Enable Automatic Sign-In in Windows 8 (Historical, Security Risk)

Historical support note: Windows 8 is out of support. Automatic sign-in is also a security trade-off and should not be used on a shared, portable, or physically accessible PC.

Windows can be configured to sign in to an account automatically at startup. This does not remove the account password; Windows stores information that allows Winlogon to submit the credentials automatically.

Historical Windows 8 method

On Windows 8, the original UI could be opened with:

1. Press Windows + R.
2. Run:

control userpasswords2

3. Select the account.
4. Clear Users must enter a user name and password to use this computer.
5. Select Apply.
6. Enter the account password when prompted.
7. Restart and test.

To undo the configuration, return to the same dialog and require users to enter credentials again.

Security implications

Automatic logon means anyone who can start the computer can reach the user’s desktop without knowing the password. It is unsuitable for laptops, shared PCs, work computers, or systems containing sensitive information.

Microsoft’s current Sysinternals Autologon documentation also warns that even when the stored password is protected as an LSA secret, a user with administrative rights can retrieve and decrypt it.

This is a convenience feature, not a way to make an account passwordless.

Official references

• Microsoft Sysinternals Autologon: https://learn.microsoft.com/en-us/sysinternals/downloads/autologon
• Microsoft automatic logon documentation: https://learn.microsoft.com/en-us/troubleshoot/windows-server/user-profiles-and-logon/turn-on-automatic-logon
• Microsoft Windows lifecycle status: https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/what-does-it-mean-if-windows-isn-t-supported