Somewhere right now, a perfectly good ThinkPad is being wheeled to a shredder because nobody wrote down a password. I find that infuriating. So here’s a bit of good news: a ThinkPad BIOS password bypass that used to be a dark art for repair-shop wizards now costs about ten dollars and an afternoon.
The hero of the story is a YouTuber known as Hileeq, who runs a channel about resurrecting cheap eBay junk. Three weeks ago he posted a walkthrough showing how to strip the supervisor password from Lenovo ThinkPads with Intel 4th- to 8th-gen CPUs, using nothing fancier than a CH341A programmer, the little USB clip-on gadget you can buy for the price of a sandwich. Tom’s Hardware picked up the story and it’s been doing the rounds since.
Why ThinkPad BIOS password bypass matters
If you’ve ever bought a corporate off-lease laptop, you know the drill. Companies lock their fleet with a BIOS supervisor password, which is sensible. Then, years later, the machines get decommissioned, the SSDs get pulled and destroyed (also sensible), and the password goes… nowhere. Nobody documents it. The IT guy who set it left in 2021.
The result is a mountain of T480s and X270s that boot fine, have great keyboards, and can’t change a single BIOS setting. You can’t boot from USB, can’t enable virtualization, can’t touch anything. They sell for pocket change on auction sites, and a lot of them simply end up as e-waste. Lenovo’s official answer is a motherboard replacement, which costs more than the laptop is worth. Classy.
And no, this isn’t some fresh zero-day. A Romanian tinkerer called Victor Voinea published the first exploits ages ago, but his method spat out a random password tied to the machine’s hardware ID, and you had to pay him for the key. Then in 2020 a forum user going by Knucklegrumble posted a free version on Badcaps, the electronics repair forum. A Dutch researcher, Mark Juvan, later reverse-engineered the whole thing for his master’s thesis at Radboud University, so there’s an actual academic paper explaining why it works.
How the CH341A trick actually works
The short version: you clip the programmer onto the BIOS chip on the motherboard, dump the firmware to another computer with NeoProgrammer, let the auto-patching workflow Knucklegrumble designed modify it, and flash the patched copy back. Boot the laptop, press a few keys, and the password stored in the Embedded Controller (a separate little chip that handles security bits and housekeeping) gets wiped. Flash the original BIOS back, done. Clean laptop.
The clever part is in Juvan’s paper. Lenovo ships a driver called EmulatedEepromDxe that lets the firmware read and write EEPROM memory. The supervisor password happens to live in a region the EC treats as EEPROM. So the driver Lenovo itself provides is the one that lets you overwrite the lock. That’s not a bug in a chip; that’s a design decision that nobody thought through. As Juvan puts it, the exploit relies on “a weakness in Lenovo’s firmware verification and driver architecture.”
I love this kind of story because it’s the repair community doing the thing manufacturers won’t. Years of forum threads, one thesis, and one YouTuber turning it into a recipe anyone with a steady hand can follow. (You do need a steady hand. Clipping a CH341A onto a SOIC-8 chip is fiddly, and if you flash garbage, you’ve got a brick. Keep the original dump. Always.)
Should you try it?
If you’ve got a locked ThinkPad from that era gathering dust, yes, absolutely. The programmer is cheap, the tools are free, and the worst case is a laptop that was already useless. If you’re buying one specifically to unlock, check the CPU generation first: newer models with 9th-gen and later chips aren’t covered, at least not yet. Hileeq’s video going viral might change that, because nothing motivates reverse engineers like a crowd asking “and what about the T14?”.
And if you’re the one running IT in a company: write the password down somewhere before you sell the laptops. Or just remove it. The data was on the drive you shredded. The lock on the BIOS protects nothing anymore except a landfill’s profit margin.
Ten dollars to save a laptop from the dump is the best deal in tech this week.
Discover more from TechPassion
Subscribe to get the latest posts sent to your email.
