Fix Windows Hello Error While Creating PIN

If you see an error while trying to create a Windows Hello PIN on Windows 10, the fix usually involves resetting the NGC folder or adjusting Group Policy settings. This article walks you through the most reliable solutions, from simple restarts to deeper system file checks, so you can get your PIN working again.

Why Windows Hello PIN Errors Happen

Windows Hello PIN is a local sign-in method tied to your device, not your Microsoft account password. The system stores PIN-related data in a secure folder called NGC (Next Generation Credentials). When this folder becomes corrupted, or when certain security policies block PIN creation, you’ll see errors like “Something went wrong” or “This option is currently unavailable.” Common triggers include:

• Recent Windows updates that change security defaults
• Antivirus or security software interfering with credential storage
• Corrupted user profile or system files
• Group Policy settings that disable Windows Hello for Business

Before You Start: Basic Checks

Try these quick steps first—they resolve a surprising number of cases:

1. Restart your computer completely (not just sleep).
2. Make sure you’re connected to the internet—Windows may need to sync your account.
3. Check that your system date and time are correct (right-click the clock > Adjust date/time).
4. Run Windows Update and install all pending updates.

If the error persists, move on to the solutions below.

Method 1: Reset the NGC Folder

The NGC folder stores your PIN credentials. Corrupted data here is the most common cause of PIN creation errors. Resetting it forces Windows to rebuild the folder from scratch.

1. Press Win + R, type services.msc, and press Enter.
2. Find Windows Hello Face Recognition and Windows Hello PIN services. Right-click each and select Stop.
3. Open File Explorer and navigate to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC. You may need to enable viewing hidden files (View > Options > View > Show hidden files).
4. Right-click the NGC folder and select Properties. Go to the Security tab, click Advanced, then Change next to Owner. Enter your username, click Check Names, then OK.
5. Check the box “Replace owner on subcontainers and objects” and apply.
6. Now delete the contents of the NGC folder (not the folder itself). You may need to take ownership of subfolders first.
7. Restart your computer and try setting up a PIN again.

If you can’t delete files due to permissions, try booting into Safe Mode and repeating the steps.

Method 2: Use Group Policy to Enable PIN

If your Windows 10 edition is Pro or Enterprise, a Group Policy setting might be blocking PIN creation. This is especially common on corporate-managed devices.

1. Press Win + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > System > Logon.
3. Double-click Turn on convenience PIN sign-in.
4. Set it to Enabled and click OK.
5. Close Group Policy Editor and restart your PC.

Note: If you’re on Windows 10 Home, Group Policy Editor isn’t available by default. You can edit the registry instead—search for “Windows Hello for Business” in the registry and ensure the value is set to 1.

Method 3: Run System File Checker and DISM

Corrupted system files can also cause Windows Hello errors. Run these built-in tools to repair them:

1. Open Command Prompt as administrator (right-click Start > Command Prompt (Admin)).
2. Type sfc /scannow and press Enter. Wait for the scan to complete.
3. Then type DISM /Online /Cleanup-Image /RestoreHealth and press Enter.
4. Restart your computer and try again.

These commands can take 10-20 minutes. Don’t interrupt them.

Method 4: Create a New User Account

If the error is tied to your current user profile, creating a new local administrator account can bypass the issue temporarily and let you set up a PIN there.

1. Go to Settings > Accounts > Family & other users.
2. Click Add someone else to this PC and choose “I don’t have this person’s sign-in information.”
3. Follow the prompts to create a local account.
4. Sign in with that account, try setting up a PIN, and see if it works.

If it does, you can migrate your files and settings to the new account. If it doesn’t, the problem is system-wide, not profile-specific.

Frequently Asked Questions

Why does Windows say “Something went wrong” when I try to set a PIN?
This generic error usually means the NGC folder is corrupted or Windows Hello services aren’t running. Try resetting the NGC folder (Method 1) first.

Will resetting the NGC folder delete my fingerprint or face data?
Yes, it will remove all Windows Hello sign-in methods (PIN, fingerprint, face). You’ll need to set them up again. Your files and passwords are unaffected.

Can I use a PIN without a Microsoft account?
Yes, you can set up a PIN for a local account. However, some features like sync across devices require a Microsoft account.

What if I don’t have gpedit.msc on Windows 10 Home?
You can edit the registry directly. Navigate to HKLM\SOFTWARE\Policies\Microsoft\Windows\System and create a DWORD value named AllowDomainPINLogon with a value of 1. Restart afterward.

Does disabling Windows Hello in Group Policy affect existing PINs?
Yes, if you set “Turn on convenience PIN sign-in” to Disabled, existing PINs will stop working immediately. Users will need to use a password until the policy is re-enabled.

Can a third-party antivirus block PIN creation?
Yes, some security suites protect credential folders and may interfere. Temporarily disable your antivirus (or exclude the NGC folder) and try again. Re-enable it after setting up the PIN.

Related

• Fix Optional Features Not Installing in Windows 11
• Fix Dead Android With Red Triangle: Step-by-Step
• Always On Display: Samsung Galaxy Watch On/Off