Sign in pin is not working

Question

I had Windows Hello PIN set up earlier on my laptop and it was working fine. After a recent Windows update/reinstall, the PIN option is no longer available.

In Settings → Accounts → Sign-in options:

• PIN (Windows Hello) shows “This option is currently unavailable”
• Fingerprint and Facial recognition also show unavailable
• I also see a message saying: “This PIN isn’t working for your organization’s resources”

I have already tried:

• Restarting the system
• Using “I forgot my PIN”
• Clicking “fix it” option

But nothing worked — I’m unable to set up a new PIN as well.

This is a personal laptop (not connected to any organization/work account).

How can I restore Windows Hello PIN and remove this issue?

Device details:

• Windows version: 11
• Device: Lenovo

Please help.I had Windows Hello PIN set up earlier on my laptop and it was working fine. After a recent Windows update/reinstall, the PIN option is no longer available.

In Settings → Accounts → Sign-in options:

• PIN (Windows Hello) shows “This option is currently unavailable”
• I also see a message saying: “This PIN isn’t working for your organization’s resources”

I have already tried:

• Restarting the system
• Using “I forgot my PIN”
• Clicking “fix it” option

But nothing worked — I’m unable to set up a new PIN as well.

This is a personal laptop (not connected to any organization/work account).

How can I restore Windows Hello PIN and remove this issue?

Please help.

Answer 1

Please try these steps, see if they helps:

1. Open File Explorer, make sure you enable Hidden items.
2. Navigate to: C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft
3. Delete the NGC folder contents.
4. Restart, sign in back with your password, and set up a new PIN then.

Let us know if this helps!

Answer 2

Hello, thank you for reaching out to Microsoft Q&A.

You may encounter this error if you have connected your device to a Work/School account and you are signed in with an Azure account.

Do you remember adding your Work/School account to the device before?(Settings > Accounts > Access Work/School account)

As you are unable to sign in, here's what you can try:

Option 1. Reset TPM Memory from BIOS.

TPM is responsible for storing the ashes for Windows Hello PIN. Resetting it may resolve the sign-in issue.

1. Boot your PC into the BIOS Utility screen.
2. In the Security or Advanced tab, find TPM 2.0 Security or Intel PTT (or similar terms), select Clear TPM, and click OK.
3. Save the configuration changes made and restart your computer.
4. Sign in with your PIN.

Option 2.

Your device might be booted into Diagnostic startup mode, which disables all the necessary Windows services. This could have happened after making any recent system changes to your device. You can follow the guidelines in the article below to switch the startup type to Normal Startup and see if you can sign in with your PIN normally again.

https://www.winhelponline.com/blog/something-happened-pin-not-available-diagnostic-mode/

Note - This article was written by a trusted Microsoft MVP, Ramesh.

Disclaimer - This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.'

Let me know if you still need more help.

Answer 3

The PIN and Windows Hello options are controlled by Windows Hello policies and the local PIN/NGC configuration. After an update/reinstall, these can become misconfigured so that Windows thinks the device is managed by an organization, which blocks PIN setup.

Use the following sequence to restore PIN sign-in:

1. Sign in with password first
   Since PIN is unavailable, sign in using the account password.
2. Remove the existing (broken) PIN configuration
   1. Open Settings > Accounts > Sign-in options.
   2. Under PIN (Windows Hello), if there is any option to Remove the PIN, use it.
   3. If the PIN cannot be removed from Settings, use the lock screen: go to the lock screen, choose Sign-in options, and remove/reset the PIN there. The Windows Hello troubleshooting guidance notes that removing and re-adding the PIN can restore PIN functionality:

      “PIN can be reset in the lock screen under Sign-in options. To do so, remove PIN and add it again. This will prompt PIN reset, which should restore PIN functionality.”

3. Reset the PIN from Settings
   Once signed in with the password and any old PIN is removed:
   1. Go to Settings > Accounts > Sign-in options (or use the shortcut link: Sign-in options – ms-settings:signinoptions).
   2. Select PIN (Windows Hello).
   3. If a PIN exists and you know it, choose Change PIN and follow the instructions.
   4. If the PIN is not working or you do not know it, select I forgot my PIN and follow the directions to verify the account and create a new one.
      The official guidance for this flow is:

   “Select PIN (Windows Hello) > Change PIN and then follow the instructions… If you forgot your PIN, select I forgot my PIN and follow the directions to verify your account and create a new one.”

4. Check that Windows Hello is not blocked by policy
   On personal devices, Windows Hello can be disabled if policies are set as if the device were organization-managed. For Windows 10/11, when both “Use convenience PIN” and “Use Windows Hello for Business” policies are enabled and the device is treated as organization-joined, PIN creation is blocked. The documented behavior is:

   “A user can't create a convenience PIN… when the following policies are both enabled, unless the device is joined to Microsoft Entra ID… To allow convenience PINs to be created on devices that aren't joined to Microsoft Entra ID, make sure that:

   1. The Use Windows Hello for Business policy isn't enabled.
   2. The Turn on convenience PIN sign-in policy is enabled.”

   If this personal laptop was accidentally set to be managed (for example, by choosing an option like “Automatically sign in to all desktop apps and websites on this device” and allowing an organization to manage the device), that can cause the “This PIN isn’t working for your organization’s resources” message and disable PIN setup. In that case:
   • Remove any work/school account from Settings > Accounts > Access work or school.
   • Ensure the device is not joined to any organization management.
   • After removing such management, restart and repeat step 3 to set up the PIN again.
5. Reconfigure biometrics (fingerprint/face)
   Once the PIN is working again, re-add fingerprint or face:
   1. Go to Settings > Accounts > Sign-in options.
   2. Under Fingerprint recognition (Windows Hello) or Facial recognition (Windows Hello), remove existing enrollments if present, then select Set up (or Add another) and follow the prompts.
      The Windows Hello troubleshooting guidance recommends removing the nonfunctioning enrollment and re-enrolling when biometrics fail.

If, after removing organizational management and resetting the PIN as above, PIN and Windows Hello options still show as unavailable, the local PIN/NGC store may be corrupted beyond normal repair. In such cases, as seen in similar support scenarios, a full reset/reinstall of Windows can be required to restore PIN functionality.

---

References:

• Windows Hello Enhanced Sign-in Security
• Change or reset your PIN in Windows
• Windows Hello common issues and troubleshooting tips
• Can't configure a PIN when Convenience PIN and Hello for Business policies are enabled