Your PIN is no longer available due to a change: how to fix it

Applies to: Windows 11 and Windows 10, with a Microsoft account or a local account. On work or school PCs, ask IT first: the PIN may be managed by your organisation.

Why Windows says your PIN is no longer available

A Windows Hello PIN isn’t stored like a password. It unlocks a key held by the PC’s security chip (the TPM), or by software if there’s no TPM. If that key can’t be used any more, Windows refuses the PIN and shows this message, sometimes with a Set up my PIN link that just loops.

Common triggers are a BIOS or firmware update that reset or turned off the TPM, a TPM that was cleared, a motherboard or CPU change, Secure Boot or BIOS security settings being changed, and damaged Windows Hello files after an update. The good news is that your files and account are fine. Only the PIN needs to be recreated.

Fix 1: Sign in with your password

1. On the sign-in screen, select Sign-in options under the PIN box.
2. Choose the key icon (password).
3. Type the password for the account. For a Microsoft account, this is the password you use at outlook.com or account.microsoft.com, not the PIN.

If you see I forgot my PIN instead, you can select it, verify your Microsoft account and create a new PIN straight away. If that loops back to the same error, sign in with the password and use Fix 2.

Fix 2: Remove the PIN and set up a new one

1. Once you’re signed in, open Settings > Accounts > Sign-in options. You can also press Win + R and run ms-settings:signinoptions.
2. Select PIN (Windows Hello) and choose Remove. Confirm with your account password.
3. Restart the PC and sign in with your password.
4. Go back to Settings > Accounts > Sign-in options > PIN (Windows Hello) and choose Set up. Enter and confirm a new PIN.

If Remove is greyed out, scroll down on the same page and turn off For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device, then close and reopen Settings. Turn it back on after the new PIN works. If the PIN options themselves say they’re unavailable, see Windows Hello PIN: this option is currently unavailable.

Fix 3: Clear the Windows Hello (Ngc) folder

If Windows won’t let you remove or add a PIN, the Windows Hello key store may be damaged. A widely used fix is to empty the Ngc folder, which makes Windows start Windows Hello from scratch. This removes every PIN and Windows Hello sign-in on the PC, so only do it on a personal device and make sure you know your account password first.

1. Sign in with your password using an administrator account.
2. Open Command Prompt as administrator and run these two commands to take control of the folder:

takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /r /d y
icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /grant administrators:F /t

Next, open C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc in File Explorer and delete everything inside it. Don’t delete the Ngc folder itself. Then restart, sign in with your password and set up a new PIN as in Fix 2.

If File Explorer still says you don’t have permission, see you don’t currently have permission to access this folder.

Fix 4: Check the TPM after a BIOS or hardware change

If the error appeared right after a BIOS update or a hardware change, make sure the TPM is still on and working.

1. Press Win + R, type tpm.msc and press Enter.
2. Under Status, look for The TPM is ready for use.
3. If it says no compatible TPM was found, restart into the BIOS or UEFI setup and turn the firmware TPM back on. It’s usually called Intel PTT, AMD fTPM or Security Device Support.
4. Restart, sign in with your password and set up a new PIN.

Don’t clear the TPM just to fix a PIN. Clearing it can trigger BitLocker recovery and removes other keys stored there. If you’ve just replaced a CPU and see a firmware TPM warning at startup, read new CPU installed: fTPM NV corrupted first.

If you don’t know your password

• Microsoft account: on another device, go to account.live.com/password/reset, reset the password, then sign in to the PC with the new password while it’s connected to the internet.
• Local account: after a wrong password, select Reset password on the sign-in screen to answer your security questions, or use a password reset disk if you made one.
• No way to sign in: as a last resort, hold Shift, select Power > Restart on the sign-in screen, then go to Troubleshoot > Reset this PC > Keep my files. Apps and settings are removed, but personal files are kept. If BitLocker asks for a recovery key, you’ll need it to continue.

For other reinstall options, see how to reinstall Windows 10.

Related guides

• Windows Hello PIN: this option is currently unavailable
• New CPU installed: fTPM/PSP NV corrupted
• You don’t currently have permission to access this folder
• How to reinstall Windows 10
• Dell BitLocker recovery key: where to find it

Official sources: for more detail, see Microsoft’s own documentation:

• Microsoft Support: Change or reset your PIN
• Microsoft Support: Reset your PIN when you aren’t signed in to Windows

Frequently asked questions

Will I lose my files if my PIN is no longer available?

No. The message only means the PIN can’t be used. Sign in with your password and your files, apps and settings are all still there.

Why did my PIN stop working after a BIOS update?

A BIOS update can reset or turn off the TPM. The PIN is tied to keys in the TPM, so Windows can’t use it any more and asks you to set up a new one.

Can I sign in without a PIN?

Yes. Select Sign-in options on the lock screen and use your password. If no password option appears, try I forgot my PIN or the steps under If you don’t know your password.

Is it safe to delete the Ngc folder?

Deleting the contents only removes Windows Hello PINs and keys, which Windows rebuilds when you set up a new PIN. Make sure you know your password first, and don’t do it on a work-managed PC.