A practical guide to adding, changing, and using local account security questions in Windows, including the differences between local accounts and Microsoft accounts.
Security questions are recovery prompts used by Windows local accounts. If you forget the password for a local account, Windows can ask three previously configured questions before allowing you to create a new password.
This feature is useful on home PCs where a user does not sign in with a Microsoft account. It can prevent a complete lockout, but it must be configured carefully because weak or guessable answers can reduce account security.
| Feature | What It Does | Applies To |
|---|---|---|
| Security questions | Let you reset a forgotten local account password from the sign-in screen | Local accounts |
| Password hint | Shows a visible reminder after a failed password attempt | Local accounts |
| Microsoft account recovery | Uses email, phone, authenticator app, or online verification | Microsoft accounts |
| Password reset disk | USB-based recovery method created before the password is forgotten | Local accounts |
Before configuring security questions, confirm what type of account you are using. The menu options are different depending on the account type.
Accounts from the Settings window.In Windows 11, the security questions dialog is not always easy to find from the Settings interface. The most reliable way to open it for an existing local account is to use the built-in Windows URI command.
ms-cxh://setsqsalocalonlyReset password from the sign-in screen.When you create a new local account with a password, Windows may ask you to select three security questions during account setup. This can appear during initial device setup or when adding a local user from Settings.
Settings → Accounts → Other users.Add account.In Windows 10, local account security questions are usually available from the standard Sign-in options page.
Accounts.Sign-in options from the left menu.Password, choose the option to add, change, or update password recovery details.If the Settings option does not appear, you can try the same URI command used in Windows 11:
ms-cxh://setsqsalocalonlyRun it from Win + R while signed in to the local account you want to configure.
You should update security questions if someone else may know the answers, if you reused obvious answers, or if you inherited a used computer and want to secure the local account.
| Windows Version | Recommended Method | Where to Start |
|---|---|---|
| Windows 11 | Run the local security questions URI | Win + R → ms-cxh://setsqsalocalonly |
| Windows 10 | Settings or Run command | Settings → Accounts → Sign-in options |
| Microsoft account | Use online account recovery settings | Microsoft account security page |
ms-cxh://setsqsalocalonlyAfter security questions are configured, they can be used from the Windows sign-in screen when the local account password is entered incorrectly.
Security questions are convenient, but they are weaker than modern account recovery methods if the answers are factual and easy to research. Treat the answers like secondary passwords.
cat or redInstead of answering a question literally, you can use a private phrase that only you know. For example, the question may ask for a city, but your saved answer could be a unique phrase stored in your password manager.
Question: What was the name of the first school you attended?
Weak answer: Lincoln High
Stronger private answer: BlueCoffeeDesk-1979The reset link appears only for local accounts that already have security questions configured. It may not appear for Microsoft accounts, domain accounts, work or school accounts, or local accounts without configured questions.
This is common in Windows 11. Use the Run command instead:
ms-cxh://setsqsalocalonlyIf you cannot answer the questions, you cannot use this recovery method. Try another administrator account on the same PC, a previously created password reset disk, a system restore/recovery option, or Microsoft account recovery if the account is online-based.
Managed devices may use organization-controlled password reset policies. In that case, contact your system administrator or use your organization’s self-service password reset portal.
No. Local Windows security questions are for local accounts. Microsoft accounts use online recovery methods such as email, phone verification, authenticator apps, and account recovery forms.
Windows does not always provide a simple remove button for existing local account security questions. You can change the questions and answers, switch to a Microsoft account, or create a new local account using your preferred setup method.
No. They are only a recovery method. You should still use a strong password and avoid answers that other people can guess.
Windows may be forgiving in some cases, but you should record answers exactly as you entered them. Spelling, spaces, and punctuation can matter during recovery.
An administrator can manage accounts and reset local passwords, but security questions are normally configured from within the target local account after verifying its current password.
Press Win + R, paste ms-cxh://setsqsalocalonly, and press Enter. This method is especially useful in Windows 11.
Security questions can be a useful safety net for local Windows 10 and Windows 11 accounts. They allow password recovery without reinstalling Windows or using advanced repair tools, but they also create an additional path into the account.
For the best balance between convenience and security, use strong local account passwords, choose non-obvious answers, store recovery details safely, and remember that Microsoft accounts use a different online recovery process.