot and keep 100% of your files.
2. Connect the original AC charger: Windows Recovery Environment refuses to start a factory reset on low battery—and losing battery power halfway through repartitioning leaves the laptop unbootable without a USB installer. Plug the AC adapter into the wall first (if your battery indicator stays stuck at 0% or refuses to charge, see fixes for a Windows laptop plugged in, not charging).

Method 1: Reset from the Windows 11 Login Screen (Shift + Restart into WinRE)

As detailed in Microsoft’s Windows Recovery Environment technical reference, Windows 11 stores a standalone recovery partition (WinRE) directly on your SSD so you can service or reset the operating system without logging into an administrator desktop session.

1. Power on the laptop and wait for the Windows 11 lock screen to load. Click once or press the Spacebar so the password/PIN box and bottom-right corner icons appear. (If your built-in trackpad is unresponsive on the login screen, plug in any wired USB mouse or use the Tab and Enter keys; you can troubleshoot a non-working laptop touchpad after Windows finishes reinstalling.)
2. Press and hold down the physical Shift key on your keyboard.
3. While keeping Shift held down continuously, click the Power icon in the bottom-right corner of the screen and click Restart. (Click Restart anyway if Windows warns that someone else may be signed in.)
4. Keep holding Shift until the screen turns blue and displays Choose an option, then release the key.
5. Select Troubleshoot > Reset this PC.
6. Select Remove everything. Why not “Keep my files”? In current Windows 11 builds, choosing Keep my files from WinRE prompts for an existing administrator account password (and BitLocker key, if encrypted) to prevent a stranger who steals a signed-out laptop from resetting the OS while browsing your private Documents folder. Without the password, Remove everything is mandatory.
7. Choose your reinstallation source as explained in Microsoft’s recovery options guide:
   • Cloud download: Downloads a fresh ~4 GB Windows 11 image directly from Microsoft’s servers over Wi-Fi or Ethernet. Best when your local system files are corrupted or outdated.
   • Local reinstall: Rebuilds Windows 11 from the existing recovery image stored on the SSD. Faster (usually 20–35 minutes) and works completely offline.
8. On the Additional settings screen, click Change settings if you need to toggle drive scrubbing:
   • Clean data = Off (“Just remove my files”): Fast standard format. Choose this when you are keeping the laptop for yourself.
   • Clean data = On (“Fully clean the drive”): Overwrites free sectors across the entire drive, which can take 1 to 2+ hours. Choose this when selling, donating, or returning the laptop.
9. Click Confirm, then click Reset. Your laptop will restart several times before arriving at the brand-new Windows 11 Out-of-Box Experience (OOBE) language setup screen.

What If Shift + Restart Doesn’t Open the Blue Recovery Menu?

If the login screen freezes before the Power icon appears, Windows includes an automatic fail-safe trigger: power the laptop off completely by holding the power button for 10 seconds, turn it back on, and as soon as the spinning dots appear beneath the manufacturer logo, hold the power button again to force it off. Repeat that interrupted boot twice; on the third power-on, Windows automatically enters “Preparing Automatic Repair” and opens the blue WinRE menu (Advanced options > Troubleshoot > Reset this PC).

Handling the 48-Digit BitLocker Device Encryption Prompt

Starting with Windows 11 24H2 and continuing across current 2026 laptops, Microsoft enables Device Encryption (BitLocker) by default on nearly all modern Windows 11 Home and Pro machines. Depending on your TPM security state and option selection, WinRE may stop and ask for a 48-digit numerical BitLocker recovery key.

• If this is your own laptop: Grab your smartphone or another computer and sign in at Microsoft’s official BitLocker Recovery Key portal instructions (account.microsoft.com/devices/recoverykey) using the Microsoft Account originally set up on the laptop. Match the 8-character Key ID shown on the laptop screen and type the corresponding 48-digit number. (Work or school laptops store keys inside your organization’s Entra ID / aka.ms/aadrecoverykey portal instead.)
• If you bought the laptop used or cannot access that Microsoft Account: Note that clicking Troubleshoot > Reset this PC > Remove everything normally bypasses decrypting the protected volume by formatting it—unless WinRE itself is stored inside the encrypted partition or fails with “There was a problem resetting your PC.” Whenever WinRE blocks you with BitLocker or throws an error, skip straight to Method 2 below. Formatting the SSD from an external USB installer wipes the encrypted BitLocker container completely without needing the 48-digit key (all prior data inside that container is permanently destroyed).

Method 2: Clean-Reinstall Windows 11 Using a Bootable USB Flash Drive (100% Reliable)

When Reset this PC fails with “There was a problem resetting your PC — No changes were made,” when the recovery partition is missing, or when BitLocker locks out local tools, performing a clean installation from a USB flash drive works every time.

