Windows Hello PIN Guide

Remove PIN Button Grayed Out in Windows 10 & 11: How to Fix It

A practical guide to enabling the disabled Remove PIN button, turning off Windows Hello-only sign-in, checking work or school policies, and rebuilding a damaged PIN configuration safely.

🪟 Windows 10 & 11 🔐 Windows Hello PIN ⏱ 5–15 min fix ✅ Personal and managed PCs
Section 01

Quick Answer: Why the Windows 10 or Windows 11 Remove PIN Button Is Grayed Out

If the Remove button under PIN (Windows Hello) is not active, Windows is usually enforcing Windows Hello sign-in. The most common cause is the option that allows only Windows Hello sign-in for Microsoft accounts. The button can also be disabled by a work or school account, a device-management policy, a Windows Hello for Business policy, or a damaged PIN configuration.

ℹ️
Fast fix

Open Settings > Accounts > Sign-in options, turn off For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device, restart Windows, and then try to remove the PIN again.

Symptom Most Likely Cause Best Fix
Remove PIN button is grayed out Windows Hello-only sign-in is enabled Turn off the Hello-only option and restart
Remove button is missing Newer Windows build, Microsoft account, or policy restriction Check additional sign-in settings and account policy
Settings says some options are managed Work, school, domain, MDM, or Group Policy Disconnect the account only if it is your personal PC
PIN cannot be changed or removed Corrupted Windows Hello PIN storage Reset the NGC folder and set up sign-in again
Section 02

Before You Remove the Windows Hello PIN

A Windows Hello PIN is not the same as your Microsoft account password. It is a local sign-in method stored for this device. Removing the PIN does not delete your Microsoft account password, local account password, files, or user profile.

Good to know

  • Removing the PIN only affects sign-in on this Windows device.
  • You may still be able to sign in with a password if password sign-in is allowed.
  • You can add a new PIN later from Sign-in options.

Be careful

  • Do not remove the PIN on a work or school device without permission.
  • Do not delete Windows Hello files unless you know your password.
  • Do not disable sign-in protection on a laptop used outside your home.
⚠️
Important

Before using advanced fixes, confirm that you can sign in with another method. On the lock screen, click Sign-in options and check whether password sign-in is available. If you use a Microsoft account, make sure you know the account password.

Section 03

Method 1: Turn Off Windows Hello-Only Sign-in to Enable the Remove PIN Button

This is the main fix when Remove is disabled under PIN (Windows Hello). Windows hides or blocks password-based sign-in controls when it is configured to allow only Windows Hello for Microsoft accounts.

Windows 11

  1. Press Win + I to open Settings.
  2. Open Accounts > Sign-in options.
  3. Scroll down to Additional settings.
  4. Turn off For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device.
  5. Restart the computer.
  6. Return to PIN (Windows Hello) and check whether Remove is available.

Windows 10

  1. Press Win + I.
  2. Go to Accounts > Sign-in options.
  3. Find Require Windows Hello sign-in for Microsoft accounts.
  4. Switch the option to Off.
  5. Restart Windows and check the PIN removal button again.
💡
If the switch is missing

The exact text can differ between Windows 10 and Windows 11 builds. Look for a setting in the same area that mentions Windows Hello sign-in, Microsoft accounts, or improved security.

Section 04

Method 2: Remove the PIN from Windows Sign-in Options

After disabling Hello-only sign-in, use the normal Windows settings page to remove the PIN. This is the safest method because Windows verifies the account before deleting the sign-in method.

  1. Open Settings.
  2. Go to Accounts > Sign-in options.
  3. Expand PIN (Windows Hello).
  4. Click Remove.
  5. Confirm the removal when Windows asks.
  6. Enter your Microsoft account password or local account password.
  7. Sign out or restart and check the sign-in screen.
Tip: Use text-mark for short interface labels such as Remove, Sign-in options, and PIN (Windows Hello). Use code only for commands, paths, Registry values, and technical names that must be copied exactly.
Section 05

Method 3: Check Passwordless Microsoft Account Settings

If your Microsoft account is configured as passwordless, Windows may continue to push Windows Hello as the primary sign-in method. In this case, the local Windows setting may not be enough until password-based sign-in is available again.

  1. Open your Microsoft account security settings in a browser.
  2. Check whether the account is using passwordless sign-in.
  3. If necessary, re-enable password sign-in for the Microsoft account.
  4. Restart Windows.
  5. Open Settings > Accounts > Sign-in options.
  6. Try to remove PIN (Windows Hello) again.
⚠️
Account warning

Do not change Microsoft account security settings casually. Make sure you have current recovery information, access to your email, and a working authenticator or backup verification method before changing passwordless sign-in.

