Quick answer: Download HBCD_PE_x64.iso from hirensbootcd.org, check its SHA-256 hash, then write it with Rufus using the settings the project recommends: press Alt + E for dual UEFI/BIOS mode, then choose MBR and FAT32. Boot the PC from the stick through its boot menu. If Secure Boot blocks it with a Security Violation, switch Secure Boot off for the session and back on afterwards.
In this guide
What Hiren’s BootCD PE is today
The original Hiren’s BootCD stopped at version 15.2 in 2012. What you download now is Hiren’s BootCD PE, a restored edition maintained by fans of the original. It’s a 64-bit Windows PE environment (the project says it’s based on Windows 11 PE x64) with a desktop, a Start menu and a set of repair, recovery and diagnostic tools that run from the USB without touching the installed Windows.
The current release is v1.0.8, dated March 2024 in the project’s changelog, and the ISO is about 3 GB. Expect no frequent updates; it’s a stable toolkit rather than an actively developed product. It’s 64-bit only, so it won’t run on 32-bit-only hardware.
What you need
- A USB flash drive of at least 4 GB. Everything on it will be erased.
- A working Windows PC to create the stick (Rufus needs Windows 8 or later).
- The target PC should have 4 GB of RAM or more. The project’s own help pages note that machines with very little memory can fail to start newer versions with error 0xc0000017.
Step 1: Download and check the ISO
Get the ISO only from the official Hiren’s BootCD PE site or the mirrors it lists. Search results for this tool include copycat download sites, and a boot disc from an untrusted source is an easy way to get low-level malware. The download page lists the file’s SHA-256 hash. After downloading, open PowerShell in your Downloads folder and run:
Get-FileHash .\HBCD_PE_x64.iso -Algorithm SHA256Compare the result with the hash on the download page. If they differ, delete the file and download it again.
Step 2: Write it to USB with Rufus
The project’s USB booting page recommends Rufus. Download it from rufus.ie (the portable version is fine), plug in the USB drive and open Rufus. Then:
- Press Alt + E first. This turns on Rufus’s dual UEFI/BIOS mode, and it has to happen before you load the ISO, otherwise FAT32 can’t be selected.
- Under Device, pick your USB drive. Check the size so you don’t wipe the wrong disk.
- Select SELECT and choose
HBCD_PE_x64.iso. - Set Partition scheme to MBR and File system to FAT32. On drives of 32 GB or more, choose Large FAT32 (press Alt + L if it isn’t listed).
- Give the drive a label, select START and confirm that the drive will be erased.
MBR with FAT32 isn’t Rufus’s usual choice for a modern PC, but in dual mode it gives one stick that boots on both UEFI and older BIOS machines. Newer Rufus versions show a Revoked UEFI bootloader detected warning for this ISO; the project’s FAQ says you can select OK and continue. Writing takes around ten minutes. For general Rufus settings, see our Rufus guide; if the drive later needs to go back to normal use, format it as FAT32 or exFAT.
Avoid multiboot tools such as Ventoy or YUMI for this ISO. The project’s FAQ says programs can appear to be missing when the USB was made with them.
Step 3: Boot from the USB
Plug the stick into the PC you want to fix and open its one-time boot menu as it powers on. The key depends on the maker; F12, F11, F10, F8 and Esc are common. Pick the USB entry (choose the UEFI one if there are two). The desktop loads in a minute or two.
If you get a Security Violation message, Secure Boot has rejected the bootloader. The project’s FAQ explains that this can happen on fully updated UEFI systems because the bootloader on the ISO has since been revoked. Turn off Secure Boot in the firmware settings, use the USB, then switch it back on. Our guide to checking Secure Boot state shows how to confirm it’s back on.
What to use it for
Everything below comes from the tool list on the official download page. Most tools sit in the Start menu under a category name.
| Job | Included tools (examples) | Good to know |
|---|---|---|
| Copy files off a PC that won’t boot | Built-in file managers, 7-Zip | Copy to a second USB drive or external disk |
| Recover deleted files | Recuva, PhotoRec, TestDisk, DMDE | Write recovered files to a different drive; see free file recovery |
| Check a failing drive | CrystalDiskInfo, HD Tune, GSmartControl | Back up first if SMART shows warnings |
| Back up or image a disk | Macrium Reflect PE, AOMEI Backupper | Image before risky repairs |
| Resize or fix partitions | AOMEI Partition Assistant, DiskGenius | Have a backup before changing partitions |
| Repair the boot loader | EasyBCD, BootIce | Windows’ own Startup Repair is worth trying first |
| Scan for malware offline | ESET Online Scanner, McAfee Stinger | The ESET scanner needs an internet connection |
| Find the Windows product key | ShowKeyPlus | Reads the key stored in firmware or the installed system |
Password reset: what it can and can’t do
The official how-to for a forgotten password uses NT Password Edit: open Start > Security > Passwords > NT Password Edit, open C:\Windows\System32\config\SAM, select the account and choose Change password. Leaving both boxes empty removes the password.
This works only in limited cases:
- Local accounts only. If you sign in with a Microsoft account (an email address), editing the local password file doesn’t change it. Reset it online instead; our guide to “The password is incorrect” at sign-in covers that route.
- Not on an encrypted drive. If BitLocker or Windows 11 device encryption is on, the tools can’t read the system drive without the recovery key, so there’s no SAM file to open.
- Only on PCs you’re allowed to service. Bypassing a password on someone else’s computer can be illegal.
Licensing and safe use
Old copies of the original Hiren’s BootCD were widely criticised for bundling commercial software. The PE edition’s site states that the ISO contains only free, legal tools and no cracked software; Acronis is included as a trial. The project’s FAQ also notes Microsoft’s terms for Windows PE: it’s meant for deployment and recovery, not as an everyday operating system, and the shell restarts after 72 hours of continuous use. Some antivirus products flag password or recovery tools on the stick as potentially unwanted; the FAQ addresses these false positives, but the hash check in step 1 is your real proof that the file is genuine.
Related guides
- Rufus Windows 10: how to make a bootable USB step by step
- Free file recovery on Windows 11 and 10: 4 ways to get deleted files back
- How to format a USB drive to FAT32 in Windows 11 and 10 (even over 32 GB)
- Secure Boot state: how to check it and what On, Off and Unsupported mean
- “The password is incorrect. Try again” at Windows sign-in: how to fix it
Leave a Reply