This sign-in option is disabled: how to fix it in Windows 11 and 10

Applies to: Windows 11 and Windows 10, with a Microsoft account, local account or work/school account.

Why Windows disables the sign-in option

A Windows Hello PIN is short, so Windows protects it against guessing. The PIN is checked by the PC’s security chip (TPM), and after too many wrong entries the TPM’s anti-hammering protection blocks further tries for a time. Windows also counts sign-ins that were cut short by the PC being switched off, which is why the message mentions repeated shutdowns: holding the power button at the sign-in screen, a flat battery or a child pressing keys can all add up.

The lockout is a protection, not a fault. Your files are fine and your account still exists. You just can’t use that sign-in method until the lock clears or you prove who you are another way. If the message instead says the account itself is locked out, see the referenced account is currently locked out, which is a password lockout policy rather than a PIN lock.

Fix 1: Restart from the sign-in screen

Do a clean restart, not a forced power-off:

1. On the sign-in screen, select the Power icon in the bottom-right corner.
2. Select Restart.
3. When the sign-in screen comes back, try the PIN once, slowly. If you aren’t sure of it, don’t keep guessing; go to Fix 3.

Avoid holding the power button to switch off. Each interrupted sign-in can count against you and keep the option disabled.

Fix 2: Leave the PC on and wait

The TPM lockout clears on its own over time, but only while the PC is running. Plug a laptop into power, leave it on the sign-in screen and don’t touch the keyboard. Microsoft doesn’t publish a single wait time because it depends on the TPM and how many failed attempts were recorded; users commonly report anything from a few minutes to about two hours. Then restart once (Fix 1) and try again.

Fix 3: Use another sign-in option

The PIN being disabled doesn’t block your account password:

1. On the sign-in screen, select Sign-in options under the PIN box.
2. Select the key icon for a password (or a security key icon if you use one).
3. Enter your account password. For a Microsoft account, that’s the password you use at account.microsoft.com, not the PIN.

If you don’t see Sign-in options, your account may be set to Windows Hello sign-in only. Try I forgot my PIN in Fix 4, which also asks for the password.

Fix 4: Reset the PIN

From the sign-in screen:

1. Select I forgot my PIN below the PIN box.
2. Microsoft account: enter your password and the security code Microsoft sends, then set a new PIN. Local account: you’re asked for the account password before you set the new PIN.
3. Sign in with the new PIN.

Already signed in another way? Go to Settings > Accounts > Sign-in options > PIN (Windows Hello), select I forgot my PIN (or Change PIN), and follow the prompts. If the PIN screen keeps saying the option is unavailable, our guide to fixing “This option is currently unavailable” for Windows Hello PIN covers removing and rebuilding the PIN data.

Fix 5: Stop it from happening again

• Shut down with Start > Power > Shut down instead of the power button, and keep the laptop charged.
• If children use the PC, give them their own account, or lock the screen with Windows + L when you step away.
• If the PC restarts or crashes on its own at the sign-in screen, fix that first; see your PC couldn’t start properly.
• Pick a PIN you’ll remember. A PIN can be longer than 4 digits and can include letters if you tick Include letters and symbols.

Still locked out?

• Work or school PC: the lockout rules and sign-in methods come from your organization. Contact IT; they can reset the PIN or unlock the device.
• Microsoft account password forgotten: on another device, go to account.live.com/password/reset to recover it, then use that password on the PC (it needs an internet connection).
• Local account, no password known: another administrator account on the PC can reset it. Without one, the last resort is Reset this PC, reached by holding Shift while you select Power > Restart, then Troubleshoot > Reset this PC. Choose Keep my files where possible, but back up first if you can.

Don’t clear the TPM to get around this. Clearing it removes the keys that protect your sign-in and can trigger a BitLocker recovery prompt. Have your BitLocker recovery key ready before any firmware or TPM change.

Related guides

• Windows Hello PIN: this option is currently unavailable
• Your PIN is no longer available due to a change
• The referenced account is currently locked out
• The sign-in method you’re trying to use isn’t allowed

Official sources: for more detail, see these pages:

• Microsoft Support: Change or reset your PIN in Windows
• Microsoft Learn: Common questions about Windows Hello for Business

Frequently asked questions

How long does this sign-in option stay disabled?

There’s no fixed time. It depends on the TPM and the number of failed attempts. Keeping the PC switched on at the sign-in screen lets the lock count down; a password sign-in works straight away.

Will I lose my files?

No. The lock only affects the PIN, fingerprint or face sign-in. Only a Reset this PC would remove apps or files, and that’s a last resort.

Does this mean someone tried to hack my PC?

Usually not. Mistyped PINs, a sticky key or forced shutdowns are the common causes. If you’re sure nobody near you touched the PC, change your account password after you sign in.

Can I turn the protection off?

Not on a normal PC, and you shouldn’t. It’s what stops someone guessing a 4-digit PIN. Using a longer PIN and a clean shutdown is the safer fix.