Fix Can’t Remove Windows Hello PIN in Windows 10

If Windows 10 won’t let you remove your Windows Hello PIN—the option is greyed out or missing—the fix is to disable the “Windows Hello sign-in” group policy or delete the PIN through the sign-in options after turning off “Require Windows Hello sign-in for Microsoft accounts.” This is a common issue tied to security policies, not a hardware or driver problem, and it can be resolved in a few minutes without third-party tools.

Why Windows 10 Forces You to Keep a PIN

Windows Hello PIN is part of Microsoft’s passwordless sign-in push. On many Windows 10 installations—especially after the May 2020 update—Microsoft made the PIN a mandatory part of the sign-in process for Microsoft accounts. The “Remove” button under Settings > Accounts > Sign-in options > PIN (Windows Hello) is often greyed out because the operating system treats the PIN as the primary authentication method, not an optional extra.

This behavior is controlled by a group policy setting called “Turn on convenience PIN sign-in” and a related policy for Windows Hello for Business. When these policies are set to “Enabled” or “Not Configured” in certain ways, Windows hides or disables the removal option. The same applies to local accounts, though the trigger is usually a registry key or a leftover policy from a previous domain join.

What Actually Controls the Remove Button

The removal option is not just a simple toggle in the Settings app. It depends on three layers:

• Group Policy: Computer Configuration > Administrative Templates > System > Logon > “Turn on convenience PIN sign-in.” If this is set to “Enabled,” the PIN becomes a required sign-in option.
• Windows Hello for Business policy: Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business. If this is set to “Enabled,” the PIN is treated as part of a managed security framework.
• Microsoft account settings: If you sign in with a Microsoft account, the online account settings can enforce PIN usage. You may need to sign in at account.microsoft.com and update your security info.

For most home users, the culprit is the convenience PIN policy being enabled by a recent Windows update or by a previous administrator action. Once that policy is set to “Disabled” or “Not Configured,” the Remove button becomes active.

How to Fix It: Step-by-Step

Here are the exact steps to regain the ability to remove your Windows Hello PIN. Try them in order, as the first one resolves the majority of cases.

1. Open Group Policy Editor (only available on Windows 10 Pro, Enterprise, or Education): Press Win + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > System > Logon.
3. Double-click “Turn on convenience PIN sign-in”.
4. Set it to “Disabled” or “Not Configured” (both work for removal). Click OK.
5. If you see a similar policy under Windows Components > Windows Hello for Business, set that to “Disabled” as well.
6. Close the editor and restart your PC.
7. Go to Settings > Accounts > Sign-in options > PIN (Windows Hello). The Remove button should now be clickable.
8. If it is still greyed out, open Settings > Accounts > Sign-in options and scroll to “Require Windows Hello sign-in for Microsoft accounts”. Turn that toggle to Off. You may need to enter your password to confirm.

If you are on Windows 10 Home, the Group Policy Editor is not available. In that case, use the registry method below.

Registry Method for Windows 10 Home

Windows 10 Home lacks gpedit.msc, but the same setting lives in the registry. Editing the registry is safe if you follow these steps carefully and back up first.

1. Press Win + R, type regedit, and press Enter.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System.
3. Look for a DWORD value named AllowDomainPINLogon. If it exists, double-click it and set the value data to 0.
4. If the key System does not exist, right-click on Windows, select New > Key, name it System, then create the DWORD.
5. Close the registry editor and restart.

Note that this registry key is primarily for domain accounts, but it has been known to affect local accounts on Home editions when a policy was previously applied. If the key is not present, the registry method may not help, and you should focus on the Microsoft account toggle.

What to Do If the Remove Button Still Won’t Work

If both the policy and the registry method fail, the issue is likely tied to your Microsoft account itself. Here are additional steps:

• Sign out of Windows Hello entirely: Go to Settings > Accounts > Sign-in options, click on Windows Hello PIN, and choose “I forgot my PIN”. This will prompt you to re-verify your account, and after resetting, the Remove option may appear.
• Switch to a local account: Go to Settings > Accounts > Your info and click “Sign in with a local account instead”. This removes the Microsoft account requirement, and the PIN can then be removed from the local account settings.
• Check for pending Windows updates: Some updates have known bugs that grey out the Remove button. Install all pending updates and restart.
• Run the Windows Hello troubleshooter: Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters and run “Windows Hello.”

If none of these work, you can also try creating a new local administrator account, signing into it, and then removing the PIN from the old account. This is a last resort but often bypasses corrupted user profile settings.

Common Misconception: The PIN Is Not a Password

Many users confuse the Windows Hello PIN with a password. They are different: the PIN is tied to the specific device, while the password is tied to your account. Removing the PIN does not remove your password—it simply disables the quick sign-in method. This is why the setting is under “Sign-in options” and not under “Password.”

Another misconception is that the PIN is required for security. While Microsoft recommends it, you can absolutely sign in with just a password or a picture password. The PIN is a convenience feature, not a security mandate, unless your device is managed by an organization that enforces Windows Hello for Business.

Frequently Asked Questions

Why is the Remove button greyed out?
The Remove button is greyed out because a group policy or the Microsoft account setting “Require Windows Hello sign-in for Microsoft accounts” is enabled. Disabling that policy or toggling the setting off will activate the button.

Can I remove the PIN without losing my password?
Yes. Removing the PIN only deletes the PIN-based sign-in. Your account password remains intact, and you can still sign in with it.

Will removing the PIN affect my fingerprint or face sign-in?
Yes. Windows Hello fingerprint and face recognition depend on the PIN as a fallback. If you remove the PIN, those biometric sign-in methods will also be disabled. You can re-enable them later by setting up a new PIN.

I don’t have gpedit.msc. What can I do?
Windows 10 Home does not include Group Policy Editor. Use the registry method described above, or simply toggle off “Require Windows Hello sign-in for Microsoft accounts” in Settings.

Is it safe to delete the PIN from the registry?
Deleting the PIN itself is not done through the registry; you only modify the policy that blocks removal. Editing the registry carries risk, so back up before making changes and only follow the exact steps provided.

Why does Windows keep asking me to set up a PIN after I remove it?
Windows will occasionally prompt you to set up a PIN as part of its “recommended settings” during updates or sign-in. You can dismiss the prompt, or disable the convenience PIN policy to stop the reminders.

Related

• Windows Undo Options: Do They Match the Fix?
• Fix Windows 10 Create PIN Prompt at Startup
• Preview Not Working on Mac? Fixes That Actually Work