Fix Windows 10 Create PIN Prompt at Startup

If Windows 10 keeps asking you to “Create a PIN” every time you start or sign in, the fix is usually to disable the Windows Hello sign-in option or reset the PIN-related settings in the registry. This guide explains why the prompt appears, the exact steps to stop it, and what to do if it keeps coming back.

Why Windows 10 Keeps Asking You to Create a PIN

Windows 10 pushes the PIN (Personal Identification Number) as part of Windows Hello, a biometric and PIN-based sign-in system. Microsoft designed Windows Hello to be more secure than a traditional password, and the “Create a PIN” prompt is part of the initial setup and also appears after certain updates or when the security policy changes. The prompt typically shows up when:

You skipped setting up a PIN during installation and Windows later nags you to complete it.
A Windows update resets or disables your current sign-in options.
Your device is managed by an organization that enforces Windows Hello for Business.
The registry value that controls the prompt is missing or set to the default (which enables the prompt).

The prompt is not harmful, but it can be annoying, especially if you prefer using a password or a local account. The good news is that you can turn it off in a few minutes.

How the “Create a PIN” Prompt Works

The prompt is controlled by a combination of Windows Hello settings and a registry key. When you first set up Windows 10, the system offers a PIN as an alternative to your Microsoft account password. If you decline, Windows may still remind you later. The registry key PassportForWork under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows contains a value called Enabled. When this value is set to 0, Windows Hello (and thus the PIN prompt) is disabled. When it is 1 or missing, the prompt can appear. Additionally, the Settings app has a “Require Windows Hello sign-in for Microsoft accounts” toggle that, when turned on, forces the prompt.

Method 1: Turn Off Windows Hello Sign-In in Settings

This is the simplest and safest fix for most users. It does not require editing the registry and works on both Home and Pro editions.

Open Settings (press Windows + I).
Go to Accounts > Sign-in options.
Scroll down to the Windows Hello section.
If you see a toggle for “Require Windows Hello sign-in for Microsoft accounts,” turn it Off.
If you already have a PIN set, you can also click Remove under the PIN section to delete it. Windows will ask you to confirm your password first.
Restart your computer and check if the prompt still appears.

If you don’t see the toggle, it may be because you are using a local account (not a Microsoft account) or because your organization manages the device. In that case, try Method 2.

Method 2: Disable the Prompt via Registry Editor

If the Settings toggle is missing or ineffective, you can disable the prompt by creating a registry value. This method is more technical, so back up your registry first (File > Export) before making changes.

Press Windows + R, type regedit, and press Enter.
Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
Right-click on the Windows key, select New > Key, and name it PassportForWork.
Right-click on the new PassportForWork key, select New > DWORD (32-bit) Value, and name it Enabled.
Double-click Enabled, set the value data to 0, and click OK.
Close Registry Editor and restart your computer.

Setting Enabled to 0 disables Windows Hello entirely, which stops the “Create a PIN” prompt. If you later want to re-enable it, change the value back to 1 or delete the Enabled value.

What to Do If the Prompt Still Appears After These Fixes

Sometimes the prompt persists because of a pending Windows update or a corrupted user profile. Try these additional steps in order:

Run Windows Update – Go to Settings > Update & Security > Windows Update and install any pending updates. A bug fix might resolve the issue.
Check for Group Policy settings – If you have Windows 10 Pro or Enterprise, press Windows + R, type gpedit.msc, and navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business. Look for a policy that says “Use Windows Hello for Business” – if it is set to “Enabled,” change it to “Not Configured” or “Disabled.”
Create a new user account – If the prompt is tied to a corrupted profile, create a new local administrator account (Settings > Accounts > Family & other users > Add someone else to this PC) and see if the prompt appears there. If it doesn’t, migrate your files and use the new account.
Run the Windows Troubleshooter – Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters and run “Windows Update” and “Sign-in” troubleshooters if available.

If none of these work, the prompt may be enforced by your device manufacturer’s software or by an organization policy. In that case, contact your IT administrator or device support.

Common Misconceptions and Pitfalls

A common misconception is that disabling the PIN prompt also disables your password sign-in. That is not true – you can still use your Microsoft account password or a local account password. The PIN is an extra option, not a requirement for signing in. Another pitfall is editing the registry incorrectly: if you set the Enabled value under the wrong key (e.g., under HKEY_CURRENT_USER instead of HKEY_LOCAL_MACHINE), it may not work. Also, be aware that some Windows updates may revert the registry change, so you might need to reapply it after a major update.

Alternatives: Using a Password or a Picture Password

If you dislike the PIN but want a faster sign-in than typing a full password, Windows offers other options:

Picture password – You draw gestures on a chosen photo. Set it up in Settings > Accounts > Sign-in options > Picture Password.
Security key – A physical USB key that you plug in to sign in. Requires compatible hardware.
Biometric sign-in – If your device has a fingerprint reader or camera, you can use Windows Hello Fingerprint or Face, but these require setting up a PIN first as a fallback.

If you prefer to use only your password, simply ignore the prompt and sign in with your password. The prompt may appear occasionally, but it will not force you to set up a PIN.

Frequently Asked Questions

Why does Windows 10 ask for a PIN even though I never set one up?

Windows 10 defaults to encouraging Windows Hello sign-in. If you skipped the setup during installation, the system may prompt you later, especially after updates or when you sign in with a Microsoft account. The prompt is a reminder, not a security threat.

Will disabling Windows Hello affect my biometric sign-in (fingerprint/face)?

Yes. Disabling Windows Hello via the registry or the Settings toggle will turn off fingerprint, face, and PIN sign-in. You will need to use your password instead. If you want to keep biometrics but remove the prompt, you cannot – biometrics require a PIN as a fallback.

Can I remove the PIN without disabling Windows Hello?

Yes, you can remove the PIN from Settings > Accounts > Sign-in options > PIN > Remove. This will stop the prompt, but Windows Hello biometrics will also be disabled until you set up a new PIN. The “Create a PIN” prompt may return after a major update.

Is it safe to edit the registry to disable the prompt?

Editing the registry is safe if you follow the steps carefully and back up first. The Enabled value under PassportForWork is a documented policy key. Incorrect changes can cause sign-in issues, so only modify the specific key mentioned in this guide.

Why does the prompt appear on a work or school computer?

Organizations often enforce Windows Hello for Business via Group Policy. In that case, the prompt is intentional and cannot be disabled by the user. Contact your IT administrator to request an exception or to understand the policy.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →