Windows password Archives

Winsage

November 30, 2025

Microsoft Confirms Windows Password Failure—No Fix Available

Microsoft has issued guidance on workarounds for users experiencing issues with recent Windows 11 updates, particularly a missing password icon on the lock screen. The icon is functional but not visible, and Microsoft suggests users click randomly on the lock screen to potentially access it. This issue affects all PCs running specific update versions, including KB5068861, KB5067036, KB5070773, KB5066835, KB5065789, KB5068221, KB5065426, and KB5064081, released between August 29 and November 11. The problem has been described as widespread, though Microsoft has not disclosed the number of affected users.

Winsage

October 26, 2025

Microsoft admits File Explorer Preview pane won’t work in Windows 11 25H2 for internet files by default

Microsoft has disabled the preview feature for files downloaded from the internet in the File Explorer Preview pane for Windows 11 versions 25H2 and 24H2, as well as in the latest Windows 10 update, due to security concerns. Users can still preview locally created files, but attempting to preview internet-downloaded files will trigger a warning message. The decision to disable previews for these files is intended to prevent potential security vulnerabilities, specifically a risk of NTLM hash leaks. Files marked with a “Mark of the Web (MotW)” tag, which indicates they were downloaded from various sources, will be blocked from previewing. Users can unblock previews for trusted files by right-clicking the file, selecting Properties, and checking the ‘Unblock’ option. A PowerShell script is also available to unblock all files in a specific directory. This update is part of the Windows October 2025 Patch Tuesday.

Winsage

May 1, 2025

Windows Warning — Microsoft Confirms Old Passwords Still Work To Login

Microsoft has confirmed that users can log into their Windows accounts using old passwords that have been changed and revoked under certain conditions. This behavior is classified as a feature rather than a security vulnerability. The issue arises from the Remote Desktop Protocol (RDP), which allows remote access to Windows machines. An independent security researcher discovered that after changing his password, he could still access his machine using the old credentials, even from new devices. Microsoft's documentation was updated to explain that credentials are verified against a local cached copy before network authentication, allowing continued access with the old password. Microsoft stated that this design ensures at least one user account can always log in, regardless of system offline status, and confirmed there are no plans to change this behavior.

Winsage

April 10, 2025

Windows Hello logins are borked for some users after latest update

Windows Hello, a feature in Windows 10 that allows for face unlock functionality, has encountered a bug following the latest update (Build 26100.3775) released on April 8th. This bug affects some users' ability to use face unlock and PIN logins after resetting their PC while retaining local files and enabling System Guard Secure Launch or DRTM. Although users should still be able to access their PCs using their Windows password, the issue is concerning for those who rely on Windows Hello. The bug is considered an edge case, impacting only a limited number of users, and regaining access is possible with a password manager or IT support. Users can re-establish Windows Hello by performing a new face scan once they regain access.

Winsage

March 26, 2025

Windows Passwords At Risk As New 0-Day Confirmed—Act Now

Windows users are facing multiple zero-day vulnerabilities affecting various operating system versions, including Windows 7, Server 2008 R2, and Windows 11 v24H2, with no official patch available from Microsoft. A new vulnerability allows attackers to obtain NTLM credentials by having a user view a malicious file in Windows Explorer. This vulnerability is distinct from a previously reported incident and remains undisclosed until Microsoft issues a patch. NTLM vulnerabilities can enable credential theft, and while not classified as critical, they have been exploited in real-world attacks. Users may need to wait for the next Patch Tuesday for an official fix, but can utilize a micro-patch solution from ACROS Security's 0patch to address the vulnerability temporarily.

Winsage

July 15, 2024

How to change your Windows account password – gHacks Tech News

The steps to change a Windows password are outlined, including how to do so for both local and Microsoft accounts. The new password is immediately active and must be used for the next sign-in. If the Password section is not visible in Settings, a specific action is required to make it appear. Advanced users have alternative methods to change or reset passwords.