How to Create a New Security Key PIN On Windows 11
A security key PIN, also called a security pin, is the secret code you type when you use a physical security key to sign in to Windows 11 or your Microsoft account. To create or change one, open Settings Accounts Sign-in options, expand Security key, and click Manage.
The key proves you own the hardware, and the PIN proves it is really you holding it. The whole process takes under 2 minutes and works the same on Windows 11 Home and Pro. You need the key itself, and it must support PINs (FIDO2 keys do).
If you remember your current PIN, Windows asks for it before it lets you set a new one. If you have forgotten it, the PIN cannot be recovered. The only way forward is to reset the key, which wipes everything stored on it. That is covered at the end.
To create or change your security key PIN on Windows 11, press Win+I, then go to Accounts Sign-in options, expand Security key, and click Manage. Connect your key when prompted, then enter and confirm the new PIN. No restart is needed. If you have forgotten the current PIN, it cannot be recovered and you must reset the key.
Open Windows Settings
- Press Win+I on your keyboard. Or click Start and select Settings.
- Check that the Settings window opens, with a list of categories down the left side.
Go to Accounts and Sign-in Options
- Click Accounts in the left sidebar.
- Find Sign-in options on the right side of the screen and click it. You should now see the list of ways to sign in, such as Face, Fingerprint, PIN and Security key.
The exact list depends on your hardware. A PC without a camera or fingerprint reader will not show Face or Fingerprint. Security key should be there on any current Windows 11 build.
Find Your Security Key Settings
- Scroll down until you find Security key.
- Click Security key to expand it. A short description and a Manage button should appear.
Manage Your Security Key
- Click Manage under the Security key section. This opens the interface for setting up or changing the security key’s PIN.
Windows will then ask you to insert or touch your key. If you have not connected it yet, do that next.
Connect Your Security Key
Connect the key before going further. For a USB key, plug it into an open port. For an NFC key (one that works by tapping), hold it against a compatible reader. Then follow any prompts on screen so your computer can recognize the device before you set the new PIN.
Many keys have a small button or a gold contact that you must touch when Windows asks. If nothing happens, unplug the key, plug it back in, and try a different USB port. Do not pull the key out until the whole process is finished.
Keep the physical security key within reach before you begin. Windows needs it to complete the PIN setup, because without it there is nothing to attach the new PIN to.
If the PIN option is greyed out or missing, the key may not support PINs, or it may be a very old model. Check the manufacturer’s documentation to confirm it supports FIDO2, the standard that adds PIN protection to security keys.
Add a New Security Key PIN
- Select the option to add a new PIN. If the key already has a PIN, the button reads Change, and Windows asks for the current PIN first.
- Type a new PIN that you can remember but others cannot guess. Most keys require at least 4 characters, and some allow letters and symbols as well as numbers.
- Type the same PIN again in the confirmation box. Both entries must match.
- Click OK after entering the PIN twice.
If Windows says the PINs do not match, re-enter both. If it says the PIN is too short or too simple, choose a longer one.
Confirmation
That’s it. The security key updates with the new PIN and shows a confirmation message. The new PIN is now active and ready for the next time you sign in with the key.
No restart is needed. To test it, sign out or lock the PC, then sign in with the key and enter the new PIN when asked.
Microsoft is changing how this sign-in screen looks. Its release notes for Experimental Build 26340.9616 (October 7, 2026) say the security key PIN entry experience has been updated, and the other user icon has been removed for a clearer sign-in screen. So far this is only in Windows Insider preview builds, and it may change before a public release. On a standard Windows 11 PC, expect the screens described above.
If you forgot your old PIN, the Manage page also has a Reset option. Be careful with it. A reset erases all sign-in credentials stored on the key, so you must register the key again with every account that uses it. It is the only way back in with a forgotten PIN, and it has no undo.
Reference:
Summary
To create a new security key PIN, open Settings, go to Accounts, select Sign-in options, and choose Security key. Click Manage, then connect the security key. Follow the prompts to add a new PIN, entering it twice for confirmation. The new PIN becomes active once you finish.
Frequently asked questions
How to create custom 🪟 Windows 11 restore points?
Search Start for "Create a restore point" and open it. On the System Protection tab, select your system drive and click Create. Type a name that describes the change, such as the date or the app you're installing, then click Create again. Windows saves the point in a few seconds. If Create is greyed out, click Configure, turn on protection, and try again.
How to pin apps to 🪟 Windows 11 taskbar efficiently?
Open the app, then right-click its icon on the taskbar and choose Pin to taskbar. You can also right-click an app's icon in the Start menu and select Pin to taskbar. Drag pinned icons left or right to reorder them. Right-click a pinned icon and choose Unpin from taskbar to remove it.
How to pin apps to start menu in 🪟 Windows 11?
Open Start and click All apps. Right-click the app you want and select Pin to Start. You can also search for the app in Start and right-click its result. Pinned apps appear in the top section of the Start menu. To remove one, right-click it and choose Unpin from Start.
Is 🪟 Windows 11 security enough protection?
Windows 11 gives solid basic protection for most people. Microsoft Defender Antivirus, SmartScreen, and the built-in firewall are on by default and block most common malware and phishing. It is not a complete guarantee, though. Keep Windows Update turned on, avoid unknown downloads, and back up your important files.
Still have a question?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!