Setting up a PIN felt like a great idea at the time. Now it’s just in the way. Maybe you want to sign in with your password, maybe you’re the only one using the device, or maybe you just don’t want the extra step. Whatever the reason, removing your Windows Hello PIN is straightforward once you know where to look.
Why Windows Makes It Slightly Annoying to Remove the PIN
Microsoft really wants you to keep your PIN. It considers PIN sign-in more secure than a password because the PIN is stored locally on your device and tied to it, not transmitted over a network. So Windows doesn’t make the removal option obvious.
But you have every right to remove it. You just need to know where the option hides.
Method 1: Remove PIN From Windows Settings (The Standard Way)
This works for most people on both Windows 10 and Windows 11.
On Windows 11:
- Press Windows + I to open Settings
- Go to Accounts
- Click Sign-in options
- Scroll down and find PIN (Windows Hello)
- Click on it to expand
- Click Remove
- A confirmation box appears. Click Remove again
- Enter your Microsoft account password to confirm
- Done. Your PIN is removed
On Windows 10:
- Open Settings with Windows + I
- Go to Accounts
- Click Sign-in options from the left menu
- Under Windows Hello PIN, click Remove
- Confirm and enter your account password
The process is nearly identical. The layout looks a little different, but the steps are the same.
Method 2: What to Do When the Remove Button Is Grayed Out
This is the most common frustration I see. You go to Sign-in options, find the PIN section, and the Remove button is either grayed out or simply not there.
Here’s why that happens and how to fix it.
Reason 1: Your Organization Policy Is Blocking It
If your device is connected to a work or school account, your IT admin may have set a policy that requires PIN sign-in. In that case, you genuinely cannot remove it without admin intervention. Contact your IT department.
Reason 2: You Only Have a PIN (No Password Set)
Windows won’t let you remove your PIN if it’s your only sign-in method. You need at least one backup. Set a password first, then remove the PIN.
To add a password on Windows 11:
- Go to Settings > Accounts > Sign-in options
- Under Password, click Add
- Set your password
- Then go back and remove the PIN
Reason 3: The “For Improved Security” Toggle Is Enabled
Windows 11 has a setting that says “For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device.” If this is turned on, it blocks password-only sign-in and keeps the PIN mandatory.
Turn it off:
- Go to Settings > Accounts > Sign-in options
- Look for the toggle near the top that mentions improved security or Windows Hello
- Turn it Off
- Now try removing the PIN again
Method 3: Use the Local Group Policy Editor
This method works on Windows 10 Pro, Enterprise, and Windows 11 Pro or higher. It does not work on Windows Home editions.
- Press Windows + R, type
gpedit.msc, and hit Enter - Navigate to: Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business
- Find the policy called Use Windows Hello for Business
- Double-click it
- Set it to Disabled
- Click Apply, then OK
- Restart your PC
- Now go to Sign-in options and remove the PIN
If you’re on Windows Home, skip this and use the Registry method below.
Method 4: Edit the Registry to Force Remove the PIN Option
Only use this if the other methods didn’t work. Registry edits can affect your system if done incorrectly, so follow each step carefully.
- Press Windows + R, type
regedit, and press Enter - Navigate to this path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
- Look for a value called AllowDomainPINLogon
- If it exists, right-click it and delete it
- Also check:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions - If you see a value blocking sign-in options, delete it
- Restart your PC and try removing the PIN from Settings
You can also create a new DWORD value to disable the PIN requirement:
- In
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System - Right-click the empty area, select New > DWORD (32-bit) Value
- Name it AllowDomainPINLogon
- Set the value to 0
- Restart
Method 5: Delete the PIN Directly From the NGC Folder
If nothing else works, this is the nuclear option. It manually deletes the PIN data stored on your system.
Before doing this, create a system restore point.
- Press Windows + R, type
cmd, right-click Command Prompt, and select Run as administrator - Type this command and press Enter:
takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /d y
- Then run:
icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t
- Now open File Explorer and navigate to:
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC
Note: AppData is a hidden folder. Enable Show hidden items in View settings first.
- Select everything inside the NGC folder and delete it
- Do not delete the NGC folder itself, only its contents
- Restart your PC
After rebooting, Windows will no longer have a stored PIN. It may prompt you to set one again. Just skip that and use your password.
How to Disable PIN Requirement Completely (So Windows Doesn’t Ask Again)
Even after removing the PIN, Windows might keep nudging you to set one. Here’s how to stop that.
