Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows auto login (Microsoft’s “automatic logon”) signs a selected local or managed account into the Windows console during startup, so the desktop appears without a credential prompt. The most straightforward documented method is Microsoft Sysinternals Autologon: run autologon.exe, enter the account details, and select Enable.
Important physical-security warning: after auto login is enabled, anyone who can use the computer at startup can enter that account and reach resources available through its connected networks. Use it only where the computer is physically secured and untrusted users cannot access it. Auto login is a convenience feature, not an additional security control.
What Windows auto login does—and what it does not do
Automatic logon tells Windows to submit stored credentials for a chosen account when the machine reaches the sign-in stage. If the credentials and account policy permit it, Windows opens that account’s desktop without waiting for you to type a password, PIN, or other sign-in factor. The mechanism is built into Windows; Microsoft Sysinternals Autologon is a small utility that configures it for you.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
This is different from Windows Hello. Hello still asks you to authenticate interactively with a PIN, fingerprint, or face. It can make sign-in quick, but it does not remove the sign-in step. Auto login is also different from making an online account “passwordless”: the operating system is still using account credentials behind the scenes, while the user interface skips the prompt.
#1 Best Overall
The instructions below apply to Windows 10 and Windows 11 in principle, but Microsoft notes that sign-in settings and available controls can vary with device configuration and policy. The normal sign-in settings page is Settings > Accounts > Sign-in options; that page is for interactive methods such as Hello, not for enabling the Sysinternals auto-logon mechanism.
Check the consequences before enabling it
- Anyone with physical access during or after startup can use the automatically logged-in session.
- That session may expose files, applications, saved credentials, and network locations available to the account.
- A person with local administrator rights can recover the stored auto-logon secret even when it is encrypted.
- Shared, portable, publicly accessible, or lightly supervised computers are poor candidates for this setting.
- If the account can reach company shares, cloud-synchronized folders, email, or other network services, those resources are available to whoever reaches the desktop.
- Locking the screen after startup still requires someone to unlock it later; it does not undo the exposure created by automatic logon at boot.
Microsoft describes the feature as a convenience. Decide first whether unattended access is acceptable; only then follow the setup steps. A practical candidate is a computer in a locked office or controlled room where every person who can touch it is trusted with the selected account. A family laptop, travel computer, reception-area workstation, or machine in a shared classroom usually deserves an interactive sign-in instead.
Cost and equipment requirements
Microsoft Sysinternals Autologon is free software. You do not need to buy a fingerprint reader, Hello-compatible camera, physical security key, or other accessory to configure automatic logon. The computer needs a supported Windows installation, an account that is allowed to log on at the console, and sufficient permission to run the configuration utility.
Those accessories support different sign-in choices. A Hello-compatible camera enables face sign-in, and a compatible fingerprint reader enables fingerprint sign-in. Microsoft also lists a physical security key as an interactive sign-in option. None of these devices enables auto login, and none is required for the procedure below.
Recommended method: Microsoft Sysinternals Autologon
Microsoft’s free Sysinternals Autologon utility configures Windows’ built-in automatic-logon mechanism. The current page identifies the utility as Autologon v3.10. Download it only from Microsoft’s official page: https://learn.microsoft.com/en-us/sysinternals/downloads/autologon. Avoid unofficial repackaged downloads, because the utility handles a logon credential.
Step 1: Obtain and start the utility
- Open the official Autologon page and download the utility package.
- Extract the downloaded archive if Windows presents it as a compressed file.
- Run
autologon.exe. Approve the Windows permission prompt if one appears.
Use the copy that matches your Windows environment as presented in the package, and keep the downloaded archive in a location you can identify later if you need to disable the setting. The utility displays an account dialog rather than changing the password-management page in Settings.
Autologon displays an account dialog. It does not prove that the supplied password is correct or that the account is allowed to log on locally. A successful-looking configuration therefore is not the same as a successful next startup. Plan to remain near the computer for the first restart so you can correct the setting or use a normal sign-in if the attempt fails.
Step 2: Enter the account information
- In the dialog, enter the user name, domain or computer context when requested, and the account password.
- Check the values carefully, especially the account context on a computer that uses domain credentials.
- Select Enable.
For a local account, make sure you identify the intended computer account rather than an account with a similar display name. For a domain account, use the domain context required by your organization. On a managed device, the administrator may restrict which accounts can log on locally or may apply a policy that overrides the setting.
