If your Windows 11 PIN is not available, select Sign-in options on the lock screen and try your Microsoft account or local account password. If you see I forgot my PIN or Set up my PIN, connect the computer to the internet and follow the identity-verification prompts to create a new PIN.
The full error often reads, “Something happened and your PIN isn’t available. Click to set up your PIN again.” It may appear after a Windows update, BIOS change, TPM reset, security-policy change, account problem, or corruption of the Windows Hello PIN data. In many cases, your files and account are still intact. Windows has simply lost access to the credential used by Windows Hello.
Start with the lock-screen solutions below. Move to Windows Recovery Environment only if you cannot sign in with another method.
What “Your PIN Is Not Available” Means
A Windows Hello PIN is different from your Microsoft account password. The PIN is normally tied to one particular Windows device and protected using that device’s security hardware. Your Microsoft account password, on the other hand, belongs to the online account and can be used across Microsoft services.
This distinction is important because an unavailable PIN does not necessarily mean your account password has stopped working. Microsoft recommends selecting Sign-in options and using the password when the PIN-reset option is unavailable. Microsoft Support
Common versions of the error include:
- Something happened and your PIN isn’t available
- Your PIN is no longer available due to a change to the security settings
- This sign-in option is disabled
- Set up my PIN does nothing
- We weren’t able to set up your PIN
- Error code
0xd000a002 - Windows Hello PIN option is missing
The correct fix depends on whether you can still access a password sign-in, whether the computer is online, and whether the problem began after an update or firmware change.
1. Restart the Computer
Use the Power icon on the sign-in screen and select Restart. Do not only shut the lid or put the computer to sleep.
A full restart can complete a pending update and clear a temporary Windows sign-in service problem. Microsoft lists restarting as an early step when Windows sign-in is not working. Microsoft Support
If the power menu offers Update and restart, use it when the PC has reliable power and you have time for the update to finish. Do not interrupt the computer while Windows is installing an update.
2. Connect Windows 11 to the Internet
PIN recovery for a Microsoft account may require an internet connection so Windows can verify your identity.
On the lock screen:
- Select the Network icon in the lower-right corner.
- Choose your Wi-Fi network.
- Enter the Wi-Fi password and select Connect.
- Wait until the network shows as connected.
- Select Set up my PIN or I forgot my PIN again.
If Wi-Fi is unavailable, connect an Ethernet cable if the computer has a network port. You can also try a phone’s secured Wi-Fi hotspot.
If the network icon is missing or the connection fails, continue to the password method. Do not reset the whole PC merely because PIN recovery cannot reach Microsoft’s servers.
3. Sign In with Your Password
This is usually the fastest solution when Windows 11 says the PIN is not available.
- Select Sign-in options below the PIN box.
- Choose the key or password icon.
- Enter the password for the account shown on the screen.
For a Microsoft account, use the current Microsoft account password, not the unavailable PIN. For a local account, enter the local password created for that Windows user.
Once signed in:
- Open Settings.
- Select Accounts.
- Open Sign-in options.
- Expand PIN (Windows Hello).
- Select I forgot my PIN or Set up.
- Verify the account and create a new PIN.
If you recently changed your Microsoft account password online, make sure the PC is connected to the internet before using the new password. If it is offline, Windows may still expect a previously cached credential.
What if the Password Option Is Missing?
On some computers, Windows is configured to allow only Windows Hello sign-in for Microsoft accounts. If you can access the desktop through fingerprint or face recognition, open:
Settings > Accounts > Sign-in options > Additional settings
Turn off For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. The wording can vary between Windows versions.
Return to the sign-in screen and check Sign-in options again. On an organization-managed computer, this setting may be controlled by an administrator.
4. Use “I Forgot My PIN”
If I forgot my PIN appears on the lock screen:
- Select it.
- Confirm the Microsoft account.
- Enter the account password if requested.
- Complete verification using the email address, phone number, authenticator app, or other method associated with the account.
- Create and confirm a new PIN.
Microsoft explains that if I forgot my PIN is not available, you should sign in with the password and reset the PIN from Settings > Accounts > Sign-in options. Microsoft Support
Do not confuse Change PIN with I forgot my PIN:
- Change PIN requires the current PIN.
