Change Maximum PIN Length in Windows 11

This article explains how to change the Maximum PIN length in Windows 11.

Windows 11 allows you to sign in with a PIN. This personal PIN is a recommended, fast, and secure way to log in to your Windows device and access other apps and services.

Windows PIN is part of the Windows Hello security feature that enables other sign-in options. One can use a picture password, PIN, fingerprint, and face to sign into Windows. Hello, the PIN is secure because it is tied to the specific device on which it was set up.

Windows Hello PIN does not expire and can not be longer than 127 characters by default. The default length is 4.

You can change the maximum PIN length anytime.

A longer PIN can significantly improve security, making it harder for unauthorized users to guess or crack the PIN.

If you change the maximum PIN length, users must change their PIN to meet the new PIN complexity requirements if not already met.

Change Maximum PIN length in Windows

As mentioned, Windows admins can change the maximum PIN length for users on Windows 11.

Here’s how to do it.

First, open the Local Group Policy Editor (gpedit.msc). (Search for “Edit group policy”) on the Start menu.

Then, navigate the folders below:

Computer Configuration > Administrative Templates > System > PIN Complexity

In the PIN Complexity details pane on the right, locate and double-click the “Maximum PIN length” settings.

On the “PIN Complexity” window, set the option to Not Configure, Enabled, or Disabled.

• Not Configured (default) – Same as Disabled.
• Enabled:
  • Maximum PIN length: Set the maximum PIN length. The largest number you can configure for this policy setting is 127. The lowest number you can configure must be larger than the number configured in the Minimum PIN length policy setting or the number 4, whichever is greater.
• Disabled: PIN length must be less than or equal to 127.

Click OK to save your changes.

Change Maximum PIN length using the Registry

Another way to change the maximum PIN length is to use the Windows Registry Editor.

Remember to back up your registry before making any changes or create a System Restore point as a precaution.

First, open the Windows Registry and navigate to the folder key path below.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity

If you do not have the PassportForWork and/or PINComplexity keys in the registry key path, create new keys to match the path above.

Right-click PINComplexity > New > DWORD (32-bit) Value and name the new DWORD MaximumPINLength.

Double-click MaximumPINLength and select Decimal under Based. Then, type a number between 4 and 127 for the PIN length you want.

To restore the default behavior and prevent the PIN from expiring, delete the MaximumPINLength name created above.

MaximumPINLength

You may have to reboot your computer to apply the changes.

That should do it!