Why Windows PIN stops working
If you are trying to sign in and Windows Hello PIN suddenly fails, the cause is usually a corrupted PIN store, a broken Windows Hello configuration, or a system update that changed authentication components.
This guide explains how to fix Windows PIN not working with safe, practical steps that work on Windows 10 and Windows 11.
Because the PIN is tied to local security data and sometimes backed by TPM protection, the issue can look bigger than it is.
In many cases, you can restore access without reinstalling Windows or losing files.
Start with the simplest checks
Before changing system settings, rule out common causes that block PIN sign-in.
- Confirm that Caps Lock and Num Lock are not affecting keypad input.
- Try the password option on the sign-in screen to verify your account still works.
- Check whether the keyboard, touchscreen, or biometric device is responding normally.
- Restart the PC once, since Windows Hello services can recover after a clean boot.
If you can sign in with a password, you can make changes from داخل the account.
If you cannot, use recovery options or another administrator account if available.
Use the “I forgot my PIN” option
Microsoft designed Windows Hello to allow PIN reset without removing your account.
On the sign-in screen, select I forgot my PIN and follow the verification prompts.
- Enter your Microsoft account password or other verification method.
- Complete any security code or authenticator prompt.
- Create a new PIN when Windows finishes verification.
This is the fastest fix when the PIN itself is the only problem.
It also helps when the old PIN data is damaged but the account remains intact.
Remove and recreate the PIN from Settings
If you can sign in with a password, removing the stored PIN and creating a fresh one often resolves Windows Hello errors.
- Open Settings.
- Go to Accounts and then Sign-in options.
- Find PIN (Windows Hello).
- Select Remove or Remove this sign-in option.
- Restart the PC.
- Return to the same menu and select Set up to create a new PIN.
On some systems, the Remove button is disabled if Windows detects a policy restriction or broken dependency.
In that case, continue with the repair steps below.
Reset the Windows Hello PIN data
If the PIN reset screen does not work, the local Windows Hello container may be corrupted.
Deleting the PIN-related files forces Windows to rebuild them.
First, sign in with a password and make sure you are using an administrator account.
Then follow these steps carefully:
- Open File Explorer.
- Enable hidden items if needed.
- Go to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc.
- Take ownership of the Ngc folder if access is denied.
- Delete the folder contents or rename the folder.
- Restart the computer.
- Set up a new PIN in Settings > Accounts > Sign-in options.
This procedure fixes many cases where Windows Hello PIN authentication is broken after profile corruption, migration, or update issues.
If you are not comfortable changing permissions, use the safer reset options first.
Check Windows Hello services and security features
Windows Hello depends on background services and security components.
If one is disabled, PIN sign-in can fail even if the PIN is correct.
Verify the Windows Biometric Service
Although biometric hardware is not required for PIN sign-in, related authentication infrastructure can still be affected.
Open services.msc and confirm that relevant services are running and not disabled by policy or third-party software.
Inspect TPM status
Trusted Platform Module, or TPM, protects credential storage on many modern devices.
If TPM is malfunctioning or has been cleared incorrectly, Windows Hello may stop accepting the PIN.
- Open Device Manager or tpm.msc to check TPM availability.
- Look for warnings, missing devices, or firmware-related errors.
- Update BIOS or UEFI firmware only if the manufacturer recommends it.
Do not clear TPM unless you understand the impact.
Clearing it can affect BitLocker, corporate credentials, and other security features.
Repair system files that affect sign-in
Corrupted Windows files can interfere with authentication, especially after updates or abrupt shutdowns.
Use built-in repair tools before moving to advanced recovery methods.
- Open Command Prompt as administrator.
- Run sfc /scannow to repair protected system files.
- After it completes, run DISM /Online /Cleanup-Image /RestoreHealth.
- Restart and test the PIN again.
If the PIN issue started after a recent update, check Windows Update for pending patches.
Microsoft often releases fixes for Windows Hello, login components, and device security.
Test with another account or safe mode
To narrow down the cause, determine whether the problem affects one profile or the whole device.
- Create or use another local administrator account if possible.
- Try signing in there and setting up a new PIN.
- Boot into Safe Mode with networking only if standard sign-in is unreliable.
If another account works, the original user profile may be damaged.
If all accounts fail, the issue is more likely system-wide, involving TPM, Windows Hello, or policy settings.
Remove work or school restrictions
Managed devices can enforce sign-in rules that block PIN changes or reset options.
This is common on laptops joined to Active Directory, Azure Active Directory, Microsoft Entra ID, or an organization-managed MDM solution.
- Open Access work or school in Settings.
- Check whether the device is connected to a corporate tenant.
- Ask your IT administrator whether PIN sign-in is restricted by policy.
On managed endpoints, local fixes may be limited until the organization changes policy or re-enrolls the device.
Try account recovery when Microsoft account sign-in is broken
Sometimes the PIN is not the real problem; the Microsoft account token behind it is failing.
If password sign-in also behaves strangely, recover the account first.
- Reset the Microsoft account password from another device.
- Verify two-factor authentication methods.
- Sign in through the browser at the Microsoft account portal if prompted.
- Sync the device again after password changes.
Once account authentication works, return to Windows Hello and create a fresh PIN.
Prevent the issue from coming back
After you fix Windows PIN not working, a few habits can reduce future sign-in failures.
- Keep Windows updated regularly.
- Avoid force shutdowns that interrupt authentication data.
- Maintain a secure password and recovery method for your Microsoft account.
- Do not disable security services without understanding the impact.
- Back up BitLocker recovery keys and account recovery options.
Windows Hello is designed for convenience, but it depends on several moving parts: local credentials, device security, and account verification.
When one part breaks, the PIN can fail even though the rest of the system is healthy.
Following these steps in order gives you the best chance of restoring access quickly while keeping the device secure.