0X00000532

Fixed: ERROR_PASSWORD_EXPIRED (0x00000532) – Logon Failure

EP
Erropedia Team
📅 May 27, 2026 📅 Updated Jul 31, 2026 👁 15 views Windows Errors Beginner
Your password expired and Windows won't let you log in. No admin access? Use the offline reset tool. Here's how to fix it in 3 steps.

Quick Fix (30 seconds)

Press Ctrl + Alt + Del at the login screen. Look for a Change a password option. If you see it, click it, enter your old password (even though it’s expired), then pick a new one. This works on Windows 10 and 11, domain-joined or local accounts. I’ve seen this fail on Remote Desktop sessions — if you’re RDPing in, you usually need the server admin to reset it from Active Directory Users and Computers.

If that option’s missing or the password change fails, move on.

Moderate Fix (5 minutes) – Offline Password Reset Tool

This is the real fix when you’re locked out and don’t have another admin account handy. Grab the Windows Password Recovery Tool from a trusted source. I’ve used Offline NT Password & Registry Editor for years — it’s free, boots from USB, and can blank or change the expired password. It works on Windows 7 through 11, both 32- and 64-bit.

Steps:

  1. Download the ISO and write it to a USB using Rufus (or any ISO-to-USB tool).
  2. Boot from that USB. You’ll get a text menu. Press Enter for the default.
  3. It’ll scan your drives. Select the one with Windows (usually /dev/sda1 or /dev/nvme0n1p1).
  4. When it asks for the path to the SAM file, hit Enter to accept the default.
  5. Choose option 1 for Password reset.
  6. Pick the user account by number. Select 1 to clear the password (blank it) or 2 to change it.
  7. If you blank it, you’ll log in with no password — then set a new one immediately in Settings > Accounts > Sign-in options.
  8. Type ! to quit, then q to exit, and confirm y to write changes. Reboot.

Boot from the hard drive, log in with the blank or new password. Done. This bypasses the expiration check entirely.

Advanced Fix (15+ minutes) – Safe Mode or Registry Edit

If the offline tool doesn’t work (rare, but I’ve seen it on BitLocker-encrypted drives), you need the built-in Administrator account. Reboot into Safe Mode with Networking:

  1. Interrupt the boot process three times (press the power button during startup) to trigger Automatic Repair.
  2. Go to Troubleshoot > Advanced options > Startup Settings > Restart.
  3. Press 5 for Safe Mode with Networking.
  4. Log in as Administrator (blank password by default, if not changed).

Once in:

  • Open Computer Management > Local Users and Groups > Users.
  • Right-click the locked account, pick Properties, and uncheck User must change password at next logon. Also check Password never expires if you want to stop the error permanently.

No Safe Mode? You can edit the registry from the recovery environment:

  1. Boot from a Windows installation USB (or the recovery partition).
  2. Choose Repair your computer > Troubleshoot > Command Prompt.
  3. Type regedit and select the HKEY_LOCAL_MACHINE hive.
  4. Go to File > Load Hive and browse to C:\Windows\System32\config\SAM. Give it a key name like TEMP.
  5. Navigate to TEMP\SAM\Domains\Account\Users\Names\YourUsername. Look for a subkey under Users with a long hex string (the RID).
  6. Double-click the F value in that hex subkey. Find the byte at offset 0x38. Change it from 08 (expired) to 00. Click OK.
  7. Unload the hive, reboot, log in with the old password — it’s no longer considered expired.

This registry edit is a nuclear option. I only use it when BitLocker prevents the offline tool from writing. It’s identical to clearing the “password expired” flag via Group Policy.

Pro Tip: Stop This Happening Again

If you’re the admin, set a longer password expiration period or disable it for service accounts. In Group Policy: Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy > Maximum password age. Set it to 0 for never expire. Don’t do that for user accounts unless you trust everyone — but for a workstation, it beats this lockout headache.

For domain accounts, users can change their password from the Ctrl+Alt+Del screen, even if it’s expired. If they can’t, check the User must change password at next logon flag in ADUC and reset it.

If you’re stuck on a domain-joined laptop with no network access, the offline tool is still your best bet. It works offline. Just make sure the system isn’t BitLockered — if it is, you’ll need the recovery key first.

Related Errors in Windows Errors
0X000D0001 NS_S_CALLABORTED (0X000D0001) Fix: Operation Aborted by Client 0x80070057 Fix Windows Error 0x80070057 – Invalid Parameter 0XC0262114 Fix ERROR_GRAPHICS_INVALID_ALLOCATION_HANDLE 0xC0262114 on Windows 10/11 0X80097016 DSIG Table Error 0x80097016 – Font Signature Bad
ERROR_PASSWORD_EXPIRED 0x00000532 logon failure password expired Windows password expired fix offline password reset Windows 10 password expired Windows 11 password expired reset expired password without admin password expired remote desktop Windows login error 532 change expired password Windows

Was this solution helpful?

EP
Erropedia Team
Tech Support Editors
The Erropedia editorial team researches and documents real-world tech errors from across Windows, Linux, macOS, networking, databases, cloud platforms, and more. Every solution is reviewed for accuracy and updated as software and systems evolve.