You turn on the PC and Windows 11 says "Your PIN is no longer available due to a change to the security settings on this device", or "Something happened and your PIN isn't available", or it simply won't accept a PIN you're sure is right. Your files are fine - Windows just can't use the stored PIN anymore. The fix is to sign in another way and create a new PIN.
This guide is for your own PC. If you've forgotten your password as well, see forgot your Windows 11 password - how to reset it.
A Windows Hello PIN is tied to this device and is protected by the PC's security chip (TPM). It can stop working when:
If you don't know that password either, select I forgot my password (Microsoft account) or answer your security questions (local account).
If you sign in with a Microsoft account, the sign-in screen shows I forgot my PIN under the PIN box.
Once you're signed in with your password:
On the same Sign-in options page, under Additional settings, find For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. When it's on, Windows won't let you remove the PIN. Turn it off, then go back to Step 3. You can turn it on again after the new PIN works.
If sign-in keeps failing, sign in at account.microsoft.com from another device and check for security alerts, a password reset request or a locked account. Fix those first, then set up the PIN again.
On a PC managed by an organization, Windows Hello rules come from the organization. If the PIN keeps asking to be reset or setup is blocked, contact your IT team - don't try to work around the policy.
A PIN only protects this PC. Your Microsoft account still needs a strong password and two-step verification - see how to turn on two-factor authentication for Google, Microsoft and Apple.
If you can't sign in with the PIN, the password or a recovery option, the last resort is resetting the PC from the sign-in screen (hold Shift, select Power > Restart, then Troubleshoot > Reset this PC). Back up first if you can: depending on the option you choose, a reset can remove your apps and files. If you have BitLocker device encryption, you'll also need your recovery key, which is stored in your Microsoft account.
Windows can no longer use the PIN it stored for this device, often after a security change such as a firmware update or a TPM reset. Sign in with your password, then set up a new PIN.
On the sign-in screen select Sign-in options and choose the password (key) icon. Use your Microsoft account password or your local account password.
The setting 'For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device' is on. Turn it off in Settings > Accounts > Sign-in options, and Remove becomes available.
Microsoft designed the PIN to work only on the device where you set it up, so a stolen PIN can't be used from another computer the way a stolen password can.
Comments