Home / Case Studies / Four Inherited Machines and No Passwords
Laptop and Desktop Disks · from the case log

Four Inherited Machines and No Passwords

A woman in Stratford-upon-Avon was clearing her parents' house and had four machines to deal with: two laptops and two desktops, spanning about fifteen years. Before any of them went to the recycling centre she wanted to know whether there were photographs or documents on them worth keeping, and there were no passwords for any of the accounts. Her brother had spent an evening trying to guess and had locked one of them out. She asked a careful question, which was whether this was something a laboratory would even take on.

Hard DriveLaptop / PCEncryption / BitLocker
// what came in, at a glance
MediaFour inherited machines, two laptops and two desktops of varying ages, whose sign-in passwords are unknown. The family wants documents and photographs identified and recovered before the machines are disposed of.
What was reportedTwo inherited laptops and two desktops, no account passwords available, one account now locked out after repeated guesses, documents and photographs wanted before the machines are cleared, ownership of the estate confirmed by the executor.
Fault classNo fault at all. This was a question about access rather than about failure. A sign-in password protects an account within an operating system and does nothing to the disk underneath it, so a disk removed and read on a bench presents its contents normally. The only real obstacle would have been full-disk encryption with no key in existence, which is established per machine before anything is quoted.
On the benchEach disk removed and read directly behind a hardware write blocker on PC-3000 UDMA, which bypasses the sign-in entirely because the sign-in never enters into it. Each was imaged on DeepSpar and the filesystem parsed in R-Studio, with the user folders located and the documents and photographs identified. Every disk was checked for full-disk encryption before any promise was made about it. The wanted files were opened, dated and written to fresh media, arranged one folder per machine.
// reading the fault

Reading the fault

A login password is a door on a room, not a lock on a filing cabinet. Windows and macOS ask for it before they will let you use the desktop, and that is the whole extent of what it does on an unencrypted machine. Take the disk out and connect it elsewhere and the files are readable, with the account folders sitting there under their own names. This surprises people and it is the single most useful thing to know about inherited computers.

Locking the account out changed nothing, which was a relief to explain. The lockout is a counter held by the operating system to slow down guessing. It is not a shutter that comes down over the storage, and it does not trigger anything destructive on any consumer machine. The evening her brother spent trying combinations was wasted time rather than damage, and it is worth knowing that before somebody tries harder.

Encryption is the real barrier and it has to be checked, not assumed. Where a machine has BitLocker or FileVault switched on and nobody has the recovery key, the contents are unreadable and stay unreadable, and that is not a matter of effort or of price. It is established per machine at the start, before a figure is agreed, so that nobody pays to be told no. On this set none of the four was encrypted, which is common on machines of that age and not something to count on.

There is a question underneath the technical one and it deserves an answer. Reading a dead relative's machine is something an executor is entitled to arrange, and the enquiry is taken on that basis. What the bench returns is documents and photographs from the user folders. It does not go looking through correspondence for its own interest, and material plainly belonging to somebody still living is left where it is.

// bench work

Bench work

All four disks came out and were read individually, which took less time than the family expected. Two were ordinary spinning disks in good health, one was a solid-state drive from a later laptop and one was an older disk with a scattering of weak sectors that needed a slower pass. None of the four carried an encrypted volume, which was checked before anything else and reported back the same day.

Each was imaged behind a write blocker and then explored in R-Studio from the image. The user folders were located on all four, and the pictures, documents and desktop contents were pulled out and dated so the family could see what came from which machine and roughly when it had last been touched. Duplicates across machines were left in place rather than merged, because two copies of the same photograph from different years often tell a family something.

// what went back

What went back

Around nineteen thousand photographs came back across the four machines, along with letters, a scanned collection of family certificates and a spreadsheet of addresses that turned out to be the most immediately useful thing on any of them. The disks were wiped afterwards at the family's request so the machines could go for recycling.

Each machine is a job at £300 + VAT, so four figures rather than one, and the family was told at the outset that two of the four looked unlikely to hold much. Nothing needed the lid off and nothing was lifted off a circuit, so no fix, no fee applied to all four.

Inherited computers nobody has the password for

Do not spend an evening guessing, and do not let anyone talk you into a password reset tool, because on an encrypted machine a reset can destroy the very key that would have unlocked the files. Start by finding out whether encryption is switched on, since that is the only question with a hard answer. Look for a recovery key first: on a Windows machine it is often saved in the account the computer was set up with, and on a Mac it may be attached to an Apple account or written on a card in a drawer with the paperwork. If there is no encryption, the disks can be read directly and the passwords are irrelevant. Keep the machines switched off in the meantime rather than powering them up repeatedly to look. If you are the executor, say so when you enquire, and expect to be asked, because it is a reasonable question and a short conversation.

What this job cost, and on what terms. This one was charged at £300 + VAT, the figure agreed in writing before any work began. Paying for a job like this one. Nothing here called for the disk to be opened, a board rebuilt or a chip lifted off, which puts the work on the logical side of the line and under no fix, no fee. Files back, invoice follows; nothing back, nothing owed, and the media goes home either way. Four sorts of work sit outside that promise and only those four: DVR jobs, forensic jobs, chip-level work, and electronic or mechanical failure. The rest keep it, firmware and service-area repair included — both are logical jobs whatever their reputation suggests.

If yours is doing the same thing. This drive was read at Oxford Data Recovery on the Oxford Science Park, about fifty-five miles down the M40. Post it tracked and insured, send it by a courier you book yourself, or bring it to the Oxford reception during Mon–Fri 9:00am–5:30pm — there is no collection service and no counter in Coventry. The free look at it takes two working days from booking in and produces one written figure that then holds.

Freephone 0800 689 0668 to talk it through first. The shipping form and what goes in the parcel are on the contact page, and every band is published in full — including which work sits outside no fix, no fee.

Book a free examination

These are real enquiries, from households and from businesses in Coventry and out across Warwickshire — Nuneaton and Bedworth, Rugby, Leamington Spa, Warwick, Kenilworth, Solihull, Stratford-upon-Avon, Atherstone and Southam. Names are gone: the customer, the company, the job title, anything at all that would point back at a person. What stays is the reasoning — what turned up, where the fault genuinely sat, which approach it demanded, and which machine on the bench did the work. One of the thirty-six was refused, and it earns a place here as squarely as any of the rest.

// related files

Three further files from this part of the log

Back to the full log →

Send yours to the same bench

Inherited a machine nobody can sign into? Ring 0800 689 0668. One drive is £300 + VAT and finding out whether it is encrypted costs nothing.