What "Password Un" Usually Means
Searches that start with "password un…" almost always come from someone trying to unlock a locked machine, reset a forgotten login password, or recover a device where the password is unknown. On a mini PC, thin client or industrial computer there is not one password but several layers, and each has its own recovery path:
| Layer | Where it lives | Recovery approach |
|---|---|---|
| BIOS / UEFI firmware password | Motherboard firmware (SPI flash / NVRAM) | Jumper or clear-CMOS procedure, vendor service |
| Boot / HDD password | Firmware + drive controller | Usually requires vendor service; no software bypass |
| Operating system account | Windows, Linux, embedded Linux image | Password reset media, recovery mode, admin account |
| Remote management / admin console | Thin-client management software | Admin credentials, management server reset |
| Application & database logins | On the OS volume | Application-specific reset |
Knowing which layer is locked is the first step — trying to reset a Windows account will not clear a firmware password, and vice versa.
Unlocking the Operating System Layer
For Windows 11 Pro and Windows 11 IoT devices, a local administrator account is normally created during first-boot setup (OOBE). If that password is unknown, the standard route is bootable recovery media: mount the offline registry from the recovery environment, enable the built-in Administrator account, reboot, sign in, and set a new password, then log back in with the correct account. On domain-joined or Azure/Microsoft-account-bound machines, credentials are managed centrally, so the reset is done from the directory rather than on the device. Windows also supports a reset password disk (created from the account settings) and PIN/security-key sign-in options that can bypass a forgotten text password when configured in advance.
For Ubuntu Linux, recovery starts in the GRUB menu: boot into recovery mode, drop to a root shell, then use passwd <username> to set a new credential. Encrypted volumes, however, require the disk passphrase before any of this is reachable — full-disk encryption is deliberately not bypassable. Embedded Linux (Thinux™ or similar) images on thin clients are often read-only or image-based: the practical fix is to re-flash the known-good image and re-apply the device configuration rather than editing the running filesystem.
Firmware, BIOS and Thin-Client Admin Passwords
A BIOS/UEFI password is stored in firmware, not on the disk, so it survives OS reinstalls. It can be cleared by the board's documented procedure — typically a clear-CMOS jumper, a battery-off discharge, or a service unlock key — and only where the vendor documents it. Boot and drive passwords are stricter and often require replacing or re-provisioning the storage. On thin clients, a menu or configuration password may
