Windows 11 Says "Your PIN Isn't Available"? How to Get Your PIN Working Again

You go to tap in your PIN like you do every morning, and instead of your desktop you get a grey message: "Something went wrong and your PIN isn't available," or "Your PIN is no longer available due to a change to the security settings on this device." Sometimes the little PIN keypad is simply greyed out and won't take a number at all. It feels exactly like being locked out of your own computer, and the panic that follows is usually "are all my files gone?"

Take a breath, because two things are almost certainly true. Your files are completely safe — this is a sign-in glitch, not a data problem — and you are not actually locked out, because your account password still works even when the PIN won't. This is different from forgetting your PIN; here you may well remember it perfectly, but Windows itself has decided the PIN can't be trusted right now and shut it off. That happens for a handful of well-understood reasons, and all of them are fixable with steps built into Windows. One thing to skip on your way past the search results: the "PIN unlocker" and "Windows login recovery" tools being advertised. You don't need to buy anything, and that corner of the internet is a common way to hand a stranger the keys to your PC. Everything below is free.

First: did you forget your PIN, or did Windows take it away?

These are two different problems with two different fixes, so sort out which one you have before you do anything. If you simply can't remember your PIN — you're guessing at numbers — that's a forgotten-credential situation, and our guide to being locked out of your PC covers the reset paths for a forgotten PIN or password. This article is for the other case: you know your PIN (or you never changed it), but Windows is throwing an error like "your PIN isn't available" or has greyed the PIN out on its own.

The tell is the wording. A forgotten PIN just gets rejected as "incorrect." The problem we're fixing here announces itself — "something went wrong / something happened and your PIN isn't available," "your PIN is no longer available due to a change to the security settings," or a PIN box that's visibly disabled. That message means the PIN system on this machine got knocked loose, usually by a Windows update, a hardware or BIOS change, or a bit of corrupted PIN data. The reassuring part: because your password is a separate credential, it's untouched, and it's your way in while we sort the PIN out.

The fastest way back in: switch to your password

Right there on the sign-in screen, look just below the box for "Sign-in options" — clicking it reveals a little row of icons for the different ways you can log in (a key for your password, a PIN pad, a face or fingerprint symbol). Click the key/password icon, type your account password, and you're in. If you sign in with a Microsoft account, that's the same password you use at outlook.com or account.microsoft.com; if it's a local account, it's the password set on this PC. People are often surprised this works when the PIN doesn't, but that's exactly the point — the PIN is just a shortcut, and the password underneath it still opens the door.

Sometimes the error tile itself offers a shortcut like "Set up my PIN" or "I forgot my PIN." Clicking that will ask for your Microsoft account password to prove it's you (so the PC needs to be online for it — if it dropped off Wi-Fi, reconnect from the network icon on the lock screen first), and then let you set a fresh PIN on the spot. That alone fixes a good share of cases. But whether you got in through the password or that reset link, the next step makes sure the PIN stays fixed rather than breaking again tomorrow.

The fix that clears most cases: reset the PIN properly

Once you're signed in with your password, go to Settings > Accounts > Sign-in options, and click "PIN (Windows Hello)" to expand it. Choose "I forgot my PIN" — you can pick this even if you haven't forgotten it; it's simply the button that tears down the broken PIN and builds a clean one. Windows will confirm it's you (your Microsoft account password, or your account password on a local account), then walk you through creating a new PIN. For most "your PIN isn't available" errors, this single reset is the whole cure, because it rebuilds the PIN from scratch instead of trusting the damaged copy Windows was choking on.

If "I forgot my PIN" isn't offered or errors out, try the two-step version in the same place: click "Remove" to delete the PIN entirely, confirm, and then click "Set up" (or "Add") to create it again fresh. Make sure you're connected to the internet while you do this if you use a Microsoft account, since it needs to check in with your account to re-register the new PIN. Reboot afterward and sign in with the new PIN to confirm it took. For a lot of people that's the end of the story — if yours is fixed, skip the rest; the sections below are for the stubborn cases where the reset itself won't complete.

When the reset won't take: rebuild the hidden PIN folder

If resetting the PIN keeps failing — the "Set up" button errors, or the "isn't available" message comes straight back — the encrypted files that store your PIN have almost certainly gone corrupt. Windows keeps them in a protected folder called Ngc, tucked away at C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc. Clearing that folder forces Windows to build a brand-new one the next time you set up a PIN, which is exactly what a damaged PIN needs. This is the one step here that's a little involved, so if you're not comfortable poking around in system folders, it's a fine point to hand off — but here's the honest walkthrough.

The catch is that the Ngc folder is locked down, so you have to take ownership of it before Windows will let you empty it. The cleanest way is Command Prompt: click Start, type cmd, right-click "Command Prompt" and choose "Run as administrator," then run these two lines one after the other — takeown /f "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc" /r /d y and then icacls "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc" /grant administrators:F /t. (You can do the same through File Explorer instead: turn on hidden items in the View menu, right-click the Ngc folder > Properties > Security > Advanced, change the owner to your account and grant yourself full control.) Then delete everything inside the Ngc folder — the folder itself can stay. Restart the PC, sign in with your password, and go back to Settings > Accounts > Sign-in options to set up a new PIN. Because you cleared the corruption, the fresh setup usually goes through cleanly. Take a moment before you start if you keep anything irreplaceable on this machine — editing protected system folders is exactly when a current backup earns its keep.