Step A: Create the Windows 11 USB Installer on Another Working Computer

1. Plug an empty 8 GB or larger USB flash drive into any working Windows PC (back up anything on that thumb drive first, as the installer erases it; if you are later repurposing an external drive for everyday file backups, see how to format an external SSD for Mac and Windows).
2. Visit Microsoft’s official Download Windows 11 software page (microsoft.com/software-download/windows11), scroll to Create Windows 11 Installation Media, and download MediaCreationTool.exe.
3. Run the tool as Administrator, accept the license terms, leave “Use the recommended options” checked (or select Windows 11 English 64-bit), choose USB flash drive, and wait 10–15 minutes while it builds the bootable UEFI drive.

Step B: Boot the Locked Laptop from USB Using Your Brand’s Boot Menu Key

Shut the locked laptop completely off, plug the finished Windows 11 USB stick into a direct USB port, press the power button, and immediately tap your laptop brand’s One-Time Boot Menu key two times per second before the Windows logo appears:

Step C: Delete Existing Partitions & Install Windows 11 Cleanly

1. Highlight your UEFI: [USB Flash Drive Name] entry in the boot menu and press Enter.
2. Choose your language and keyboard layout, click Next, and select Install Windows 11 (check “I agree everything will be deleted including files, photos, and apps” on newer 24H2+ setup screens, or choose Custom: Install Windows only (advanced) on classic setup screens).
3. When asked for a product key, click I don’t have a product key if prompted. Almost every factory Windows 10/11 laptop stores its OEM digital license key permanently inside a UEFI MSDM firmware table; Windows Setup reads it automatically and activates itself as soon as you connect to Wi-Fi!
4. On the Select location to install Windows 11 partition table, select each partition on Drive 0 (Drive 0 Partition 1: EFI, MSR, Primary / BitLocker Encrypted, Recovery) one by one and click Delete partition until the entire internal SSD shows a single line reading Drive 0 Unallocated Space. (Make sure you do not delete Drive 1, which is your USB flash drive!)
5. Highlight Drive 0 Unallocated Space and click Next. Windows automatically creates clean EFI, MSR, Windows, and WinRE partitions and installs a fresh copy of Windows 11 in roughly 15 minutes.

Troubleshooting tip if “Drive 0” looks completely blank during USB Setup: On many 11th- through 14th-Gen Intel Core and Core Ultra laptops (especially ASUS, Acer, Dell, and HP), Intel Volume Management Device (Intel VMD / RST) hides the NVMe SSD from generic Windows USB installers. Reboot into BIOS (F2/F10), temporarily switch VMD Controller to Disabled (or copy the unzipped Intel RST VMD iaStorVD.inf folder onto your USB stick and click Load driver on the partition screen), and your NVMe drive will appear immediately.

Important Security Boundaries: What a Factory Reset Will NOT Remove

• UEFI / BIOS Supervisor Passwords: Stored on a dedicated non-volatile motherboard security chip rather than the SSD. Wiping or even replacing the SSD will not clear a firmware BIOS password.
• Corporate / School Windows Autopilot (MDM) Locks: If a secondhand laptop belonged to a company or school district that never removed its hardware hash from Microsoft Intune Autopilot, clean-installing Windows 11 from USB works fine until the laptop touches Wi-Fi during setup—at which point it instantly displays “Welcome to [Company Name]! Sign in with your work or school account.” Only the original organization’s IT department can release an Autopilot hardware ID.

Frequently Asked Questions

Will factory resetting a locked laptop force me to buy a new Windows 11 product key?

No. Factory laptops include an OEM license embedded in the motherboard UEFI firmware, and custom PCs activated once with a retail license carry a hardware-linked digital entitlement on Microsoft’s activation servers. Reinstall the exact same edition (Windows 11 Home or Windows 11 Pro) and it will reactivate automatically online.

Can deleted files be recovered after choosing “Remove everything” on an SSD?

In nearly all modern laptop scenarios, no. Windows issues NVMe TRIM (Deallocate) commands to the SSD controller during formatting—and if Device Encryption / BitLocker was active beforehand, wiping the volume header permanently destroys the cryptographic master key, rendering old blocks unreadable gibberish even before Clean data runs.

Why did my freshly reset laptop ask for Wi-Fi drivers during setup?

Clean USB installations use Microsoft’s inbox driver library, which occasionally lacks drivers for brand-new Wi-Fi 7 (BE200 / MT7925 / QCNCM865) cards. Either plug in a USB-to-Ethernet adapter or connect your smartphone via USB cable with USB Tethering turned on during initial setup so Windows Update can pull all missing chipset, touchpad, and Wi-Fi drivers automatically.

Editorial basis: Substantive refresh of Post ID 38465 referencing Microsoft Support (Recovery options in Windows), Microsoft Support (Find your BitLocker recovery key), and Microsoft Learn (Windows RE Technical Reference), verified November 6, 2026.