You can't look up a Windows product key on microsoft.com. Microsoft deliberately doesn't store a retrievable 25-character key on your account page, and no page on its site shows it to you. What microsoft.com does offer is your digital license, tied to your Microsoft account or hardware, which activates Windows without you ever typing a key. If you need the actual 25-character string, you'll use tools on your own PC, not Microsoft's website.
That distinction trips up a lot of people. They log into account.microsoft.com, hunt through Devices, and come up empty. The key isn't hidden somewhere on the page. It simply isn't there for most modern retail and OEM installs. What follows is the real map of where to look, what each source can and can't give you, and the cases where you'll hit a wall.
What microsoft.com's account page actually shows for your Windows license
Sign in at account.microsoft.com and open the Services & subscriptions section. On a retail Windows purchase tied to your account, you'll see the product listed with a license status, an order history entry under Order history, and sometimes a download link. You won't see a 25-character key on that screen. Microsoft moved retail licenses to digital entitlement years ago, so the account page records the right to activate, not the string itself.
The Devices page is where people waste the most time. It lists PCs associated with your Microsoft account and shows device names, last sign-in dates, and sometimes the Windows edition. It does not display product keys for any of them. If you bought a retail Windows 10 or Windows 11 license from the Microsoft Store, your order confirmation email is the closest thing to a paper trail. That email usually includes the order number, not the raw key.
OEM machines behave differently. A PC from Dell, HP, Lenovo, or a similar builder was activated at the factory and never had a key attached to your account. Microsoft has no record of the key in your profile because the manufacturer handled activation. Nothing on microsoft.com will surface it for you.
Here's the practical boundary. If your goal is simply to get Windows running or reinstall it, you may not need the key at all. Signing in with the same Microsoft account on the same hardware usually reactivates from the digital license. If your goal is to move the license to a new PC or prove ownership to a buyer, you'll need the key string, and the account page won't hand it over.
Why Microsoft stopped putting the 25-character key in front of you
Microsoft's own support documentation on product activation explains that a digital license is linked to your Microsoft account and hardware, and that you no longer need to enter a product key during installation when a license is present. That's the company's stated design, not a workaround. The activation servers recognize the hardware or account and clear the install automatically.
This matters because the older mental model, where a key is a piece of paper you keep in a drawer, no longer holds for most installs. A retail key bought today activates once and then becomes a digital license. The original string still exists in your purchase confirmation, but the everyday activation path doesn't use it.
There's a real downside. When the digital license is what's doing the work, and the account binding fails, you have no visible key to fall back on. A common failure: you reinstall Windows, sign in with a different Microsoft account than the one that originally activated the PC, and activation fails silently. The fix is signing into the original account, not hunting for a key.
Microsoft's support pages describe the Troubleshoot activation settings as the path for reactivation problems. That screen can re-attempt activation and report a specific error code, which is more useful than an account page ever was. The company's pattern is to let activation diagnostics replace the key as the thing you manage.
Four official methods that still surface a real 25-character key
The key that still matters lives on your hardware or in your firmware, not on a website. These are the legitimate sources, each with a different reliability level.
-
The firmware-embedded key (OA3xOriginalProductKey). Most PCs sold since the Windows 8 era store the OEM key in the UEFI/BIOS firmware. Windows and PowerShell can read it. It's the most reliable source for a prebuilt machine.
-
The command-line query. PowerShell can pull the key from firmware or from the installed configuration depending on Windows edition and version.
-
Third-party command-line decoders (documented, no install). Utilities that read the Windows registry's DigitalProductId can decode the installed key. These are not Microsoft tools, so verify the download source carefully.
-
Your original purchase email or retail box. For a retail copy, the key is in the email from the Microsoft Store or on the sticker inside the box. This is the only source that survives a dead motherboard.
| Source | Works for OEM prebuilt | Works for retail | Survives motherboard replacement | Needs internet |
|---|---|---|---|---|
| Firmware key (OA3xOriginalProductKey) | Yes | No | No | No |
| PowerShell / CMD query | Sometimes | Sometimes | No | No |
| Registry decoder (third-party) | Sometimes | Sometimes | No | No |
| Account page / email | No key shown | Order record, not always key | Yes (if account intact) | Yes |
Use the firmware method first on a laptop or prebuilt. Use the email or account method first on a self-built PC with a retail license. The two sources rarely both work, which is why knowing your machine's origin saves time.
