In this easy guide, you’ll learn how to allow or stop the option to reset your PIN right when you sign in to your Windows 11 PC with your Microsoft account.

What is Windows Hello and PIN?

Windows Hello is a safe and easy way to sign in to your Windows 11 computer. You can use a PIN, your face, or your fingerprint instead of typing a password every time.

When you set up fingerprint or facial recognition, you also create a PIN. You can just use the PIN to sign in if you want.

Why Use a PIN Instead of a Password?

A PIN is different and safer than a normal password. Here’s why:

• PIN works only on your device: Your PIN only works on the computer where you set it up. If someone steals your PIN, they can’t use it on another device.
• PIN stays on your device: Unlike passwords, your PIN isn’t sent over the internet. This makes it harder for hackers to steal.
• PIN is protected by special hardware: Your device has a chip called TPM (Trusted Platform Module) that keeps your PIN safe from attacks.
• Complex PINs are possible: You can have simple or complex PINs with letters, numbers, and symbols, just like passwords.
• PIN helps when biometrics don’t work: If your fingerprint or face scanner isn’t working, you can still sign in with your PIN.

Learn more about why PINs are better than passwords here: Why PIN is better than password

Enable or Disable Reset PIN at Sign-in

If you forget your PIN, Windows 11 can let you reset it right on the sign-in screen — but you can choose to turn this on or off.

Important: You need to be signed in as an administrator to change this setting.

To Enable Reset PIN at Sign-in (default setting):

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin" /v EnablePinReset /t REG_DWORD /d 15 /f

To Disable Reset PIN at Sign-in:

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin" /v EnablePinReset /t REG_DWORD /d 0 /f

How to Edit the Registry Safely

To change these settings, you’ll need to use the Registry Editor. Here’s an easy way:

1. Press Windows key + R to open the Run box.
2. Type regedit and press Enter.
3. If a message pops up asking for permission, click Yes.
4. In Registry Editor, go to:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin
5. Double-click EnablePinReset on the right side.
6. Change the value to 15 (for enable) or 0 (for disable).
7. Click OK and close Registry Editor.
8. Restart your computer to apply the change.

Warning: Editing the registry can cause problems if done incorrectly. It’s a good idea to back up the registry before making changes.

Need Help Resetting Your PIN?

If you forgot your PIN, you can reset it as long as you know your Microsoft account password.

Learn how to reset your PIN on the Microsoft support site.

Summary

• Using a PIN makes your computer safer because it only works on your device.
• Reset PIN at sign-in helps you recover access if you forget your PIN.
• Administrators decide if users can reset their PIN from the sign-in screen.
• Always keep your PC updated and use strong PINs for better security.

If you want to learn more about Windows sign-in options, visit Microsoft’s Sign-In Options page.