Hackaday

Modern ThinkPad BIOS administrator passwords are stored in a separate EEPROM chip that can be bypassed by shorting its reset pin at a precise moment during boot. The trick requires careful timing: short the pin after boot starts but before password check, then release it to allow writing the new password-disabled state. Shorting too early prevents boot, while keeping it shorted prevents saving changes—a nuance that caused initial confusion despite following a guide.

Removing The BIOS Administrator Password On A ThinkPad Takes Timing