- I forgot my PIN verifies the account and lets you replace an unavailable PIN.
If the verification window opens and immediately closes, restart the computer, reconnect to the internet, and try again. A work or school account may require access to the organization’s network or assistance from its IT administrator.
5. Try Another Existing Sign-in Method
Select Sign-in options and look for:
- Password
- Fingerprint recognition
- Facial recognition
- Security key
- Picture password
Use only a method that was already configured for the account. If fingerprint or face recognition lets you enter Windows, recreate the PIN from Settings afterward because some Windows Hello features depend on the PIN as a fallback.
6. Check the Date, Time and BIOS Changes
The PIN can become unavailable after a BIOS or UEFI update, a TPM change, Secure Boot adjustment, motherboard repair, or a significant security change. An incorrect system date can also interfere with online account verification.
If you recently entered the BIOS:
- Restore only settings you knowingly changed.
- Make sure the date and time are correct.
- Do not clear the TPM as a casual troubleshooting step.
- Do not repeatedly switch TPM or Secure Boot settings.
Clearing the TPM removes security keys and may trigger BitLocker recovery. If BitLocker asks for a recovery key, use the key belonging to that device. Do not continue making firmware changes until you have recovered access.
7. Boot Windows 11 into Safe Mode
Safe Mode loads a limited set of Windows services and drivers. It can help when a recent driver, security program, or startup service is interfering with sign-in.
Open Windows Recovery Environment from the Lock Screen
- Select the Power icon.
- Hold the Shift key.
- While holding Shift, select Restart.
- On the recovery screen, choose Troubleshoot.
- Select Advanced options > Startup Settings > Restart.
- Press 4 or F4 for Safe Mode.
- Press 5 or F5 if Safe Mode with Networking is required.
Microsoft documents the same path through Troubleshoot > Advanced options > Startup Settings > Restart. An encrypted device may request its BitLocker recovery key. Microsoft Support
Try signing in with the account password. PIN and biometric methods may be unavailable in Safe Mode, so the password is important.
If you reach the desktop:
- Restart normally and test the sign-in screen again.
- If the PIN still fails, open Settings > Accounts > Sign-in options.
- Remove or reset the Windows Hello PIN.
Do not use Safe Mode to create an unauthorized replacement account or bypass the owner’s sign-in credentials.
8. Remove and Recreate the Windows Hello PIN
If you can access your desktop with a password:
- Open Settings > Accounts > Sign-in options.
- Expand PIN (Windows Hello).
- Select Remove.
- Confirm with the account password.
- Restart the computer.
- Return to Sign-in options and select Set up.
If Remove is unavailable, turn off the setting that allows only Windows Hello sign-in for Microsoft accounts, then check again.
Microsoft’s Windows Hello troubleshooting page says that a request to create the PIN again can follow security updates or system changes. It recommends recreating the PIN, checking for updates, or resetting the PIN when sign-in fails. Microsoft Support
9. Install Windows Updates
After regaining access:
- Open Settings > Windows Update.
- Select Check for updates.
- Install available security and quality updates.
- Restart the computer.
Also check the computer manufacturer’s support page for BIOS, firmware, chipset, and TPM-related updates that apply to the exact model. Keep the PC connected to power during firmware installation.
Do not install drivers from random download sites. Security and sign-in components should come from Windows Update or the device manufacturer.
10. Repair Windows System Files
Corrupted Windows components can prevent the sign-in interface or Windows Hello services from working correctly. Once you are signed in with a password, open Terminal (Admin) and run:
DISM.exe /Online /Cleanup-Image /RestoreHealth
Wait for it to finish, then run:
sfc /scannow
Restart the computer after both scans. DISM repairs the Windows component store, while System File Checker replaces damaged protected system files.
These commands do not reset the Microsoft account password or directly delete the PIN. They repair Windows components that the sign-in system relies on.
11. Reset the NGC Folder
Windows stores Windows Hello PIN configuration in a protected NGC location. Resetting its contents can help when the stored PIN data is corrupted and normal PIN removal does not work.
