Fix Windows Hello Blocking Options in Windows 11

If Windows Hello is preventing some options from being shown in Windows 11—like the sign-in settings page being greyed out or missing entirely—the fix is usually to reset the Windows Hello configuration or repair the associated system files. This guide walks you through the most reliable methods to restore full access to your settings, starting with the quickest and safest steps.

Why Windows Hello Can Hide Settings

Windows Hello is a biometric sign-in system that uses your face, fingerprint, or PIN to unlock your PC. When it malfunctions, it can interfere with the Settings app, particularly the Accounts > Sign-in options page. This happens because Windows treats the biometric stack as a security component: if it detects a corrupted state or a missing Trusted Platform Module (TPM) driver, it may hide or disable the options that depend on it, such as “Windows Hello PIN” or “Facial recognition.”

A common scenario is after a system update, a driver update, or a failed attempt to change your PIN. The system may think the Hello enrollment is incomplete, so it blocks the entire menu to prevent you from making conflicting changes. The result is a Settings page that shows fewer options than expected, or a greyed-out toggle that you cannot click.

Method 1: Restart the Windows Hello Service

The simplest fix is to restart the service that manages Hello. This clears temporary glitches without changing your settings.

1. Press Win + R, type services.msc, and press Enter.
2. Scroll down to Windows Hello Face Recognition (or Windows Biometric Service on some builds).
3. Right-click it and select Restart.
4. If the service is not running, right-click and choose Start.
5. Close the window and reopen Settings > Accounts > Sign-in options.

If the options still don’t appear, proceed to the next method.

Method 2: Run the Windows Hello Troubleshooter

Windows 11 includes a built-in troubleshooter that can automatically detect and fix Hello-related issues.

1. Open Settings (Win + I).
2. Go to System > Troubleshoot > Other troubleshooters.
3. Find Windows Hello PIN or Biometric (the name varies by update) and click Run.
4. Follow the on-screen instructions. It may ask you to sign in again or verify your identity.

This tool is often enough for minor configuration errors. If it finds nothing, move on.

Method 3: Reset Windows Hello via Command Line

When the GUI fails, you can reset the Hello data directly. This does not delete your Microsoft account or other files; it just clears the biometric/PIN cache.

1. Open Command Prompt as Administrator (search “cmd”, right-click, choose Run as administrator).
2. Type the following and press Enter after each line:

net stop wbioSrvc
net start wbioSrvc

If that doesn’t help, you can also delete the Ngc folder (which stores PIN credentials) but be careful: this will require you to set up your PIN again.

3. In the same Command Prompt, type:

del /f /q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc\*

Then restart your PC. You’ll need to create a new PIN, but the Settings page should show all options again.

Method 4: Update or Reinstall the Biometric Drivers

Outdated or corrupt drivers are a leading cause of Hello hiding options. You can update them via Device Manager.

1. Right-click the Start button and select Device Manager.
2. Expand Biometric devices (or Security devices).
3. Right-click your fingerprint sensor or camera and choose Update driver.
4. Select Search automatically for drivers.

If Windows finds nothing, go to your PC manufacturer’s website and download the latest chipset or biometric driver. After installing, restart and check Settings again.

Method 5: Check Group Policy or Local Security Settings

In some cases, a policy is blocking Hello. This is more common on work or school PCs, but can appear on personal ones if you’ve tweaked settings.

1. Press Win + R, type gpedit.msc (only available on Pro/Enterprise), and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business.
3. Look for “Turn off Windows Hello for Business” and set it to Not Configured or Disabled.
4. Also check Computer Configuration > Administrative Templates > System > Logon for any “Do not display” policies.

If you don’t have gpedit.msc, you can use the Registry Editor to check the same keys under HKLM\SOFTWARE\Policies\Microsoft\Windows\System. Look for a DWORD named AllowDomainPINLogon or DisableAutomaticRestartSignOn and set them to 1 or delete them.

Method 6: Repair System Files (SFC and DISM)

Corrupted system files can also cause this. Running the built-in repair tools is safe and often resolves the issue.

1. Open Command Prompt as Administrator.
2. Run sfc /scannow and wait for it to finish.
3. Then run DISM /Online /Cleanup-Image /RestoreHealth.
4. Restart your PC after both complete.

This process can take 10-20 minutes. It won’t touch your personal files, but it will replace damaged Windows components.

What to Do If Nothing Works

If you’ve tried all the above and the options are still hidden, the last resort is to create a new local administrator account and migrate your settings. This is more drastic but often fixes deep profile corruption.

1. Open Settings > Accounts > Family & other users.
2. Click Add account > I don’t have this person’s sign-in information > Add a user without a Microsoft account.
3. Create a local account, make it an Administrator, and sign into it.
4. Check if the Sign-in options are visible there. If they are, you can move your files and use that account, or try to fix your original profile.

Frequently Asked Questions

Will resetting Windows Hello delete my files?

No. Resetting the Hello configuration (via the Ngc folder or service restart) only removes your PIN and biometric data. Your documents, photos, and installed apps remain untouched. You’ll just need to set up your PIN again.

Why does Windows Hello keep turning off after a Windows update?

Updates can sometimes reset security policies or driver settings. If you see this repeatedly, check that your TPM (Trusted Platform Module) is enabled in BIOS and that your biometric drivers are up to date. Also, check if your device is compliant with Windows Hello for Business requirements.

Can I use Windows Hello without a PIN?

No. A PIN is the base layer for Windows Hello. Even if you use face or fingerprint, you must have a PIN set up as a fallback. If your PIN is missing, Windows will hide the other options until you create one.

Is it safe to delete the Ngc folder?

Yes, it’s a system folder that stores your PIN credentials. Deleting its contents forces Windows to re-enroll. However, you must be signed in as an administrator, and you should back up any BitLocker recovery keys beforehand, as a precaution.

Why is the “Windows Hello PIN” option greyed out?

This usually means the required service (like the Credential Manager or the Ngc container) is not running or has corrupted data. Try the service restart method first. If that fails, run the System File Checker as described above.

Does this issue affect both local and Microsoft accounts?

Yes, it can affect both. However, Microsoft accounts are more likely to have cloud-synced settings that might restore the issue after a reset. If you’re using a local account, the fix is often simpler.

Related

• Install Homebrew on Mac: Step-by-Step Guide
• Check Leaked Passwords in Chrome: Step-by-Step
• Adobe Reader Not Working on Windows 10? Fixes