Section 06

Method 4: Check Work, School, or Organization Policies

If Windows displays Some of these settings are managed by your organization, the disabled PIN removal button may be intentional. Domain, Azure AD, Microsoft Entra ID, Intune, MDM, and Group Policy can require Windows Hello for Business or block weaker sign-in methods.

  1. Open Settings > Accounts.
  2. Open Access work or school.
  3. Check whether a work or school account is connected.
  4. If this is a company or school PC, contact the administrator instead of bypassing the policy.
  5. If this is your personal PC and the account is no longer needed, select it and choose Disconnect.
  6. Restart Windows and check Sign-in options again.
⛔
Do not bypass company policy

If the device belongs to an employer, school, or organization, do not remove management accounts or change security policies. You may lose access to work resources or violate the device policy.

Section 07

Method 5: Reset the PIN by Clearing the NGC Folder

If the PIN settings page is broken, the Remove button does not work, or Windows Hello reports that the PIN is unavailable, the local PIN store may be corrupted. The advanced fix is to clear the Windows Hello NGC folder and set up sign-in again.

⚠️
Advanced method

Use this only on your own PC and only when you know another working sign-in method. Clearing the NGC folder forces Windows to rebuild Windows Hello PIN data.

Open the NGC folder location

📁 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc

Take ownership from an elevated Command Prompt

Right-click Command Prompt and choose Run as administrator, then run:

ADMIN COMMAND PROMPTtakeown /f "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc" /r /d y
icacls "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc" /grant administrators:F /t

Clear the folder

  1. Open the Ngc folder in File Explorer.
  2. Delete the contents of the folder. If Windows blocks a file, restart and try again.
  3. Restart the PC.
  4. Open Settings > Accounts > Sign-in options.
  5. Add a new PIN or leave Windows Hello PIN unconfigured if password sign-in is available.
Section 08

Method 6: Check Registry and Group Policy Settings That Force Windows Hello

On Windows 10 Pro, Windows 11 Pro, Enterprise, and Education editions, policies can enforce or disable Windows Hello options. On Home editions, similar restrictions may appear through Registry values or device management.

Policy check

Local Group Policy Editor

Open gpedit.msc and check Windows Hello for Business policies under computer and user administrative templates.

Pro / Enterprise
Registry check

Policy Registry Keys

Check policy values only if you are comfortable with Registry editing. Export keys before changing anything.

Advanced
Admin check

Managed Device

If the PC is joined to work, school, domain, or MDM management, ask the administrator to confirm the intended policy.

Recommended

Useful policy locations to check

GROUP POLICY PATHSComputer Configuration\Administrative Templates\System\Logon
Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business
User Configuration\Administrative Templates\System\Logon

Useful Registry areas to review

REGISTRY PATHSHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
⛔
Registry caution

Do not delete random policy keys. Some values may be required by security software, device management, BitLocker, or organization compliance. Export a backup before editing and change only values you understand.

Section 09

FAQ: Remove PIN Button Not Active in Windows 10 and Windows 11

Q Why is the Remove PIN button grayed out in Windows 11?⌄

The most common reason is that Windows Hello-only sign-in is enabled for Microsoft accounts. Open Settings > Accounts > Sign-in options, turn off the Hello-only security option, restart, and try again.

Q Does removing the PIN remove my Microsoft account password?⌄

No. The PIN is a device-specific Windows Hello sign-in method. Your Microsoft account password remains attached to your Microsoft account unless you change it separately in Microsoft account security settings.

Q Can I remove the PIN on a work or school computer?⌄

Only if the organization allows it. If Windows says the setting is managed by your organization, the PIN may be required by policy. Contact the administrator before changing account or security settings.

Q What should I do if the Remove button is completely missing?⌄

First turn off Windows Hello-only sign-in, restart, and reopen Sign-in options. If the button is still missing, check work or school account management, passwordless Microsoft account settings, and Windows Hello for Business policies.

Q Is deleting the NGC folder safe?⌄

It is an advanced repair step, not the first fix. It is usually safe on your own PC if you know your account password and have another way to sign in. Do not use it to bypass restrictions on a managed device.

Q Can I use Windows without a PIN?⌄

Yes, on a personal PC, if Windows allows password sign-in or another sign-in method. However, Windows Hello PIN is generally safer than a weak password because it is tied to the local device.

Conclusion

If the Remove PIN button is grayed out in Windows 10 or Windows 11, start with the simplest fix: turn off Windows Hello-only sign-in for Microsoft accounts, restart, and then remove the PIN from Settings > Accounts > Sign-in options. If the setting is still blocked, check whether the PC is managed by an organization, whether your Microsoft account is passwordless, or whether the local Windows Hello PIN store needs to be rebuilt.