Reading the OEM key from PowerShell in five steps
This is the highest-yield method for most people asking the question. It reads the key the manufacturer burned into the firmware. It requires no downloads and no admin install, though it does need an elevated PowerShell window on some systems.
1: Press Windows key, type PowerShell, right-click Windows PowerShell, and choose Run as administrator. 2: Run: wmic path softwarelicensingservice get OA3xOriginalProductKey and press Enter. On Windows 11 builds where WMIC is deprecated, skip to step 3. 3: Alternatively run: Get-CimInstance -ClassName SoftwareLicensingService | Select-Object OA3xOriginalProductKey. 4: Read the 25-character string in the output, formatted as five groups of five (XXXXX-XXXXX-XXXXX-XXXXX-XXXXX). Copy it exactly. 5: Store it somewhere off the machine, such as a password manager, before you reinstall anything.
If the command returns a blank line, the firmware holds no key. That's normal on a self-built PC or a machine whose license came through a digital entitlement rather than an OEM sticker. A blank result isn't an error, it's a signal that the key lives elsewhere, usually in your retail purchase record.
Watch the WMIC deprecation trap. Microsoft has been phasing WMIC out of Windows, and on newer Windows 11 builds the first command may report that WMIC is not recognized. Use the CIM command instead. If both return nothing, the firmware path is a dead end and you should pivot to the account or email route.
The registry decoder that shows the installed key, and its honest limits
A cluster of small utilities reads the encrypted DigitalProductId value in the Windows registry and decodes the installed key. The well-known one is NirSoft's ProduKey, and similar open-source command-line decoders exist. They work by reading a registry location under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion and applying the documented decoding algorithm.
Treat these as a second opinion, not a Microsoft source. They can return a generic key on OEM machines where the firmware key is the real one, and a generic key activates nothing. They also may return a key that has since been upgraded or replaced in the activation path. Always cross-check the decoded string against the firmware result or your purchase record.
A failure case worth knowing: a decoded key can belong to a different Windows edition than the one currently installed. You'll copy it, reinstall, and activation rejects it with an edition mismatch error. The decoded value reflects whatever was installed when the registry was written, not necessarily what your license entitles you to now.
Skip any "key finder" site that claims to look up your key from your Microsoft account online. Microsoft has no public API for that, and such sites are either scraping a tool you could run locally or phishing. Run decoders on your own machine, and download them only from a source you can verify.
Digital license versus product key: which one decides whether Windows activates
The piece of information most useful to this question is that a digital license and a product key are different things with different rules. Microsoft's activation documentation describes the digital license as tied to hardware and, when you sign in, to your Microsoft account. The product key is the 25-character string that creates or transfers the license.
The practical consequence: a digital license can activate Windows with no key at all. Reinstall Windows on the same PC, sign in with the same Microsoft account, and it usually activates. That's the path Microsoft wants you to use, and it's why the account page doesn't bother showing a key.
The license-to-account binding is the lever for moving Windows to new hardware. Retail licenses, per Microsoft's licensing terms, can transfer to a new device when you sign in with the account that holds the license and use the activation troubleshooter. OEM licenses are bound to the original machine and don't transfer. That's a licensing rule, not a technical block, and it's the reason the OEM firmware key is useless on your next build.
What to do when no method returns a key
A handful of scenarios produce no key from any source. You've reinstalled Windows, the firmware was wiped, the retail email is gone, and the registry decoder returns a generic value. This is more common than the guides admit, and the correct next move depends on how you got the license.
If the PC came with Windows preinstalled, contact the manufacturer's support first. Vendors like Dell, HP, and Lenovo can sometimes re-provision the digital entitlement to a replaced motherboard or offer a recovery image. This is a manufacturer service, not a Microsoft website function, and outcome varies by warranty status.
