If your PIN option is missing or not working on the Windows 11 sign-in screen, you can usually fix it by resetting the PIN through your Microsoft account, deleting the NGC folder, or running the Windows Hello troubleshooter. This article explains the most common causes and gives you step-by-step fixes that work for most users.
Why Does the PIN Option Disappear?
Windows 11 uses a PIN as part of Windows Hello, which is a more secure and convenient way to sign in than a password. The PIN is stored locally on your device, not in the cloud, and it is tied to your TPM (Trusted Platform Module) and your account. When the PIN option is missing or not working, it usually means one of the following:
- Your device’s TPM or security settings have changed (e.g., after a BIOS update).
- The Windows Hello service or related system files are corrupted.
- Your user profile’s NGC folder (where PIN data is stored) is damaged.
- You recently changed your Microsoft account password, which can sometimes invalidate the PIN.
- A Windows update or third-party security software interfered with Windows Hello.
Understanding the cause helps you choose the right fix. Many of the solutions below are safe and can be done without losing any personal files.
Fix 1: Reset Your PIN via Your Microsoft Account
If you use a Microsoft account to sign in to Windows 11, you can reset your PIN from the web. This works even if you can’t get past the sign-in screen, as long as you have another device or a phone.
- On any device, go to
account.microsoft.comand sign in with your Microsoft account credentials. - Go to Security > Security info or Password & security.
- Look for Windows Hello PIN or Sign-in options and choose I forgot my PIN.
- Follow the prompts to verify your identity (via email, phone, or authenticator app).
- Once verified, you’ll be asked to create a new PIN. Enter it and confirm.
After resetting, go back to your Windows 11 device and try signing in with the new PIN. If the option is still missing, move on to the next fix.
Fix 2: Delete the NGC Folder (Advanced)
The NGC folder (C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc) stores all Windows Hello PIN data. If it’s corrupted, the PIN option may vanish. Deleting it forces Windows to recreate it from scratch. This is a more advanced fix—back up important data first, and make sure you have another way to sign in (like a password).
- Boot into Safe Mode. To do this, restart your PC and press Shift while clicking Restart on the sign-in screen. Then go to Troubleshoot > Advanced options > Startup Settings > Restart, and press 4 or F4 to enter Safe Mode.
- Once in Safe Mode, open File Explorer and navigate to the path above. You may need to enable showing hidden files and folders.
- Right-click the Ngc folder and select Rename. Change it to Ngc.old (don’t delete it permanently just yet).
- Restart your PC normally. Windows will recreate the NGC folder automatically.
- Try setting up a new PIN by going to Settings > Accounts > Sign-in options > PIN (Windows Hello) > Add.
If this doesn’t work, you can rename the folder back to Ngc to restore the original state.
Fix 3: Run the Windows Hello Troubleshooter
Windows 11 includes a built-in troubleshooter for Windows Hello. It can automatically detect and fix common issues like corrupted settings or missing services.
- Open Settings (Win + I) and go to System > Troubleshoot > Other troubleshooters.
- Scroll down to Windows Hello and click Run.
- Follow the on-screen instructions. The tool may ask you to sign in with your password to proceed.
If the troubleshooter finds nothing, try the next fix.
Fix 4: Check and Re-enable Windows Hello Services
Windows Hello relies on several background services. If any of them are disabled, the PIN option won’t show up.
- Press Win + R, type
services.msc, and press Enter. - Look for these services and make sure they are set to Automatic and Running:
- Windows Hello Face Driver (if you use face recognition)
- Windows Hello Security Service (or NgcSvc)
- TPM Base Services
- If any are not running, right-click and select Start. Also double-click each to set Startup type to Automatic.
- Restart your PC.
Fix 5: Use Group Policy or Registry (Pro/Enterprise)
On Windows 11 Pro or Enterprise, a group policy might be blocking PIN sign-in. On Home, a registry tweak can do the same.
Group Policy:
- Press Win + R, type
gpedit.msc, and press Enter. - Navigate to Computer Configuration > Administrative Templates > System > Logon.
- Double-click Turn on convenience PIN sign-in and set it to Enabled.
- Click OK and restart.
Registry (Home):
- Press Win + R, type
regedit, and press Enter. - Go to
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System. - Look for a DWORD called AllowDomainPINLogon. If it exists, set its value to 1. If not, create it (32-bit DWORD) and set to 1.
- Restart your PC.
Fix 6: Reset Windows Hello (Without Losing Files)
If none of the above works, you can reset Windows Hello entirely. This will remove all PIN, fingerprint, and face data, but your files and apps stay intact.
- Go to Settings > Accounts > Sign-in options.
- Under PIN (Windows Hello), click Remove (if available). If not, you may need to sign in with your password first.
- After removal, restart your PC and set up a new PIN by clicking Add.
If the Remove button is greyed out, try the NGC folder method above.
Frequently Asked Questions
Why is my PIN not working even after resetting it?
If your PIN still fails after a reset, it could be due to a corrupted user profile or a conflict with a third-party security app. Try creating a new local user account temporarily to see if the PIN works there. If it does, migrate your files to that new account.
Does resetting the PIN delete my files?
No. Resetting your PIN only changes your sign-in credential. Your documents, photos, and installed apps remain untouched.
Can I use my password instead of a PIN?
Yes. You can always sign in with your Microsoft account password or your local account password. To switch back to password-only, go to Settings > Accounts > Sign-in options and disable Windows Hello.
What if I forgot my Microsoft account password too?
You can reset your Microsoft account password online at account.microsoft.com using recovery options like your recovery email or phone number. If you have no recovery options, you may need to contact Microsoft support.
Is it safe to delete the NGC folder?
Deleting the NGC folder is safe if you have another way to sign in (like a password). It only contains Windows Hello PIN data. After deletion, Windows recreates it, and you can set up a new PIN.
Why does Windows 11 sometimes require a PIN after a restart?
Windows 11 may require a PIN after a restart if you have “Windows Hello sign-inâ€� enabled for improved security. This is normal. If you don’t want it, you can turn it off in Settings > Accounts > Sign-in options.
Related
General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.
More in this bed
- How to Limit Mobile Data Usage on Android
- How to Recover Deleted Voicemail on Android
- View Shared Folder Permissions in Windows
- Check If a Game Is Installed on a Samsung Phone
- Error 0x80070522 Required Privilege Not Held: Fix
- How to Make a Family Tree in Excel