What to Do When Windows 11 Pin Login Stops Working After a PIN Change

Method 1Use Your Microsoft Account Password to Log In

This is the easiest way back in, and it changes no system files. Sign in with your Microsoft account password instead of the PIN, then reset the PIN from inside Windows. You switch login methods from the lock screen with the sign-in options link below the PIN box.

1. Turn on your computer or wake it from the lock screen.
2. Click Sign-in options, the small link or icon right below the PIN text box. You should see a row of icons, one for each login method available on your account.
3. Click the key icon. This is the password option, and a password box appears.
4. Type your Microsoft account password into the box.
5. Press Enter. You should land on your normal desktop.

If your account is a local account, use your local account password. The password option only works if you know the password. If you don’t, go to the next section.

Once you are on the desktop, reset the broken PIN from Settings. You can also use these steps any time you want to add PIN login again after removing it:

1. Click the Start button and open the Settings app.
2. Click Accounts on the left side of the window.
3. Click Sign-in options on the right side. The list of ways to sign in opens.

   

4. Click PIN (Windows Hello) to expand it.
5. Click the button to remove or change your PIN. You may need to type your password again to prove you own the account.
6. Follow the on-screen prompts to create a brand-new PIN. Type it twice when asked.

No restart is needed. Lock the PC with the Win plus L and sign in with the new PIN to confirm it works. If the reset itself fails with the same error, the Ngc folder is likely the problem, so skip to the Ngc folder section below.

Method 2Reset Your PIN From the Lock Screen

Use this method when the new code fails and you don’t know your account password. The I forgot my PIN link on the sign-in screen runs a quick identity check and lets you set a new PIN. The PC needs an internet connection for this, because Microsoft sends the verification code.

1. On the Windows 11 sign-in screen, look at the text box where you type your PIN.
2. Click I forgot my PIN. A verification window opens and asks you to confirm your identity.
3. Choose where to receive the security code. It may go to your backup email address or phone number.
4. Check your phone or backup email for the security code from Microsoft.
5. Type the code into the box on your computer screen and click Next.
6. When Windows asks if you are sure you want to change your PIN, click Continue.
7. Type your new PIN into the first box, then type it again in the confirmation box.
8. Click OK. Your new PIN should now work at the sign-in screen.

If no code arrives, check the spam folder and confirm the address or number shown is one you still own. Without access to either, you cannot pass this check. Use the Safe Mode method further down, or reset your account password from another device first.

Method 3Delete the Corrupted Ngc Folder (If You Can Still Log In)

If you can still reach your desktop with a password or fingerprint, deleting the corrupted Ngc folder is the direct fix. It clears the broken security files in this protected system directory, so Windows generates fresh ones and your new PIN saves properly.

1. Click the Start button, type File Explorer📁, and press Enter.
2. Click This PC on the left, then open your main hard drive, usually the C: drive.

   

3. Click View in the toolbar, point to Show, and click Hidden items. The AppData folder is hidden, and you won’t see it until this is on.
4. Open the Windows folder.
5. Open the ServiceProfiles folder. If Windows says you don’t have permission to access it, click Continue.
6. Open LocalService, then AppData, then Local.
7. Open the Microsoft folder.
8. Find the folder named Ngc. This is the one that holds your PIN data.
9. Right-click the Ngc folder and click the trash can icon to delete it. If a prompt asks for permission, accept it. If Windows still refuses, right-click the folder, choose Properties, open the Security tab, click Advanced, and change the owner to your account before trying again.
10. Restart your🔄 computer right away.
11. After it boots, open Settings › Accounts › Sign-in options and set up a brand-new PIN. Because the old, broken files are gone, the new PIN should save correctly.

You can’t undo this deletion, but you don’t need to. Windows rebuilds the folder when you create a new PIN. Your password and your files are not affected. Fingerprint or face sign-in may need to be set up again too.

Method 4Delete the Ngc Folder Using Safe Mode (If You Are Completely Locked Out)

Use Safe Mode when the broken PIN locks you out completely and your password options fail. Safe Mode loads only the basic files Windows needs, so you can clear out the corrupted security folder.