If you have a retail license and no record, Microsoft Support can sometimes help you recover a purchase tied to your Microsoft account by order number or email used at purchase. The key may not be displayed, but the license can be restored to the account. Their support channels are the route, and success depends on whether a purchase record exists.
If you're simply trying to avoid paying again, remember Windows can run unactivated. It works with a watermark and some personalization restrictions, which buys you time to sort out the license. Installing a key you found on a random forum is a bad trade; those keys are often volume or stolen licenses that deactivate weeks later.
Buying a secondhand or replacement key: what the risk actually is
Secondhand key sellers exist, and their prices are far below Microsoft's own Store price. The risk isn't that the key won't activate once. It's that the key was a volume license, a developer key, or an OEM key resold against its license terms, and it gets blocked later. You won't find that outcome documented on microsoft.com because Microsoft doesn't sell secondhand keys.
A safer framing: what you actually need is a valid license, and the legitimate routes are a full retail key from the Microsoft Store, an OEM key from a system builder you trust, or a digital license already tied to your account. The account page won't tell you which kind you hold, but the Settings activation screen will show "Windows is activated with a digital license linked to your Microsoft account" or "with a digital license" alone. That wording is the tell.
If you're buying a used PC, ask for the activation status screen and check it with your own eyes. A seller who can't show the Settings screen activated is selling you a key problem, not a computer. That check takes thirty seconds and is worth more than any key-finder utility.
Keeping your key and license safe after you find them
Once you've located the key or confirmed the digital license, the follow-up is storage. Put the 25-character key in a password manager entry, not in a text file on the desktop. If you run the firmware or registry method, screenshot the result and label the file with the machine's name and the date you captured it.
For a digital license, the equivalent safeguard is knowing which Microsoft account holds it. Sign in once, confirm on the activation screen that it says "linked to your Microsoft account," and record that email address in the same password manager entry. That single habit prevents the most common reactivation failure, which is signing in with the wrong account after a reinstall.
Before a motherboard replacement, decide whether the license travels. Retail licenses can go to new hardware when the account and the activation troubleshooter do their job. OEM licenses stay behind. If you plan to build again, that distinction is worth the upgrade to retail before the old board dies.
FAQ
Can I see my product key on account.microsoft.com?
No, the account page does not display a 25-character Windows product key for retail or OEM installs. Microsoft's order history shows purchase records, and Services & subscriptions shows license status, but the key string itself isn't published there. For the actual key, read it from firmware with PowerShell or decode the installed key from the registry locally.
Why does PowerShell return a blank OA3xOriginalProductKey?
A blank result means the PC's firmware contains no embedded OEM key, which is typical for self-built machines and for systems whose activation came through a digital entitlement. It isn't an error. Pivot to your retail purchase email, or confirm on the Settings activation screen whether a digital license is already doing the work.
Does reinstalling Windows with no key break a digital license?
No. A digital license reactivates automatically when you reinstall on the same hardware and, for account-linked licenses, sign in with the same Microsoft account. Activation can fail if you sign in with a different account than the one that originally licensed the PC, and the activation troubleshooter is the fix path before you go hunting for a key.
Can I move my product key to a new PC?
Only a retail key that becomes a digital license can transfer to new hardware, and Microsoft's licensing terms tie that to the account holding the license. OEM keys are bound to the original machine and don't move. The activation troubleshooter is the mechanism; a raw key string alone is not enough for transfer on a modern install.
Is a third-party key finder safe to run?
Tools that decode the local registry are safe only when downloaded from a verifiable source, and they can return generic keys that activate nothing on OEM machines. Any website claiming to look up your key from your Microsoft account online is not a real service. Run trusted local utilities and never paste your key into an unverified site.
How do I tell if my Windows is activated with a digital license or a key?
Open Settings, System, Activation. The screen states either "Windows is activated with a digital license linked to your Microsoft account," "with a digital license," or that activation is incomplete. That wording is more authoritative than any key-finder output, and it tells you whether you need a key at all.
What happens if I install a key I bought secondhand?
It may activate today and deactivate later if the key was a volume, developer, or OEM key resold against its terms. Microsoft's own Store is the only source that guarantees the key is a retail license you control. A used PC you're buying should always be activated and checked on the Settings screen before you pay.