Your Windows password is checked only after the system has loaded and protects nothing but your sign-in. To make a PC or laptop refuse to start Windows without a password, you need a password on computer startup: in the UEFI (BIOS), in BitLocker or with a boot protection program such as Disk Password Protection.
- Windows password or PIN: protects the sign-in, not the files.
- BIOS/UEFI password: free, but stored in the computer, not on the drive.
- BitLocker startup PIN: encrypts the system drive, only in Windows Pro, Enterprise and Education.
- Disk Password Protection: a boot password on the drive itself, in any edition, Home too. It does not encrypt.
Startup password options compared
| Method | When it asks | Drive in another PC | Available |
|---|---|---|---|
| Windows password or PIN | at sign-in, after Windows loads | files readable if not encrypted | every edition |
| BIOS/UEFI password | at power-on | no password asked | any OS, free |
| Hard drive (HDD) password | at power-on | drive stays locked | some laptops and drives |
| BitLocker startup PIN | before Windows boots | data stays encrypted | Pro, Enterprise, Education |
| Disk Password Protection | after BIOS/UEFI, before Windows | asked when it boots from this drive | every edition, Home too |
Boot password with Disk Password Protection
Disk Password Protection writes the boot password to the drive itself and asks for it after the BIOS/UEFI starts, before Windows loads.
- Any Windows edition, including Home; BIOS and UEFI, MBR and GPT
- Still asked when the drive boots in another PC and after uninstalling the program
- Stealth mode: no password screen, the PC looks frozen
- On and off in seconds, without reinstalling Windows
- Does not encrypt the drive
- Booting from a USB stick skips the password
- No master password, only your hint
This is not encryption. Booted from a USB stick or connected to another PC as a second drive, the disk is readable without the password. Block USB boot and encrypt the data, as shown below.
BIOS password vs Windows password: which one do you need?
For important data, combine the methods: see How to protect your laptop and data from unauthorized access.
How to set a password on computer startup with Disk Password Protection
Install boot protection
Get it from the download page, run the standard setup wizard and start the program from the Start menu.
Under "Drives and partitions", the drive Windows starts from is marked as "Bootable drive". Select it and click "Install boot protection..." in the "Basic Tasks" panel, or right-click the drive and choose the command.
Type it in "Enter password" and "Repeat password". You'll type it at every start, so pick a memorable passphrase (How long should a password be).
The optional "Password hint" is shown only when you remove the protection, not at boot. "Edit welcome message" changes the prompt text (Latin characters only).
The program installs the protection and reports the result.
If Windows or another operating system starts from a removable drive, install the protection on that drive.
The program can also hide partitions behind a password: How to hide a disk partition.
Check that it works
Restart the computer. Right after the BIOS (or UEFI) starts, a password prompt appears. Type the password and press Enter to start Windows. The prompt returns at every boot until you remove the protection.
Stealth mode
Tick “Enable hidden protection mode” in the wizard, and the screen stays blank while you type: the computer looks frozen, so nobody can tell it is protected. The correct password and Enter still boot Windows.
Remove boot protection
In Disk Password Protection, right-click the protected drive and choose the command to remove boot protection. The same menu changes the boot password.
Enter the password and confirm. Windows now starts without asking for it.
How to make the protection stronger
For sensitive data, add two steps to the boot password:
On UEFI computers, boot protection in Disk Password Protection 5.6 works together with BitLocker.
FAQ
How do I set a password on computer startup without extra software?
In the UEFI (BIOS): open the setup with the key shown at power-on (often Del or F2), go to Security and set a power-on (user) and a supervisor password. Menu names vary by manufacturer. On Windows Pro, BitLocker with a startup PIN also works.
What if I forget my startup password?
BitLocker: use the recovery key. BIOS password: on a desktop, usually cleared with the CMOS battery; a laptop may need a service center. Disk Password Protection has no master password, so set a hint in advance.
Can a startup password be reset or bypassed?
A Disk Password Protection boot password survives a BIOS reset, uninstalling the program and moving the drive to another computer, but booting from USB skips it: block that with a UEFI password. A BIOS password is often reset on desktops. Only encrypted data stays unreadable without the password or recovery key.
Does the boot password work with Windows 11, UEFI and Secure Boot?
Yes. Disk Password Protection 5.6 supports Windows 11, 10, 8.1, 8 and 7 SP1 (Home too), Windows on ARM (64-bit), BIOS and UEFI, MBR and GPT. Its UEFI modules are signed with Microsoft UEFI CA 2023 and work with Secure Boot on. On some Secured-core PCs (many Copilot+ PCs are), first allow the Microsoft third-party UEFI CA in the UEFI settings, with Secure Boot left on. Keep the BitLocker recovery key at hand: changing UEFI settings can trigger recovery. More on the boot protection page.
No limitations during the trial. Windows 11, 10, 8.1, 8 and 7 SP1.
Free Trial Pricing & Buy