Error 0x80090016 When Creating a PIN? Fixes

Error 0x80090016 (often paired with the message “Something went wrong� or “That didn’t work�) appears in Windows when you try to set up or change a Windows Hello PIN. The fix is usually to clear the Windows Hello-related certificates and keys in the Credential Manager, or to remove and re-add your Microsoft account, but there are several other proven solutions depending on the exact cause.

What Causes Error 0x80090016?

This error code maps to NTE_PROVIDER_DLL_FAIL, which means Windows could not load or use the cryptographic provider that stores your PIN’s protected data. Common triggers include:

• Corrupted or leftover NGC (Next Generation Credentials) files in C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc.
• Outdated or conflicting display drivers (especially after a Windows update).
• A broken Trusted Platform Module (TPM) driver or firmware issue.
• Third-party security software interfering with Windows Hello.
• A corrupted user profile or a Microsoft account that is not properly synced.

Because the PIN is tied to your device’s security hardware and your account, any one of these can cause the provider to fail.

Before You Start: Back Up and Sign In

Some fixes require restarting or signing out. Before trying anything, make sure you know your Microsoft account password and have another way to sign in (like a password or a physical security key). Also, if you use BitLocker, have your recovery key handy—clearing TPM or changing security settings can trigger a recovery prompt.

Fix 1: Clear the Windows Hello Cache (Most Common Fix)

This is the first fix to try because it directly removes the corrupted data that produces the error.

1. Press Win + R, type services.msc, and press Enter.
2. Find Windows Hello Face Recognition and Windows Hello PIN services. Right-click each and select Stop.
3. Open File Explorer and navigate to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc. You may need to enable “Show hidden files� and take ownership of the folder.
4. Delete all files and subfolders inside the Ngc folder. Do not delete the folder itself.
5. Restart the two services you stopped (right-click and select Start).
6. Go to Settings > Accounts > Sign-in options, and try setting up your PIN again.

If you cannot delete the files because they are in use, restart in Safe Mode and repeat the steps.

Fix 2: Remove and Re-add Your Microsoft Account

If the cache clear doesn’t work, the account’s credentials may be out of sync. This fix forces Windows to rebuild the PIN container.

1. Go to Settings > Accounts > Your info.
2. Click Sign in with a local account instead. Follow the prompts (you’ll need your Microsoft password). This does not delete your files.
3. After switching, restart your PC.
4. Go back to Settings > Accounts > Your info and click Sign in with a Microsoft account.
5. Once signed in, try creating a PIN again.

This is a bit time-consuming but resolves many persistent errors.

Fix 3: Update or Reinstall the TPM Driver

Windows Hello relies on the TPM chip. A driver issue can cause the cryptographic provider to fail.

1. Press Win + X and select Device Manager.
2. Expand Security devices.
3. Right-click Trusted Platform Module 2.0 and select Update driver > Search automatically.
4. If that doesn’t help, right-click it again and select Uninstall device. Check “Delete the driver software for this device� if offered, then restart. Windows will reinstall the driver automatically.

Note: Do not clear the TPM from the BIOS unless you have BitLocker recovery keys and are prepared to re-set up Windows Hello entirely.

Fix 4: Run the Windows Hello Troubleshooter and DISM/SFC

System file corruption can also cause this error. Run these built-in tools:

1. Open Settings > System > Troubleshoot > Other troubleshooters (or “Additional troubleshooters�).
2. Run the Windows Hello PIN troubleshooter if available.
3. Open Command Prompt as administrator and run sfc /scannow.
4. Then run DISM /Online /Cleanup-Image /RestoreHealth.
5. Restart and try again.

Fix 5: Check Group Policy and Third-Party Security Software

If you are on Windows Pro or Enterprise, a Group Policy setting might block PIN setup. Press Win + R, type gpedit.msc, and navigate to Computer Configuration > Administrative Templates > System > Logon. Look for “Turn on convenience PIN sign-in� and set it to Enabled (or “Not Configured�).

Also, temporarily disable any third-party antivirus or firewall software to see if it’s interfering. If the PIN works after disabling, add Windows Hello to the software’s exclusions.

Frequently Asked Questions

Will I lose my files if I delete the Ngc folder?

No. The Ngc folder only contains PIN-related cryptographic data. Your documents, photos, and apps are untouched. You will only need to set up your PIN again.

Can I use a password instead of a PIN?

Yes, you can always sign in with your Microsoft account password or a local account password. The PIN is optional. If you prefer not to use Windows Hello, you can skip PIN setup entirely.

Why does the error appear only after a Windows update?

Windows updates sometimes change how security components interact, especially if a driver becomes outdated. The cache clear and driver update fixes usually resolve this.

Does this error mean my TPM is broken?

Not necessarily. A TPM driver issue can produce the same error. Only if the TPM fails hardware tests (check tpm.msc for “Ready� status) would you consider a hardware problem.

What if none of these fixes work?

Try creating a new local user account and see if the PIN works there. If it does, the issue is with your original profile. If it doesn’t, a Windows repair install (using the “Keep my files� option) is the next step.

Related

• Venmo Payments: How to Pay & Protect Your Purchase
• Copy Contacts from iPhone to Samsung S8 Plus
• Windows Settings Reset on Reboot? Fix It