Change Minimum PIN Length in Windows 11

This article explains how to change the Minimum PIN length in Windows 11.

Windows 11 allows you to sign in with a PIN. This personal PIN is a recommended, fast, and secure way to log in to your Windows device and access other apps and services.

Windows PIN is part of the Windows Hello security feature that enables other sign-in options. One can use a picture password, PIN, fingerprint, and face to sign into Windows. Hello, the PIN is secure because it is tied to the specific device on which it was set up.

Windows Hello PIN does not expire and can not be longer than 127 characters by default. The default length is 4.

You can change the minimum PIN length anytime.

Changing the minimum PIN length can enhance security by ensuring users create more complex and harder-to-guess PINs. A longer PIN typically means it would take more time for potential attackers to crack it, making unauthorized access more difficult.

If you change the minimum PIN length, users must change their PIN to meet the new PIN complexity requirements if not already met.

Change Minimum PIN length in Windows

As mentioned, Windows admins can change the minimum PIN length for users on Windows 11.

Here’s how to do it.

First, open the Local Group Policy Editor (gpedit.msc). (Search for “Edit group policy”) on the Start menu.

Then, navigate the folders below:

Computer Configuration > Administrative Templates > System > PIN Complexity

In the PIN Complexity details pane on the right, locate and double-click the “Minimum PIN length” settings.

On the “Minimum PIN length” window, set the option to Not Configure, Enabled, or Disabled.

• Not Configured (default)
• Enabled:
  • Minimum PIN length: Set the minimum PIN length. The largest number you can configure for this policy setting is 127. The lowest number you can configure must be larger than the number configured in the Minimum PIN length policy setting or the number 4, whichever is greater.
• Disabled: The PIN length must be greater than or equal to 6.

Click OK to save your changes.

Change Minimum PIN length using the Registry

Another way to change the minimum PIN length is to use the Windows Registry Editor.

Remember to back up your registry before making any changes or create a System Restore point as a precaution.

First, open the Windows Registry and navigate to the folder key path below.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity

If you do not have the PassportForWork and/or PINComplexity keys in the registry key path, create new keys to match the path above.

Right-click PINComplexity > New > DWORD (32-bit) Value and name the new DWORD MinimumPINLength.

Double-click MinimumPINLength and select Decimal under Based. Then, type a number between 4 and 127 for the PIN length you want.

To restore the default behavior and prevent the PIN from expiring, delete the MinimumPINLength name created above.

MinimumPINLength

You may have to reboot your computer to apply the changes.

That should do it!