The utility writes the settings needed by Windows to attempt automatic console logon for that account. It does not change the account’s password or convert the account to a different sign-in type. If the password is changed later, the stored automatic-logon credential may no longer match; update the Autologon configuration or disable it before testing another startup.
Step 3: Restart and verify the result
- Save open work and restart Windows normally.
- Allow the startup sequence to reach the sign-in stage.
- Confirm that Windows opens the intended account rather than stopping at a credential prompt or showing a logon error.
If Windows cannot authenticate the account, return to Autologon and correct the account details or disable the feature. Because the utility does not validate credentials in advance, this restart is the practical confirmation that the configuration and policy are compatible. Verify not only that the desktop appears, but also that it is the correct user profile and that expected local and network resources are available.
Do not treat the first successful boot as proof that every future boot will work. Domain authentication can depend on startup network timing, and policy changes, password changes, or account restrictions can alter the result.
Step 4: Bypass auto login once
To prevent automatic logon for a particular startup without removing the configuration, hold Shift before Windows performs the automatic logon. Windows then allows that logon to be bypassed for the current startup so another sign-in path can be used. This is useful when you need to choose another account, investigate a problem, or keep the configured account from opening for one session.
The timing matters: press and hold Shift during the part of startup immediately before the automatic logon occurs. If the desktop has already opened, the automatic logon has completed for that boot; use the normal lock or sign-out controls instead.
Step 5: Turn auto login off
- Run
autologon.exeagain. - Select Disable.
- Restart Windows and confirm that the normal sign-in screen returns.
Disabling the utility reverses the automatic-logon configuration. It does not delete the user account or change its ordinary password or Hello settings. If the computer is being transferred, moved to a shared area, or placed outside a controlled room, disable auto login before the move and verify the next boot interactively.
How the credential storage choices compare
Microsoft documents two ways to configure the same Windows mechanism. They differ substantially in exposure and usability.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →| Method | How it is configured | Credential exposure | Practical fit |
|---|---|---|---|
| Sysinternals Autologon | Run autologon.exe, enter the account details, then choose Enable. |
The password is stored as an encrypted LSA secret. Encryption reduces casual exposure, but a user with administrative rights can retrieve and decrypt it. | Preferred for a straightforward individual setup when the physical-security trade-off is acceptable. |
| Registry Editor | Manually configure Windows values under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, following Microsoft’s documented procedure. |
The password is stored in plaintext in the registry. | Advanced troubleshooting or tightly controlled administration only; it is more error-prone and exposes the password directly. |
Autologon is the safer of these two documented storage methods, but “safer” does not mean safe against a local administrator or someone who has obtained the computer. Microsoft’s Autologon documentation states: “Although the password is encrypted in the registry as an LSA secret, a user with administrative rights can easily retrieve and decrypt it.” Encryption protects against casual plaintext viewing; it does not make the credential inaccessible to an administrator.
Do not use the registry approach merely because it avoids downloading the utility. Manual editing creates additional opportunities for a wrong account context, misspelled value, incorrect password, or accidental change to an unrelated Winlogon setting. If an administrator has a documented reason to use it, follow Microsoft’s complete procedure and limit access to the registry and the exported configuration.
Advanced option: configuring the registry manually
Microsoft’s automatic-logon documentation describes direct Registry Editor configuration under the Winlogon key. This is not the recommended path for a general user because one of the required values stores the account password in plaintext.
If you are administering a managed machine and must use the documented registry procedure, read Microsoft’s complete instructions first, create an appropriate recovery plan, and treat the registry as sensitive data. A typo in a value name, account context, or password can prevent automatic logon or leave Windows waiting at the sign-in screen. Remove or protect the plaintext value as soon as your administrative process allows. Autologon’s encrypted LSA secret avoids plaintext storage but still does not prevent an administrator from recovering the credential.
The registry method can also be blocked by policy conditions. Microsoft specifically notes that an interactive logon banner can prevent it from working, and Exchange ActiveSync password restrictions prevent automatic logon. These restrictions are reasons to review the managed-device configuration rather than repeatedly editing registry values.
