How to Turn On or Off PIN Expiration in Windows 11

What is a 🪟 Windows 11 PIN?

What’s a Windows 11 PIN? It’s a short number code used to sign into your computer quickly and safely, replacing a full password. It’s a simpler way to get into Windows 11, and it works alongside other sign-in methods like fingerprint or face recognition.

Windows 11 also allows you to sign in using a picture password, fingerprint, or face recognition.

Windows 11 PIN expiration is off by default, meaning your PIN does not expire. You can set the PIN to expire after a specific number of days, ranging from 1 day to 730 days (2 years). This change requires you to regularly change your PIN. Alternatively, you can choose for the PIN to never expire.

How to Turn PIN Expiration On or Off Using Group Policy Editor

You can control if your Windows 11 PIN expires using the Group Policy Editor, a tool found in Windows 11 Pro, Enterprise, and Education versions. This lets you decide how often your PIN needs to be renewed or turn off expiration completely.

1. Click the ⊞ Start button and type Edit group policy. Click the app that appears. This opens the Local Group Policy Editor.
2. In the window that opens, go to this folder path on the left side: Computer Configuration > Administrative Templates > System > PIN Complexity
3. On the right side, find and double-click the setting called Expiration.
4. A new window will pop up. Here you can choose:

   • Not Configured – This is the default. It works the same as Disabled.
   • Enabled – Turn on PIN expiration. You can then set how many days until the PIN expires (between 1 and 730 days). Enter 0 if you want the PIN to never expire.
   • Disabled – Turn off PIN expiration.
5. After choosing your option, click OK to save.

How to Turn PIN Expiration On or Off Using the Registry Editor

You can change whether your Windows 11 PIN expires by using the Registry Editor, but extreme caution is advised as mistakes can cause computer issues. The Registry Editor lets you adjust advanced settings, including rules for how often your PIN needs updating.

The registry stores critical Windows settings, and changing them incorrectly can cause issues.

Open the Registry Editor:

1. Press Windows key + R to open the Run box.
2. Type regedit and press Enter.
3. Navigate to this folder path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity
4. If you don’t see PassportForWork or PINComplexity, 🖱️ right-click on the previous folder. Choose New > Key to create them.
5. 🖱️ Right-click on PINComplexity. Select New > DWORD (32-bit) Value. Name it Expiration.
6. Double-click the new Expiration entry. Select Decimal under Base. Then enter:

   • A number between 1 and 730 to set the PIN expiration days.
   • Or 0 to never expire.
7. Click OK, then close the Registry Editor.
8. 🔄 Restart your computer to apply the changes.

Summary

• Windows 11 lets you make your PIN expire after a set number of days. Or it can never expire.
• By default, PINs do not expire.
• You can change expiration settings using either the Group Policy Editor (for Pro and higher) or the Registry Editor.
• Always back up your data before making system changes.
• Regularly reviewing your PIN settings helps keep your PC secure.

Windows 11 PIN expiration settings allow you to set a limit for how long your PIN is valid before you must change it. Alternatively, you can choose for your PIN to never expire. You can adjust these Windows 11 PIN expiration settings using either the Group Policy Editor or the Registry Editor.

More Info from Microsoft: Official Microsoft PIN Expiration Settings