Use this as an advanced fix only when:
- You can sign in using a password.
- You have administrator access to your own computer.
- The normal PIN reset repeatedly fails.
- Important files are backed up.
The folder is normally located at:
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc
Microsoft community guidance identifies this as the Windows Hello PIN-data location and recommends deleting its contents before configuring the PIN again. This advice comes from Microsoft Q&A rather than the main Windows support documentation, so try the supported PIN-reset methods first. Microsoft Q&A
Reset NGC from an Administrator Account
- Sign in using the account password.
- Open File Explorer.
- Select View > Show > Hidden items.
- Paste the NGC path into the address bar.
- If Windows denies access, open the folder’s Properties > Security > Advanced and take ownership using an administrator account.
- Back up the folder if possible.
- Delete the contents of the Ngc folder, not unrelated folders beside it.
- Restart Windows.
- Open Settings > Accounts > Sign-in options > PIN (Windows Hello).
- Create a new PIN.
Changing ownership of protected folders can weaken permissions if done incorrectly. Do not broadly take ownership of C:\Windows, ServiceProfiles, or the entire system drive.
12. Uninstall the Latest Windows Update
Use this option when the PIN error began immediately after a Windows quality update and the earlier solutions failed.
From the sign-in screen:
- Hold Shift while selecting Power > Restart.
- Choose Troubleshoot > Advanced options.
- Select Uninstall Updates.
- Choose Uninstall latest quality update.
- Follow the prompts and restart.
Microsoft provides this recovery route for computers that cannot access Windows. Microsoft Support
Remove a feature update only when you know the problem began with a major Windows version upgrade. After regaining access, pause briefly and check whether Microsoft or the PC manufacturer has published a corrective update.
13. Use System Restore
System Restore can return Windows system files, drivers, registry settings, and installed programs to an earlier restore point without intentionally deleting personal files.
- Hold Shift and select Power > Restart.
- Open Troubleshoot > Advanced options > System Restore.
- Select your Windows account.
- Enter the password if requested.
- Choose a restore point created before the PIN problem started.
- Review affected programs and complete the restore.
Microsoft notes that a BitLocker recovery key may be required on encrypted devices. Microsoft Support
System Restore is available only if Windows created or retained a suitable restore point.
14. Run Startup Repair
Startup Repair is more useful when the PIN problem appears alongside failed boots, blank sign-in screens, repeated recovery loops, or damaged startup files.
- Enter Windows Recovery Environment.
- Choose Troubleshoot > Advanced options.
- Select Startup Repair.
- Select the Windows installation or account if prompted.
- Let Windows diagnose the startup environment.
Microsoft’s supported path is Troubleshoot > Advanced options > Startup Repair > Restart. Microsoft Support
Startup Repair may not fix isolated Windows Hello corruption, but it is safer than manually changing boot files.
15. Reinstall the Current Windows Version Without Removing Apps
If you can sign in by password but Windows Hello remains broken after system-file repairs, Windows 11 may offer a repair reinstall:
- Back up important files.
- Open Settings > System > Recovery.
- Find Fix problems using Windows Update.
- Select Reinstall now.
- Follow the prompts and keep the computer connected to power and the internet.
Microsoft says this option reinstalls the current Windows version to repair system files and components. Availability depends on the Windows edition, version, update policy, and whether the device is managed. Microsoft Support
This is preferable to a factory reset when it is available because it is designed as a repair operation. Backups are still essential before any operating-system reinstall.
16. Reset Windows 11 Only as a Last Resort
Do not reset the computer simply because the PIN is unavailable. First exhaust password sign-in, PIN recovery, Safe Mode, update removal, System Restore, and repair reinstall.
If the system remains inaccessible:
- Enter Windows Recovery Environment.
- Select Troubleshoot > Reset this PC.
- Choose Keep my files if appropriate.
- Decide between a cloud download and local reinstall.
- Read the summary carefully before confirming.
Keep my files preserves personal files but removes installed applications and resets many settings. It is not a substitute for a backup. BitLocker may request the recovery key.
For a closer look at every recovery choice, see Windows 11 factory reset from boot before proceeding.
