What to do if Windows 10 won’t let you add a PIN

Milan Stanojevic
by Milan Stanojevic
Deputy Editor
0 Comments
Download PDF
Affiliate Disclosure

  • When you can't change your login PIN for Windows 10,  your OS might be corrupted.
  • There are a few fixes that involve running Command Prompt, among others, and we're showing you how to use them.
  • We have just the best tips on how to protect your online identity. Visit the Security Hub.
  • Looking for more answers to Windows 10 issues? See our dedicated Troubleshooting section for this OS.
Windows 10 won’t add PIN

PIN sign-in is a convenient way to log in to your computer through a four-digit code that is easy to remember, and use as the primary sign-in option on your Windows computer.

However, there are times when Windows 10 won’t let you add a PIN, or it is just not working anymore, as this user reports:

For the past few days, the login with PIN on Windows 10 Pro is not available anymore on my laptop.  On the sign-in options screen I can only add a PIN but not remove or change it. When try to add a PIN after Password confirmation it asks to confirm my identity with a PIN and then nothing happens anymore.  […] If I instead enter a PIN select forget PIN it only open the dialog to go to sign-in option screen to reset my PIN.  

Similar situations include:

  • The inability to add or update your PIN
  • Adding a PIN but not being offered the sign in option in the login screen
  • PIN sign in option is offered but the system rejects your PIN
  • PIN sign in is stuck and you need to reboot or use a different login option
  • The PIN was added but after an update, it is broken

If one of these issues applies to your case, you can try the solutions listed below to resolve it.

What can I do if Windows won’t let me add a PIN?

  1. Disable or change your security software
  2. Set up PIN log in
  3. Alter Permissions
  4. Reset ACLs on NGC folder
  5. Use a local account
  6. Log in using another user account
  7. Clear TPM
  8. Run an SFC
  9. Run DISM tool

1. Disable or change your security software

Sometimes Windows 10 won’t let you add a PIN when your security software (antivirus or firewall) is blocking the powershell.exe after a Windows update.

Allow the program/unblock it via your antivirus program setting and see if you can go straight to your account settings and add a PIN.

Not every security software behaves restrictively, though. While most such programs are designed to have an impact as minimal as possible, some are more successful than others.

can't add PIN to windows log in

Vipre, for instance, is an antivirus that offers maximum protection with almost no interference in other processes. It’s very important to have a tool that offers this type of protection, without you having to compromise your device’s security.

Unlike other antivirus tools, Vipre comes with just the essential features to ensure online and offline protection against the latest and emerging malware and ransomware for all devices in your network.

Its also designed to efficiently reduce vulnerability for your security profile.

Vipre Antivirus Plus

Vipre Antivirus Plus

Your antivirus is a startup-blocker? Change to a protection software less to zero impact on the booting process.
Free trial Visit website

2. Set up PIN log in

  1. Go to the search box and type CMD then press enter.
  2. Pick Command Prompt, right-click it and select Run as administrator.
  3. In the Command Prompt (Admin) black screen, type gpedit.msc and press Enter.
  4. Double click on Computer configuration.
  5. Click Administrative Templates.
  6. Double click System.
  7. Double click Logon.
  8. Double click Turn on convenience PIN sign in.
  9. Select Enable.

3. Alter Permissions

  1. Click Start and select File Explorer.
  2. Click View.
  3. Click Show/Hide and check Hidden Items.
  4. Go to the following folder: C:\Windows\ServiceProfiles
  5. Double click LocalService.
  6. Click AppData\Local\Microsoft folder.
  7. Right-click on the NGC folder.
  8. Select Properties.
  9. Go to the Security tab.
  10. Click Advanced.
  11. Click Change link against Owner under Advanced Security Settings for NGC window.
  12. Take ownership of the NGC folder.
  13. Check Replace owner on sub-containers and objects, and replace all child object permission entries with inheritable permission entries from this object.
  14. Click Change permissions.
  15. Click Add.
  16. In the permission entry for NGC, click Select a principal.
  17. Enter SYSTEM as the object name.
  18. Click Check Names and click OK.
  19. Check Full Control under Basic Permissions and click OK.