Auto login versus Windows Hello
| Characteristic | Automatic logon | Windows Hello |
|---|---|---|
| Desktop entry | Hands-free after startup; Windows attempts to sign in the selected account automatically. | Requires an interactive PIN, fingerprint, or face gesture. |
| Hardware requirement | No special sensor is required for the mechanism itself. | Face sign-in requires a Hello-compatible camera; fingerprint sign-in requires a compatible reader. |
| Physical-access posture | Someone at the powered-on computer can receive the configured account session without authenticating. | The user must still provide the configured Hello factor. |
| Where it is configured | Sysinternals Autologon or Microsoft’s advanced registry procedure. | Settings > Accounts > Sign-in options. |
Choose Hello when you want faster authentication while retaining an authentication step. Choose auto login only when removing that step is worth the resulting physical-access exposure. A PIN, fingerprint, or face gesture may be more convenient than a password while still requiring the person at the keyboard to authenticate. A physical security key listed by Microsoft is another interactive sign-in option; it is not an auto-login device and is not needed for this procedure.
Troubleshoot a failed or missing automatic sign-in
Windows still shows the sign-in screen
- Reopen Autologon and verify the account details. The utility does not test credentials or local-logon permission before you select Enable.
- Confirm that the account is permitted to log on at the console and that a policy has not disabled automatic logon.
- If you used the registry procedure, check for a configured interactive logon banner; Microsoft identifies that as a condition that can stop the registry method.
- Check whether Exchange ActiveSync password restrictions apply. Microsoft says those restrictions prevent automatic logon.
- Make sure the account password has not changed since the utility was configured. Re-enter the current credential or disable the feature while you investigate.
- Check whether the computer is waiting for a different account context. A local account and a domain account with the same user name are not interchangeable.
If the machine stops at a credential prompt, sign in normally if you can, then correct or disable Autologon. If you cannot sign in, use the one-time Shift bypass at the next boot and involve the device administrator rather than repeatedly guessing credentials.
It works on one startup but not another
For domain accounts, the network may not be ready when Windows tries to authenticate. Microsoft describes using policy to wait for the domain network, but the exact policy and behavior depend on the managed environment. Work with the administrator rather than assuming a consumer-account configuration will work on a domain-joined computer. A wired connection, wireless authentication delay, or startup service timing can all be relevant to the administrator’s diagnosis, but do not change policy blindly.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →On a Microsoft Entra ID-only computer, Microsoft says there is no setting to delay automatic user logon until connectivity is ready. If startup timing is the cause, automatic logon may therefore be unsuitable for that device. An interactive sign-in can be the more predictable choice when the account must authenticate against a service that is not ready immediately after boot.
The automatic-sign-in option is missing
There is no universal explanation for a missing control. Windows edition, device configuration, account type, and organizational policy can change which settings are shown. The standard Sign-in options page documents interactive methods; it does not guarantee that every computer exposes an automatic-logon control. Check the device’s management policies and account type before changing the registry.
Do not assume that a missing item means Windows is broken or that a third-party tool is required. Autologon is a separate Sysinternals utility, and managed computers may intentionally limit automatic logon. Ask the administrator whether a policy, domain requirement, or security baseline forbids it.
You need a normal sign-in for one session
Hold Shift before Windows carries out the automatic logon. This bypasses the automatic action for that logon without requiring you to reconfigure the utility. You can then select the account and sign-in method appropriate for that session.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsYou want to remove auto login permanently
Run Autologon and choose Disable. If the setting was created manually in the registry, follow Microsoft’s removal instructions rather than deleting unrelated values under Winlogon. Restart and test the normal sign-in screen. If a plaintext password value was used, treat its exposure seriously and change the account password according to your organization’s process.
You changed the password and auto login stopped
Automatic logon depends on the stored credential matching the account. After a password change, run Autologon, enter the updated account information, and select Enable again, or select Disable if you no longer want unattended sign-in. For a domain or managed account, verify with the administrator that the new password and local-logon policy are compatible.
Operational checklist
- The computer is in a physically secured location.
- All people who can reach it are trusted with the selected account and its network access.
- You know whether the account is local, domain-based, or Microsoft Entra ID-based.
- You have the correct account details and a way to recover if startup authentication fails.
- You used Autologon instead of storing a password in plaintext unless a controlled administrative requirement specifically demands the registry procedure.
- You know how to hold Shift for a one-time bypass and how to select Disable to undo the setting.
- You tested a restart while physically present, rather than enabling the feature and leaving immediately.
- You will revisit the setting if the account password, device ownership, location, or network-management policy changes.
Frequently asked questions
How do I make Windows log in automatically?
