

This list will be based on the different authentication methods enabled in your tenant (e.g., Password, PIN, Security key). Select an authentication option from the list of presented options.Select I forgot my PIN from the PIN credential provider.If the PIN credential provider is not selected, expand the Sign-in options link, and select the PIN pad icon.Select PIN (Windows Hello) > I forgot my PIN and follow the instructions.Open Settings, select Accounts > Sign-in options.
DESKTOP PINS WINDOWS 10
Sign-in to Windows 10 using an alternate credential.If AD FS is being used for certificate trust or for on-premises only deployments, users must also have corporate network connectivity to federation services to reset their PIN. If users do not have an alternate way to sign into their devices, PIN reset can also be initiated from the Windows lock screen in the PIN credential provider.įor hybrid Azure AD-joined devices, users must have corporate network connectivity to domain controllers to complete destructive PIN reset. If users have forgotten their PINs, but have an alternate sign-in method, they can navigate to Sign-in options in Settings and initiate a PIN reset from the PIN options. Reset above Lock - Windows 10, version 1709 or later, Windows 11ĭestructive and non-destructive PIN reset use the same steps for initiating a PIN reset.Reset from settings - Windows 10, version 1703 or later, Windows 11.During a non-destructive PIN reset, the user's Windows Hello for Business container and keys are preserved, but the user's PIN that they use to authorize key usage is changed. For non-destructive PIN reset, you must deploy the Microsoft PIN reset service and client policy to enable the PIN recovery feature. During a destructive PIN reset, the user's existing PIN and underlying credentials, including any keys or certificates added to their Windows Hello container, will be deleted from the client and a new logon key and PIN are provisioned. Destructive PIN reset is the default and doesn't require configuration. There are two forms of PIN reset called destructive and non-destructive. For non-destructive PIN reset, you must deploy the Microsoft PIN Reset Service and configure your clients' policy to enable the PIN Recovery feature. Non-destructive PIN reset: with this option, the user's Windows Hello for Business container and keys are preserved, but the user's PIN that they use to authorize key usage is changed.Destructive PIN reset is the default option, and doesn't require configuration. Destructive PIN reset: with this option, the user's existing PIN and underlying credentials, including any keys or certificates added to their Windows Hello container, are deleted from the client and a new login key and PIN are provisioned.

Users are required to authenticate and complete multi-factor authentication to reset their PIN.

Windows Hello for Business provides the capability for users to reset forgotten PINs using the I forgot my PIN link from the Sign-in options page in Settings or from the Windows lock screen.