Check if you can add a PIN after following these steps.


You’re also having trouble loging with the Microsoft account? Try one of these solutions.


4. Reset ACLs on NGC folder

  1. Go to the search box and type CMD then press enter.
  2. Pick Command Prompt, right-click it and select Run as administrator.
  3. In the Command Prompt (Admin) black screen, type this command: icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /T /Q /C /RESET
  4. Press Enter.
  5. Close Command Prompt.
  6. You might need to add a new PIN now and it should work as expected.

5. Use a local account

  1. On the login screen, click on Sign-in options
  2. Try to login to Windows with your Microsoft account or local account Password
  3. Click on the Windows icon in the bottom-right corner.
  4. At the top of the Start Menu, click on your account
  5. Select Change account settings
  6. On the left-side panel of Accounts settings, select Sign-in options
  7. Under the PIN option, click on Remove.
  8. Click Remove when asked Are you sure you want to remove your PIN?
  9. A Log-in Box will open for you to re-enter your password. Enter your password then click OK
  10. You will be returned to the Sign-in options page where you can now add a PIN code once again.
  11. Enter your new PIN and confirm it.
  12. Click OK to reset your new PIN.
  13. Restart your PC and sign-in with your new PIN to confirm.

Windows 10 login is slow, stuck, or frozen? We’ve got the right solutions for you! 


6. Log in using another user account

  1. Right-click on Start
  2. Select Run
  3. Type control userpasswords2 and press enter
  4. Select your account
  5. Click Reset Password
  6. Enter a new password then click OK. Try logging into the account.

For computers connected to a Domain, contact your Network Administrator. There might be an issue with Kerberos authentication or the version of Windows Server is not compatible.

Restart your computer a few times to see if you are able to then log in. There might be a small delay also, so wait a few seconds then try again. Use the preview button to make sure you entered the right characters.


7. Clear TPM

  1. In the search box, type tpm.msc, and press enter
  2. Click Clear TPM. (It will reboot you to a part of the system’s UEFI/BIOS)
  3. Press F1 to clear TPM
  4. Click Start and select Settings
  5. Click Accounts
  6. Go to the Add PIN function and select it to see if it works.

8. Run an SFC scan

  1. Go to Start and type CMD
  2. Right-click Command Prompt and select run as Administrator (elevated command prompt)
  3. Type sfc /scannow and press Enter.
  4. Wait for the process to finish.

The result should show one of these three things:

  • Windows did not find any integrity violations (a good thing)
  • Windows Resource Protection found corrupt files and repaired them (a good thing)
  • Windows Resource Protection found corrupt files but was unable to fix some (or all) of them (not a good thing). If you get this message run DISM as described below

9. Run DISM tool

fix won’t accept a PIN at log in

  1. Click Start.
  2. In the search field box, type CMD.
  3. Click Command Prompt in the search results list.
  4. Type the following commands and run them each at a time by pressing Enter:
    • Dism /Online /Cleanup-Image /ScanHealth 
    • Dism /Online /Cleanup-Image /CheckHealth 
    • Dism /Online /Cleanup-Image /RestoreHealth

These commands will to scan for missing components, check for missing or broken files and correct any causes of the Windows 10 desktop is slow to load issue, respectively.

Note: The DISM tool usually takes 15 minutes to complete, however, sometimes it may take longer. Do not cancel when it is running. If the repair is successful you may want to re-run SFC just to check.

The Deployment Image Servicing and Management (DISM) tool helps fix Windows corruption errors when Windows Updates and service packs fail to install due to corruption errors

Did any of these solutions help you add a PIN again? Let us know in the comments section below.

Editor’s Note: This post was originally published in May 2018 and was completely revamped and updated in October 2020 for freshness, accuracy, and comprehensiveness.

Was this page helpful?
Thanks for letting us know! You can also help us by leaving a review on MyWOT or Trustpillot.
Get the most from your tech with our daily tips
Tell us why!