Enable or Disable PIN Reset at Sign-in screen on Windows 11/10

One important difference to note between a password and a Hello PIN is that the PIN is tied to the specific device on which it was set up, and can ONLY be used to access that specific Windows 11/10 device. If you forgot your PIN, you can reset it. If you have a Microsoft account with a PIN, you can reset the PIN at sign-in. In this post, we will show you how to Enable or Disable PIN Reset at Sign-in screen on Windows 11/10.

If you disable PIN reset at sign-in, it will remove the I forgot my PIN link on the sign-in screen for all Microsoft accounts on the PC.

How to Enable or Disable PIN Reset at Sign-in screen

You must be signed in as an administrator to enable or disable PIN reset at sign-in.

Since this is a registry operation, it is recommended that you back up the registry or create a system restore point as necessary precautionary measures.

To enable (default setting) PIN Reset at Sign-in screen in Windows 10, do the following:

Press Windows key + R to invoke the Run dialog.
In the Run dialog box, type notepad and hit Enter to open Notepad.
Copy and paste the code below into the text editor.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin]
"EnablePinReset"=dword:0000000f

Now, click the File option from the menu and select Save As button.
Choose a location (preferably desktop) where you want to save the file.
Enter a name with .reg extension (eg; EnableResetPIN.reg).
Choose All Files from the Save as type drop-down list.
Double-click the saved .reg file to merge it.
If prompted, click on Run > Yes (UAC) > Yes > OK to approve the merge.
You can now delete the .reg file if you like.

To disable PIN Reset at Sign-in screen in Windows 10, do the following:

Open Notepad.
Copy and paste the code below into the text editor.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\NgcPin]
"EnablePinReset"=dword:00000000