Windows Windows

0xC000006A: Event ID 4625 wrong password (username correct)

Likely causes

• The user typed the wrong password.
• A service, scheduled task, mapped drive or app has an old saved password.
• A phone or other device keeps retrying old credentials.
• Someone is guessing the password.

How to fix it

1. Open the 4625 event and note Workstation Name, Source Network Address, Logon Type and Caller Process Name. They tell you where the bad password comes from.
2. If it’s the user at their own PC, have them retype it carefully or reset it.
3. If it comes from another machine or a service, update the saved password there: services, scheduled tasks, mapped drives, Credential Manager, or phone mail apps.
4. If the source is unknown, especially for admin or service accounts, treat it as a possible attack and escalate to security.

Checked against: learn.microsoft.com, learn.microsoft.com