The security chip (TPM) — and why clearing it is a big deal

Windows Hello doesn't just store your PIN in a file; the key that makes it work lives inside a small security chip on your computer called the TPM (Trusted Platform Module). If that chip gets confused — often after a BIOS/firmware update, a motherboard or CPU change, or the TPM being toggled in the BIOS — Windows can decide the PIN can no longer be trusted and pull it, which is one of the classic triggers for "a change to the security settings." You can check the chip's health quickly: open Windows Security > Device security > Security processor, and see whether it reports a problem.

You'll see plenty of guides telling you to just "clear the TPM" (via tpm.msc, or in the BIOS), and it can indeed fix a wedged PIN — but stop and read this first, because it's the one step that can bite hard. Clearing the TPM wipes every key it's holding, and on many PCs that includes the BitLocker drive-encryption key. If your drive is encrypted and you clear the TPM without your 48-digit BitLocker recovery key in hand, you can find yourself staring at a recovery screen you can't get past — a much bigger problem than the one you started with. So before anyone clears a TPM: confirm whether the drive is encrypted and find your BitLocker recovery key (it's saved to the Microsoft account the PC is tied to, at account.microsoft.com/devices — see our BitLocker guide). If that sounds like a lot, it's a sign to try the gentler fixes above first, or to have someone do the TPM step who'll check BitLocker before touching it. This is genuinely a "have a person do it" moment for most people.

Did it break right after an update? The 24H2 story

If your PIN worked fine yesterday and stopped the moment a big Windows update went in, you're not imagining it, and you're not alone. When Microsoft rolled out the Windows 11 24H2 update, a wave of people suddenly hit "your PIN isn't available." Windows Hello wasn't exactly broken — 24H2 tightened the security checks around how the PIN is tied to your account, so PINs that were quietly on shaky ground got cut off. The most common thread is an account whose sign-in name (the email/UPN the PIN was originally bound to) had changed at some point; the newer, stricter Windows notices the mismatch and refuses the PIN.

The fix in this case is refreshingly simple: sign in with your account password as usual. Once you've signed in cleanly, Windows realizes the old PIN is out of date and prompts you to set one up again — and doing so re-ties the PIN to your current account correctly. In other words, the same password-then-reset flow from the sections above is the cure; you're just re-binding rather than repairing. And if your PIN broke right after a specific monthly update and you can see others reporting the same thing, treat it as Microsoft's bug to patch, not yours to chase forever: check Settings > Windows Update for a newer fix (see our guide if Windows Update itself is stuck), or, if it's recent and painful, uninstall that update from Update history > Uninstall updates and pause updates for a week while a corrected one ships.

On a work or school PC, the PIN may be switched off on purpose

One honest possibility that isn't a fault at all: if this is a computer managed by your employer or school, the PIN option can be disabled by policy — greyed out with no error you can act on. IT departments sometimes turn off "convenience PIN" sign-in or require a different sign-in method for security reasons, and no amount of resetting on your end will override that. If your machine is a work or school device and the PIN is simply unavailable with nothing you do bringing it back, the fastest answer is to ask whoever manages your IT rather than to keep digging. On your own personal PC this almost never applies — but it's worth ruling out before you spend an afternoon on a setting your organization is deliberately holding shut.

Still stuck? A couple of deeper checks

If the PIN still won't behave after a reset, an Ngc rebuild, and ruling out the TPM and update causes, a couple of standard checks are worth a few minutes. Create a brand-new user account (Settings > Accounts > Other users > Add account) and try setting up a PIN there: if it works in the new account but not your old one, your original user profile is corrupted, and moving to a fresh profile is the cleaner cure than fighting the old one. And running the built-in system-file repair — open Terminal or Command Prompt as administrator and run sfc /scannow, then DISM /Online /Cleanup-Image /RestoreHealth — can fix underlying Windows damage that keeps knocking the PIN over.

Through all of it, hold on to the one fact that keeps this from being an emergency: you can still sign in with your password, so nothing is lost and nothing needs wiping. That's the whole difference between this and a true lockout — a fussy PIN is an inconvenience, not a crisis. If you'd rather not work through the Ngc folder or go near the TPM yourself, that's a perfectly sensible place to stop and get a hand.

How we can help

The short version: don't buy a "PIN unlocker" — the real fixes are free. Sign in with your password (Sign-in options on the lock screen), then reset the PIN cleanly at Settings > Accounts > Sign-in options > "I forgot my PIN." If the reset won't complete, clear the corrupted Ngc folder and set the PIN up fresh; if it broke right after a big update like 24H2, signing in with your password and re-adding the PIN re-binds it correctly. Leave the TPM-clearing to last, and only after you've found your BitLocker recovery key.

If any of that feels like more than you want to take on — especially the protected-folder or TPM steps — that's exactly the kind of everyday Windows headache we sort out for homes and small businesses across Southern California and the Coachella Valley: getting you back in without losing a thing, rebuilding a broken Windows Hello PIN safely, and checking your BitLocker key is in hand before anyone touches the security chip. Because we don't sell software or "recovery" tools, the advice you get is just the fix you actually need.