Pin and Authenticator App

Question

I cannot set up a pin or use the codes from the authenticator app on my new HP laptop. Do I need to do a factory reset or how do I get this to work?

Answer 1

A factory reset is not required. The issue is typically with how Windows Hello PIN and Microsoft Authenticator are configured, not with the device itself.

To get this working, use these steps and checks:

1. Sign in using password first
   Sign in to Windows on the HP laptop with the account password (not PIN or Authenticator). Once signed in, configure sign-in methods.
2. Set up or fix the Windows Hello PIN
   If Windows is prompting repeatedly for a PIN or the PIN is failing, follow the Windows Hello troubleshooting guidance:
   • Open Settings → Accounts → Sign-in options.
   • Under PIN (Windows Hello):
     • If asked to create a PIN again, this can be due to security updates. Create the PIN again.
     • If errors occur during PIN creation, sign out of Windows, sign back in with the password, and try creating the PIN again.
   • If the PIN still fails to work, use the reset your PIN option referenced in the Windows Hello troubleshooting article.
3. Check Authenticator app codes vs. what the site expects
   When signing in to Microsoft services on the laptop:
   • If the site asks for a 6-digit OTP code, ensure the account in Microsoft Authenticator shows a one-time password code entry and use that code.
   • If the Authenticator app does not show a one-time password code for the account, the account may not be configured for OTP in the app and may instead be using push notifications or passwordless sign-in.
4. If Authenticator is stuck or cannot be used
   If the account cannot be verified because the Authenticator registration is tied to an old device or is misconfigured:
   • For a work or school account where an admin exists:
     Ask the tenant/global admin to go to the Microsoft Entra admin center → Users → All users → select the user → Authentication methods → choose Require re-register multifactor authentication. This forces a fresh MFA setup so the Authenticator app can be registered again on the new laptop/phone.
   • If this is a business tenant and the affected user is the only admin and cannot access the admin portal at all:
     Contact Microsoft support by phone using the regional number from Customer service phone numbers - Microsoft Support and request escalation to the Data Protection team to reset MFA for the tenant admin account.
5. If using passkeys, security keys, or other methods
   • If a FIDO2 security key is used and the PIN for the key is the problem, open Settings → Accounts → Sign-in options → Security Key → Manage, then use Add or Change under Security Key PIN to set a new PIN for the key.
6. No need for factory reset
   None of the documented resolutions for PIN or Authenticator issues require a factory reset of the PC. The fixes are done through Windows Settings, the Authenticator app, or (for work/school accounts) via an admin or Microsoft support resetting MFA.

If the account is a personal Microsoft account and only Authenticator is configured with no backup method, follow the passwordless/MFA guidance for personal accounts and ensure another sign-in method (SMS, email, or password) is available so Authenticator can be reconfigured.

---

References:

• Windows Hello common issues and troubleshooting tips
• How to go passwordless with your Microsoft account
• Set up Security info from a sign-in page
• Set up a security key as your verification method
• I need to reset my mfa methods - Microsoft Q&A
• Reset Personal Azure MFA - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Set up a passkey in Microsoft Authenticator