1. Turn on your computer. As soon as the Windows logo appears, press and hold the physical power button for 10 seconds to force a shutdown.
2. Turn the computer on again. When the logo appears, force it to shut down a second time.
3. Turn it on a third time and let it boot normally. Because you interrupted startup twice, Windows decides something is wrong and loads the Automatic Repair screen.
4. On the Choose an option screen, click Troubleshoot.
5. Click Advanced options.
6. Click Startup Settings.
7. Click the Restart button in the bottom right corner.
8. When the PC restarts, a numbered list of startup choices appears. Press the 4 key or the F4 key to select Enable Safe Mode.
9. Sign in with your account password. The desktop looks very plain, with black background and the words Safe Mode in the corners. This is normal.
10. Press the Win plus E to open File Explorer📁.
11. Go to this folder: 📁C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngccopy. You can paste the path into the address bar at the top of File Explorer📁.
12. Right-click the Ngc folder and delete it completely. If Windows warns you that you don’t have permission, accept the prompt to take ownership of the folder and continue with the deletion.
13. Restart normally: click the Start button, click the Power icon, and select Restart. Safe Mode ends on its own after a normal restart.
14. When you reach the normal sign-in screen, sign in with your password and set up a new PIN. It should save without errors.

Unique Expert Tip: Check Group Policy Settings for PIN Restrictions

If the PIN keeps failing, especially on a work or school computer, check the group policy settings. Strict local policies can block simple PINs after an update, and an administrator may need to adjust the rules before your standard code is accepted.

When a computer is joined to a work or school network, administrators often require PINs to include uppercase letters, lowercase letters, symbols, or a minimum length. If your new PIN breaks these hidden rules, Windows may reject it silently or show a generic error.

You can review these rules yourself on Windows 11 Pro or Enterprise. Windows 11 Home does not include the Local Group Policy Editor, so this method won’t work there. If your PC is managed by an organization, ask your IT team, because your changes may be overwritten by their policy.

1. Click the Start button, type Edit group policy, and press Enter. The Local Group Policy Editor opens.
2. On the left side, expand Computer Configuration.
3. Expand Administrative Templates.
4. Expand System.
5. Click PIN Complexity. The policy list appears on the right.
6. Double-click options such as Require uppercase letters, Require lowercase letters, or Require special characters to see whether each is turned on.
7. If a setting is enabled, make sure any future PIN you create meets it. If you want a simple PIN and the PC is yours, set the option to Disabled, click Apply, and click OK.

To undo a change, open the same setting and choose Not Configured. Then try creating the PIN again.

Unique Expert Tip: Clear Trusted Platform Module (TPM) Data

Clear the Trusted Platform Module (TPM, a dedicated hardware chip that secures encryption keys) when the other fixes fail and hardware data seems out of sync after an update. Clearing the chip removes corrupted security keys and forces Windows Hello to create a fresh PIN database. Treat this as a last resort.

Clearing the chip wipes the old security credentials and starts fresh. It does not delete your personal files, photos or apps. It only resets the hardware security module. Windows will warn you that encrypted data tied to the chip is lost. If your drive uses BitLocker or Device Encryption, save your recovery key before you continue, because you may be asked for it at the next startup.

Note: This method requires administrator privileges.

1. Click the Start button and open the Settings app.
2. Click Privacy & security on the left side.
3. Click Windows security on the right side.

   

4. Click Device security. If you don’t see it, the PC may have no usable TPM or it may be turned off in the firmware settings.
5. Under the Security processor section, click Security processor details.
6. Click Security processor troubleshooting.
7. Click the Clear TPM button.
8. Windows warns you that you will lose encrypted data tied to the chip. Click Clear and restart.
9. The computer restarts. Your screen might prompt you to press a specific key to confirm the clear. Follow the prompt on the screen.
10. Once the PC boots back up, the security chip is clean. Go to Settings › Accounts › Sign-in options and set up a fresh Windows Hello PIN.

Summary

You have several reliable fixes for a broken Windows 11 PIN after a change, and the right one depends on how locked out you are. Sign in with your Microsoft account password, reset the PIN from the lock screen, delete the corrupted Ngc folder in Safe Mode, adjust group policy restrictions, or clear the Trusted Platform Module chip. Start with the first and work down.