Download Microsoft Sysinternals Autologon, run autologon.exe, enter the account and password, and select Enable. Restart to verify that the intended account opens. The utility does not validate credentials before the restart.
How do I skip the sign-in screen on startup?
Configure automatic logon with Autologon. This skips the interactive credential prompt for the selected account, but it also means a person at the computer can receive that account’s session. It is not appropriate where physical access is uncontrolled.
How can I turn off auto login?
Run autologon.exe and select Disable, then restart and confirm that the ordinary sign-in screen appears. For a registry-created setting, use Microsoft’s documented removal procedure.
Can I bypass auto login just once?
Yes. Hold Shift before Windows performs the automatic logon. That bypasses the automatic action for the current startup without removing the configuration.
Is Windows auto login secure?
It reduces convenience friction, not security risk. Autologon stores the credential as an encrypted LSA secret, but a local administrator can retrieve and decrypt it. Anyone with physical access can use the automatically opened session and its connected network resources.
Is the Registry Editor method better than Autologon?
No for ordinary setups. Microsoft’s registry procedure stores the password in plaintext and is easier to misconfigure. Autologon uses an encrypted LSA secret and a simpler dialog, although it still does not protect the credential from an administrator or remove the physical-access risk.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWhy is the automatic-sign-in option missing?
Availability varies with Windows configuration, account type, edition, and organizational policy. The Settings sign-in page covers interactive methods and does not promise an automatic-logon control on every device. Check management policy before editing the registry.
Does Windows Hello provide auto login?
No. Hello provides interactive PIN, fingerprint, or face authentication. It can be faster than typing a password while retaining an authentication step. Face and fingerprint options require compatible hardware.
Will auto login work with a domain account?
It can, but startup network timing and domain policy can prevent authentication. Microsoft describes policy that can wait for a domain network. A domain administrator should confirm whether the account is allowed to log on locally and whether automatic logon is permitted.
Will it work on a Microsoft Entra ID-only computer when the network is slow?
Microsoft says there is no setting to delay automatic user logon until connectivity is ready on Microsoft Entra ID-only computers. If connectivity timing causes failures, interactive sign-in may be more suitable.
Recommended Free Tools
Sources and supported scope
Microsoft’s primary references are the Sysinternals Autologon documentation, authored by Mark Russinovich and published August 29, 2016 (page updated July 27, 2021), and Configure Windows to automate logon. For alternative sign-in methods, see Microsoft’s Sign-In Options in Windows and Configure Windows Hello. These references cover Windows 10 and Windows 11 guidance, while the exact behavior on a particular computer remains subject to its account configuration and policy.
Frequently Asked Questions
Can I use automatic logon on a shared or public computer?
It is a poor choice. Anyone who reaches the powered-on computer receives the configured account session and its available files and network resources. Use an interactive sign-in on shared, portable, or publicly accessible devices.
Does Autologon change my Windows password?
No. It stores the information Windows uses for automatic console logon; it does not change the account password or alter Windows Hello settings.
What happens if I change the account password later?
The stored automatic-logon credential may no longer match. Reopen Autologon and enter the current credential, or select Disable if you no longer want automatic sign-in.
Recommended Free Tools
Can a local administrator recover the Autologon password?
Yes. Autologon uses an encrypted LSA secret, but Microsoft states that a user with administrative rights can retrieve and decrypt it.
Do I need a fingerprint reader, camera, or security key?
No. Those are optional Windows Hello or security-key methods and do not enable automatic logon. Autologon itself requires no special sensor.
Why does automatic logon fail on a domain computer?
The network may not be ready when Windows attempts authentication, or domain policy may restrict the account or automatic logon. Have the administrator review startup-network policy and local-logon permissions.
Can an interactive logon banner block automatic logon?
Microsoft says a configured interactive logon banner can prevent the registry method from working. Review the managed-device policy before changing registry values.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Do Exchange ActiveSync restrictions affect auto login?
Yes. Microsoft documents that Exchange ActiveSync password restrictions prevent automatic logon.
The Bottom Line
For a controlled, physically secured Windows 10 or Windows 11 computer, Microsoft Sysinternals Autologon is the simplest documented way to enable automatic sign-in: run autologon.exe, enter the account details, and choose Enable. Test a restart, use Shift for a one-time bypass, and choose Disable when you want normal sign-in again. Remember that encrypted storage does not defeat a local administrator, and automatic logon gives anyone at the machine the configured account’s access.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