Fix “Set Up My PIN” Not Working
If clicking Set up my PIN does nothing or returns to the same screen:
- Connect the lock screen to the internet.
- Restart Windows.
- Select Sign-in options and use the password.
- After signing in, remove and recreate the PIN from Settings.
- Install Windows updates.
- Run DISM and SFC.
- Reset the NGC folder only if the supported reset method fails.
On a work or school PC, contact the organization’s administrator. Windows Hello for Business can be governed by account, certificate, multifactor authentication, or device-compliance policies that a local user cannot change.
Fix “This Sign-in Option Is Disabled”
Windows can temporarily disable a sign-in option after repeated failed attempts or repeated shutdowns.
Read the complete message. It may ask you to:
- Keep the device powered on for a specified period.
- Use another sign-in option.
- Enter the account password.
- Restart and try again later.
Leave the computer on, connected to power and, when possible, connected to the internet. Avoid repeatedly entering guesses because that can extend the lockout.
If another administrator account already exists on a personally owned PC, sign in to that account and check Windows Update and the affected account’s sign-in settings. Do not create or activate accounts to bypass ownership or organizational controls.
Fix Error Code 0xd000a002
Error 0xd000a002 can appear when Windows Hello PIN information is unavailable or damaged.
Use this order:
- Restart Windows.
- Connect to the internet.
- Sign in with the account password.
- Remove and recreate the PIN.
- Install Windows and firmware updates.
- Run DISM and SFC.
- Reset the NGC folder if the normal PIN reset cannot complete.
- Use System Restore if the error began after a system change.
If the error follows a TPM reset, motherboard replacement, or BIOS security change, contact the computer manufacturer or workplace administrator before making further firmware changes.
What If You Forgot Both the PIN and Password?
For a Microsoft account, use Microsoft’s official account recovery process from another device. After changing the password, connect the locked Windows PC to the internet and use the new password under Sign-in options.
For a local account, select Reset password if security questions were configured, then answer them. A previously created password-reset disk may also work for a local account.
If neither recovery method is available, Microsoft cannot reveal the existing password or PIN. You may need to restore from a backup or reset Windows. Avoid third-party “password bypass” utilities because they can damage encrypted data, introduce malware, or violate ownership and workplace policies.
Frequently Asked Questions
Why is my Windows 11 PIN suddenly not available?
The error commonly follows a security update, TPM or BIOS change, damaged Windows Hello data, account-verification problem, or interrupted update. It does not automatically mean the account or personal files have been deleted.
How do I bypass “Something happened and your PIN isn’t available”?
Use Sign-in options to authenticate with the legitimate account password, fingerprint, face recognition, or security key already configured for the account. Then reset the PIN. There is no need to bypass account security when a supported sign-in or recovery method is available.
Can I sign in to Windows 11 without the PIN?
Yes, if another sign-in method is enabled. Select Sign-in options and choose the account password or another previously configured method.
Why is “I forgot my PIN” missing?
Microsoft says that when the option is unavailable, you should sign in using the password and reset the PIN from Settings > Accounts > Sign-in options. A managed device may also hide options through organizational policy.
Will resetting the PIN delete my files?
Resetting or recreating the Windows Hello PIN does not normally delete personal files. However, any action involving TPM changes, BitLocker, Windows reset, or reinstalling the operating system requires more caution and a current backup.
Do I need the BitLocker recovery key?
Not for an ordinary lock-screen PIN reset in most cases. Windows Recovery Environment, firmware changes, TPM changes, System Restore, or a Windows reset may request it on an encrypted device.
Can Safe Mode fix an unavailable PIN?
Safe Mode may help you sign in with the account password and remove a conflicting driver or service. PIN and biometric sign-in can be unavailable in Safe Mode, so know the account password before using it.
Should I delete the NGC folder first?
No. Start with restarting, internet access, password sign-in, and Microsoft’s PIN-reset options. Reset the NGC data only when you can access your own administrator account and the supported reset repeatedly fails.
The safest path is to preserve access rather than make large system changes: try the password, reset Windows Hello from Settings, and use recovery tools in increasing order of impact. A factory reset should remain the final option, not the first response to a missing PIN.
