How to Turn On or off Reset PIN at Sign-in in Windows 11

Why Use a PIN Instead of a Password?

A PIN is safer than a regular password because it stays on your computer and never travels across the internet. If someone steals your PIN, they still cannot use it to sign in to your account from another device. Here is why that holds up:

• PIN works only on your deviceYour PIN only works on the computer where you set it up. If someone steals your PIN, they can’t use it on another device.
• PIN stays on your deviceUnlike passwords, your PIN isn’t sent over the internet. This makes it harder for hackers to steal.
• PIN is protected by special hardwareMost modern devices have a chip called TPM (Trusted Platform Module) that keeps your PIN safe from attacks. Windows 11 requires a TPM, so this applies to nearly every supported PC.
• Complex PINs are possibleYou can have simple or complex PINs with letters, numbers, and symbols, just like passwords.
• PIN helps when biometrics don’t workIf your fingerprint or face scanner isn’t working, you can still sign in with your PIN.

If you have not yet chosen to set up PIN sign-in, open Settings › Accounts › Sign-in options, expand PIN (Windows Hello), and select Set up. Windows asks you to verify your account and then to enter the PIN twice.

Learn more about why PINs are better than passwords here: Why PIN is better than password

Enable or Disable Reset PIN at Sign-in

If you forget your PIN, Windows 11 can let you reset it right on the sign-in screen. You choose whether that option is available. When it is on, the I forgot my PIN link appears under the PIN box. When it is off, the link is gone, and anyone who forgets the PIN has to sign in another way, such as with a password.

Managed devices: On a work or school device, Group Policy or MDM (mobile device management) may override the registry value. In that case the link can stay on or off no matter what you set, and your IT team controls it. The reset flow also needs an internet connection and a Microsoft or Microsoft Entra account.

Before you edit the registry: Editing the registry can cause problems if done incorrectly, so make a backup first. The simplest safety net is a restore point, which lets you roll Windows back if something goes wrong. Open the Start menu, search for Create a restore point, and open it. On the System Protection tab, select Create, name the point, and select Create again. If Create is greyed out, select Configure and turn on system protection for the drive first.

You can also export just the key you are about to change. The Registry Editor steps below include that step. Do one of these before you use any method that follows.

To Enable Reset PIN at Sign-in (default setting):

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin\Credential" /v EnablePinReset /t REG_DWORD /d 3 /f

To Disable Reset PIN at Sign-in:

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin\Credential" /v EnablePinReset /t REG_DWORD /d 0 /f

How to Edit the Registry Safely

Registry Editor changes deep system settings, and a mistake can cause computer problems. The method works the same on Windows 11 Home and Pro. Make sure you have a restore point or an exported key, as described above, and change only the one value described here.

These steps turn PIN reset at sign-in on or off by changing a single registry value.

1. Press Win+R. A small Run window with a text field appears.
2. Type regedit in the text field and press Enter.
3. Click Yes if User Account Control appears. If it asks for an administrator password instead, you are not signed in as an administrator, so cancel and sign in with an admin account. Registry Editor then opens.
4. Go to the key shown below in the left pane. You can also paste it into the address bar at the top of the window:
   
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin\Credential
5. Export the key as a backup. Right-click the key in the left pane, select Export, name the file, and select Save.
6. Double-click EnablePinReset in the right pane. A small edit window opens with the current value.
7. Change the Value data. Enter 3 to enable the link, or 0 to disable it.
8. Click OK. The new number now shows in the Data column.
9. Close Registry Editor.
10. Restart your🔄 computer. After it starts, check the sign-in screen to confirm the I forgot my PIN link appears or is gone, depending on the value you chose.

That’s it. The reset link on your sign-in screen now matches the value you set, and you have a backup if you need to go back.

To undo the change, open the same value again, set it to the other number, and restart. To restore the whole key instead, double-click the exported .reg file and confirm the merge.

Need Help Resetting Your PIN?

Windows 11 users can reset a forgotten sign-in PIN by verifying their account, usually with their Microsoft account password. This helps you regain access to the computer if you cannot remember your current PIN. The process sets up a new PIN, and the old one stops working.

If you have set up Windows Hello face or fingerprint sign-in, Windows now uses it as the default method. The PIN box does not show first. Select Sign-in options on the sign-in screen, then choose the PIN option to see the PIN box and the I forgot my PIN link below it.

If you are not signed in, follow these steps to complete a PIN reset from the sign-in screen.

1. Select Sign-in options if the PIN box is not showing. Choose the PIN option.
2. Select I forgot my PIN. The link sits under the PIN box.
3. Verify your account. Enter your Microsoft account password or follow any extra prompt Windows shows.
4. Enter a new PIN and confirm it. Then finish the prompt to sign in.

That’s it. Your new PIN works on this device, and the old one no longer does.

If you are already signed in to Windows, you can reset the PIN from Settings instead.

1. Open Settings⚙️. Press Win+I to open it quickly.
2. Select Accounts in the left pane.
3. Select Sign-in options. A list of sign-in methods appears.
4. Expand PIN (Windows Hello). Two options appear, including I forgot my PIN.
5. Select I forgot my PIN. Windows asks you to confirm that you want to continue.
6. Verify your account when prompted. Then enter and confirm a new PIN.

You should now have a new PIN, set without leaving Windows. This path needs an internet connection and a Microsoft or Microsoft Entra account.

If the I forgot my PIN link is missing, the option has probably been turned off with the registry setting above, or your device is managed by an organization that controls it. Check the registry value first if you are the administrator. On a work or school device, ask your IT team, because Group Policy or MDM may be overriding the value.

Learn how to reset your PIN on the Microsoft support site.

Summary

• Using a PIN makes your computer safer because it only works on your device.
• Reset PIN at sign-in helps you recover access if you forget your PIN.
• Administrators decide if users can reset their PIN from the sign-in screen. The change takes effect after a restart.
• Back up first. Create a restore point or export the key before you edit the registry.
• Always keep your PC updated and use strong PINs for better security.

Managing your Windows 11 reset PIN settings helps keep your device secure while making sure you can get back into your account. A local PIN protects your sign-in details from online threats, and knowing how to control the reset option gives you full command over your sign-in screen.