Turn Off Windows Hello Prompts via Settings
- Go to Settings > Accounts > Sign-in options
- Under Windows Hello PIN, make sure it’s removed
- Turn off any “Improve security” toggle
- Under Privacy in Settings, go to Diagnostics & Feedback and review sign-in suggestions
Use Local Policy to Disable Windows Hello Globally
- Open
gpedit.msc - Go to Computer Configuration > Administrative Templates > System > Logon
- Find Turn on convenience PIN sign-in
- Set it to Disabled
- Apply and restart
This stops Windows from prompting you to create a PIN.
What Happens After You Remove Your PIN
Once the PIN is removed, Windows will use your chosen sign-in method at the lock screen. If you have a Microsoft account, it’ll ask for your password. If you have a local account, same thing.
Your files, apps, and settings are completely unaffected. Removing a PIN doesn’t touch anything else on your system.
Comparison of All Methods
| Method | Works On | Difficulty | Best For |
|---|---|---|---|
| Settings (standard) | Win 10 and 11 | Easy | Most users |
| Disable security toggle | Win 11 | Easy | Grayed-out remove button |
| Group Policy Editor | Pro/Enterprise only | Medium | Permanent disable |
| Registry Edit | All editions | Medium | Home users, policy override |
| Delete NGC folder | All editions | Advanced | When nothing else works |
Local Account vs Microsoft Account: Does It Matter?
Yes, slightly.
If you use a local account, removing the PIN is usually simpler. There’s no Microsoft account verification step, and the restrictions are fewer.
If you use a Microsoft account, Windows may enforce certain sign-in policies and require account password verification before letting you remove the PIN. The process still works, it just adds one extra confirmation step.
Switching to a local account is also an option if you want full control over your sign-in settings. You can do that from Settings > Accounts > Your Info and choosing to sign in with a local account instead.
A Note on Windows 11 24H2
If you’re on the 2024 or 2025 update of Windows 11, the Settings layout has changed slightly. The PIN option is still under Accounts > Sign-in options, but it may be labeled differently or grouped under a “Passkeys and security keys” section on some builds.
The same steps apply. If the UI looks different, look for anything labeled “Windows Hello” or “PIN” and you’ll find the remove option nearby.
Conclusion
Removing a Windows Hello PIN is mostly a 30-second job through Settings. The issue is when Microsoft hides or grays out the option because of security toggles or organization policies. I’ve covered every real scenario here: the standard removal, fixing the grayed-out button, using Group Policy, editing the Registry, and deleting the NGC folder as a last resort.
Start with Method 1. If the Remove button is grayed out, check the security toggle in Method 2 first. Only go deeper if the simple options don’t work.
Once removed, your PC will return to password sign-in and Windows will stop treating the PIN as mandatory, as long as you also disable the Windows Hello prompts.
Frequently Asked Questions
Can I remove my PIN without knowing my Microsoft account password?
The Settings method asks for your Microsoft account password as a final confirmation step. If you’ve forgotten it, you’ll need to reset your Microsoft account password first through the Microsoft website, then come back and remove the PIN.
My PC is asking me to create a PIN every time I restart. How do I stop that?
This usually means the “improved security” toggle is turned on, or a Group Policy is enforcing PIN creation. Turn off the security toggle in Sign-in options, and if that doesn’t work, use the Local Group Policy Editor to disable “Turn on convenience PIN sign-in” under System > Logon settings.
I deleted the NGC folder contents but Windows still shows a PIN screen on startup. What now?
After deleting the NGC contents, a full restart is required. If the PIN screen still appears, press the back arrow or look for a “sign-in options” link on the login screen. From there you can select password sign-in. The PIN field will fail since the data is gone, which forces Windows to fall back to your password.
Does removing the PIN affect Windows Hello Face or Fingerprint login?
Yes, partially. Windows Hello Face and Fingerprint are separate from the PIN, but they often use the PIN as a backup verification method. Removing the PIN may disable biometric sign-in as well, depending on your setup. You’ll be left with password sign-in as the primary method.
Is it safe to edit the NGC folder on a work laptop?
Not without checking with your IT team first. On a work or school device, the PIN may be enforced by a domain policy. Manually deleting the NGC contents could trigger security alerts or lock your account temporarily. On a personal device, it’s completely safe to do.
