Tjyylli

I managed to forget my Windows 10 user password. I searched here, but most answers refer to solution when no encryption is present.

The problem I have is that I have standard Windows encryption enabled on my system. Is it still possible to reset user password without losing the encrypted data? I do remember my Bitlocker password though.

And if it's not possible, would all all my data would be lost if I use the tricks to reset user password?

The way encryption works depends on whether or not your device has built-in hardware based encryption or if you are utilizing software based encryption. More than likely, your device is either using pure software based encryption, or your encryption keys are stored in a Trusted Platform Module (TPM). The following answer assumes you have a local account that cannot be reset via online microsoft services. If your user account is a Microsoft Online linked account, absolutely try to reset you password using their services.

When you boot your device to your encrypted volume/drive, the encryption processes first load to allow a method to decrypt the data. Once you have successfully entered in the encryption access credentials, all of the data is then encrypted/decrypted between the disk and other components while you use the OS.

While you have your decryption credentials, you obviously cannot boot and retrieve files like you normally would with a forgotten windows password. In order to retrieve the files in that manner, you must first deactivate the bitlocker encryption through the Windows Control Panel. In order to do that, you must be able to log in.

Absolutely try all of the reset options you find. If those fail, your best option is to use another device and decrypt the drive, assuming you have your full encryption key. When the drive/volume has been decrypted, you will be able to access the files like you typically would via mounting the drive in a different OS or device. If you don't have the full encryption key, you're SOL if you can't remember or are unable to reset your windows password. You may run into additional issues if the standard secure boot features are enabled on your device due to how integrity checks are performed. Honestly, between the probable secure boot, bitlocker encryption, and forgotten password, it'll take a lot of research and effort to successfully bypass each of the security features to reset your password. Decrypting the drive/volume to copy your files is the best first step. After that, it will be easiest to create a fresh installation.

Pro tip: when you are using encryption, don't forget your passwords. For data backup, you can use bitlocker encryption with a cloud backup service. That way even if you run into this problem on another device, you still have a secure cloud backup that you can access so you don't lose your files.

@user1880405 Hey I have the same problem how did you manage to solve it?

First of all, you have to boot your computer from a WinPE USB drive with BitLocker module support. When you get to the Command Prompt, run the following commands to decrypt your BitLocker encrypted drive:

manage-bde -unlock C: -RecoveryPassword  put-your-bitlocker-recovery-key-here

manage-bde -off C:

When it's done, you can use some password recovery disks like Offline NT Password & Registr Editor, Elcomsoft System Recovery, Kon-Boot or sticky keys exploit to reset your forgotten Windows password.

After logging back into the system, all your files are accessible but the EFS files remain encrypted, you have to import the EFS private key certificate to decrypt them. If you haven't backed up the EFS certificate previously, you'll lose access to EFS files completely.

Of course, when your Windows password is simple or short, your best option is recovering the password using Ophcrack. After finding the original password, you can login and access the EFS files without having to import EFS private key certificate any more.