How to Fix “Cached Credentials Have Expired” Error on Windows 11: Step-by-Step Solutions

Sometimes, Windows 11 users encounter the “Cached Credentials Have Expired” error when trying to log in. This message usually appears when your computer cannot verify your username and password with the server. It can be frustrating, especially if you need quick access to your system.

This problem often happens in environments using domain accounts, such as in workplaces or schools. Cached credentials are stored login details that allow you to sign in even when your computer is offline.

When these cached credentials expire, Windows cannot authenticate your login without connecting to the server. Luckily, there are simple ways to fix this issue.

In this article, we will walk you through easy, step-by-step solutions to resolve this error on Windows 11.

Quick Note Before You Begin

Make sure your computer is connected to the internet or your organization’s network. This connection is necessary for Windows to verify your credentials with the server.
Have your username and password ready, especially if you are using a domain account.
If you are using a local account (not connected to a domain), this error usually does not apply.
Ensure you have administrative rights or access to IT support if needed.

Step 1: Connect to Your Network

The most common reason for this error is that your computer is not connected to the domain network. Windows needs to contact the domain controller to verify your credentials.

Check your Wi-Fi or Ethernet connection by clicking on the network icon in the taskbar.
Make sure you are connected to your organization’s network or VPN.
If you are not connected, try reconnecting or restarting your router.

Why this step matters: Cached credentials expire because Windows can’t verify your login without a network connection. Reconnecting to the network allows your computer to authenticate your username and password with the domain controller.

Step 2: Log in Using Your Domain Credentials

If you are connected but still see the error, try logging in with the correct domain format for your username:

On the login screen, enter your username as DOMAINusername. For example, if your domain is “CORP” and your username is “john”, enter CORPjohn.
Type your password as usual and press Enter.

Why this step matters: Sometimes Windows tries to log you in using a local account instead of the domain account. Specifying the domain explicitly forces Windows to authenticate against the server.

Step 3: Restart Your Computer

Restarting your PC can refresh network connections and system services. It is a simple but effective troubleshooting step.

Click the Start button.
Select the Power icon and click Restart.
Once the PC restarts, try logging in again.

Why this step matters: Sometimes, Windows services related to networking or credential caching may get stuck. Restarting resets these services and can fix transient issues.

Step 4: Change Your Password on Another Device

If you recently changed your password but haven’t updated it on your Windows 11 PC, cached credentials can expire. To fix this:

Use another device connected to the domain, like a laptop or web portal, to change or confirm your password.
After changing your password, return to your Windows 11 PC and connect it to the network.
Try logging in with your new password.

Why this step matters: Cached credentials store your old password. If your password changes, the cached version becomes invalid until your PC connects to the server to update.

Step 5: Use Safe Mode to Reset Cached Credentials

If you cannot log in normally, try booting into Safe Mode to fix cached credentials.

Press and hold the Shift key while clicking Restart from the login screen.
From the recovery options, select Troubleshoot > Advanced options > Startup Settings > Restart.
When your PC restarts, press 4 or F4 to enter Safe Mode.
Log in using your domain credentials.
Once logged in, open Command Prompt as administrator (right-click Start > Windows Terminal (Admin)).
Type the following command to clear cached credentials:

rundll32.exe keymgr.dll,KRShowKeyMgr

In the Stored User Names and Passwords window, remove any old or invalid credentials.
Restart your PC normally and try logging in again.

Why this step matters: Safe Mode allows you to log in with minimal services running. Clearing stored credentials can force Windows to authenticate fresh with the server.

Alternative Method: Use Local Account to Access Windows

If you have a local account set up on your PC, you can switch to it temporarily:

On the login screen, click Sign-in options.
Select the local account option (if available) and enter your local account credentials.
Once logged in, connect to the network and try domain login again.

Note: This method only works if you have a local account configured beforehand.

Frequently Asked Questions (FAQs)

Why do cached credentials expire on Windows 11?

Cached credentials expire to maintain security. Windows caches your login details so you can sign in offline, but after a certain period, it requires a server check to ensure your credentials are still valid.

Can I increase the cache duration to avoid this error?

Yes, but this requires changes on the domain controller by your IT administrator. It is not recommended for security reasons to increase the cache duration significantly.

What if I forgot my domain password?

You need to reset your domain password through your organization’s IT helpdesk or password reset portal. Without the correct password, you cannot log in once cached credentials expire.

Does this error occur on local accounts?

No, cached credentials expiration is related to domain accounts. Local accounts do not rely on domain controllers for authentication.

Can antivirus or firewall settings cause this error?

Sometimes, network restrictions by firewalls or antivirus software can block communication with the domain controller, leading to cached credential errors. Temporarily disabling these can help diagnose the issue.

When Nothing Works

If you’ve tried all the steps above and still encounter the “Cached Credentials Have Expired” error, here are some final options:

Contact your organization’s IT support team for assistance. They may need to reset your account or check the domain controller.
Use the Microsoft official support page for Windows sign-in issues: Microsoft Sign-in Support.
If your data is backed up, consider reinstalling Windows 11 or restoring your system to a previous restore point.

Conclusion

The “Cached Credentials Have Expired” error on Windows 11 can be a common but manageable problem, especially for domain users. The key is ensuring your PC connects to the network to authenticate your credentials properly.

Start with simple steps like checking your network connection and using the correct login format. If needed, restart your PC, update your password, or clear cached credentials through Safe Mode.

Remember, if you are part of an organization, IT support can be a valuable resource. Following these steps carefully will help you regain access to your Windows 11 device smoothly and securely.