If Windows says “Your PIN isn’t available,” do not jump straight to a factory reset or Windows reinstall. Your Windows Hello PIN is different from your Microsoft account password, and the correct recovery path depends on whether the PC uses a Microsoft account, a local account, or a work or school account.[1]
Reporting cutoff: Microsoft’s support guidance was rechecked at 1:25 p.m. EDT (17:25 UTC) on October 12, 2026.
The costly mistake to avoid
A PIN failure is a sign-in problem, not proof that Windows or the drive must be erased. If the PC also asks for a 48-digit BitLocker recovery key, stop and locate the matching key before changing firmware settings, clearing security hardware, resetting the PC, or reinstalling Windows. Microsoft says it cannot retrieve or recreate a lost BitLocker recovery key, and resetting a device when the key cannot be found removes its files.[3]
Who this guide is for
- Affected: Windows 10 or Windows 11 users who see a PIN error, forgot a PIN, can use a password but not Windows Hello, or lost face/fingerprint sign-in after an update or hardware change.
- Also affected: small businesses with a locked employee PC, especially when nobody has documented whether the device uses a personal Microsoft account, a local account, or an organization-managed identity.
- Not the same problem: a “No boot device,” blank screen before the sign-in page, temporary-profile warning after sign-in, or BitLocker recovery screen needs a different diagnostic path.
Before you touch anything: identify the screen and account
- Photograph the exact message without including a password, PIN, recovery key, email address, or other private data in anything you send.
- Confirm that you are at the Windows sign-in screen. If the screen says BitLocker and shows a recovery-key ID, use the BitLocker section below instead.
- Select the correct user account if more than one appears in the lower-left corner.
- Determine the account type. Ask the owner or administrator whether it is a Microsoft account, local account, or work or school account; do not guess from the name shown.
The safe recovery ladder
Restart once—do not power-cycle repeatedly
Use Power > Restart from the sign-in screen. Microsoft lists a restart as an early sign-in troubleshooting step because it can clear a temporary system error.[2] If the machine is installing an update, let it finish before continuing.
Try another sign-in method
Select Sign-in options. Depending on the PC’s configuration, Windows may offer a password, face recognition, fingerprint, security key, or PIN; Microsoft notes that available choices vary by device configuration.[4] Choose the password icon if you know the account password. Do not type a familiar PIN into a password field.
If it is a Microsoft account, use “I forgot my PIN”
When I forgot my PIN appears below the PIN box, select it, verify the Microsoft account, and create a new PIN. Microsoft says that sign-in-screen PIN reset option is available for Microsoft accounts, not local accounts.[1]
If the option is missing but the password works, sign in with the password, then go to Settings > Accounts > Sign-in options > PIN (Windows Hello) and use the supported change or reset path.[1]
If it is a local account, recover the password—not the Microsoft account
A local account does not get the Microsoft-account PIN-reset link. Microsoft’s supported path is to choose the password entry option and use Reset password, then answer the security questions created for that local account; a previously created password-reset disk is another supported option.[1] If neither path exists, stop. Do not use an unknown third-party “password bypass” tool.
For a work or school PC, involve the administrator
Organization-managed devices may apply sign-in policies, hold the BitLocker key, or require an administrator-led recovery. Practical guidance: contact the organization’s IT administrator before removing the account, clearing the TPM, changing Secure Boot, or disconnecting device management. Microsoft notes that BitLocker recovery can be triggered by a hardware change and that a managed device’s recovery key may be held by the organization.[3]
Use Safe Mode only if you know the password
Safe Mode is useful for diagnosis, but it is not a PIN workaround. Microsoft states that Safe Mode sign-in requires the Microsoft-account or local-account password because PIN and biometric options are unavailable there.[2] Do not enter Safe Mode first if nobody knows the password.
If BitLocker appears instead of the Windows sign-in screen
Record the first eight digits of the recovery-key ID, then look for the matching key from another device. Microsoft points personal Microsoft-account users to aka.ms/myrecoverykey; work or school keys may be stored with the organization, and managed-device users may need their IT department.[3]
Stop condition: if the data is not backed up and you cannot find the matching key, do not reset or reinstall. Escalate before accepting data loss. Microsoft’s published fallback says a reset removes the files.[3]
Good moves versus expensive wrong turns
Good
- Photograph the exact screen and account name.
- Restart once and test the documented sign-in options.
- Verify the account type before resetting anything.
- Locate and match a BitLocker key by its key ID.
- Ask the business administrator who owns the device and identity.
Bad
- Typing the PIN repeatedly into the password field.
- Deleting accounts or user-profile folders before copying data.
- Clearing the TPM or changing firmware security settings casually.
- Running an unknown password-bypass utility from a USB drive.
- Resetting or reinstalling while the BitLocker key is missing.
Two realistic examples
Harmless failure: after an update, a home PC rejects its PIN. The owner selects Sign-in options, signs in with the Microsoft-account password, and resets Windows Hello from Settings. No data repair or reinstall was needed.
Costly wrong turn: an office PC shows a BitLocker recovery screen after firmware settings changed. Someone assumes Windows is corrupt and starts a reset without locating the organization’s recovery key. The reset path removes local files that were not in a verified backup. The safer move was to stop, record the key ID, and ask the Microsoft 365 or device administrator to locate the matching key first.[3]
After you regain access
- Confirm important files open and are backed up.
- Verify that the Microsoft-account or local-account password works—not only the PIN.
- Verify that a BitLocker recovery-key backup exists and is accessible. Microsoft says not to store a USB key backup with the computer because a thief could use it to bypass the encryption. It gives the same warning for a printed recovery key.[5]
- For a small business, document device ownership, account type, administrator contact, and recovery-key location without putting passwords or PINs on the sheet.
- Create a second authorized administrator path for business-owned devices so one unavailable person does not block recovery.
Related The IT Guys guides
- No Boot Device Found? Do This Before You Reinstall Windows or Lose Your Files
- Your Windows Desktop Suddenly Looks Empty? Save Your Files Before a Temporary Profile Makes It Worse
- Make a One-Page Tech Emergency Sheet Before Something Breaks
FAQ
Is my Windows PIN the same as my Microsoft password?
No. Microsoft explicitly says the device PIN is different from the Microsoft-account password.[1]
Why is “I forgot my PIN” missing?
At the sign-in screen, Microsoft limits that specific PIN-reset option to Microsoft accounts. For a local account, use the password and supported local-password recovery path.[1]
Will Safe Mode let me use my PIN?
No. Microsoft says PIN and biometric sign-in are unavailable in Safe Mode; you need the account password.[2]
Can Microsoft give me a lost BitLocker key?
No. Microsoft says Support cannot retrieve, provide, or recreate a lost recovery key.[3]
When should I stop and call for help?
Stop when important data is not backed up, BitLocker appears and the matching key is missing, the device belongs to a business, the account owner is unclear, or a reset/reinstall is the next proposed step.
What to do next
Start with one reversible test: select Sign-in options and identify whether Windows offers a password. If the device is business-owned, encrypted, or holding irreplaceable files, stop before reset or reinstall and have The IT Guys trace the account, encryption, and backup path first.