If Windows Hello keeps asking for your PIN after a reboot or app sign-in, check for a policy that forces it, damaged PIN data, or a single app requesting credentials. If you ignore the loop, sign-in can stall, Microsoft account sync can fail, and you may waste time on fixes that miss the source. This guide shows how to spot each case and fix it in order. In this context, the error means Windows is repeatedly requesting a Windows Hello PIN or setup instead of letting you sign in normally.

Windows Hello prompt decision table

Use the prompt’s location and the state of your password sign-in to pick the safest first move. If password sign-in still works, you can usually fix this without deleting account data. If the Remove PIN button is greyed out, policy or corruption may be involved before you keep clicking setup screens.

Where the prompt appears Password sign-in still works? Remove PIN available? Likely cause Recommended next step
At startup or after reboot Yes Usually yes Microsoft account policy or damaged PIN data Check Sign-in options first, then remove and recreate the PIN
Windows Security > Account protection Yes N/A Windows Hello setup warning that can be dismissed Use Dismiss, then reopen Sign-in options
Inside Outlook or another Microsoft app Yes Maybe App-specific Microsoft sign-in request Refresh the app sign-in after fixing Windows Hello
PIN setup loops after an existing PIN Yes No or greyed out Corrupted PIN container or Settings app files Clear the Ngc data after confirming access, or reset Settings

Likely causes

Likely causes
A Windows Hello error screen shows a face icon and message

The loop most often comes from one of three places: a Microsoft account setting that prefers Windows Hello-only sign-in, broken PIN data in the hidden Ngc folder, or a single app such as Outlook asking for Windows Hello credentials. Less often, the Settings app itself is damaged and keeps reopening the same screen.

Say your laptop boots to the desktop, then immediately asks for a PIN even though password sign-in still works. That pattern points away from a lost account and toward a policy or PIN-store problem. If Outlook opens and asks for a Windows Hello prompt while other apps do not, that points to app-specific sign-in, not a broken device-wide PIN.

Why does Windows Hello keep asking you to set up a PIN?

The most common reason is a Microsoft account setting that prefers Windows Hello sign-in on that device, or a damaged PIN registration that keeps forcing setup. Start with the account-side toggle and the Windows Security warning, then remove and recreate the PIN if the option is available. If the prompt still returns, use netplwiz to restore password sign-in. Official steps are to go to Settings > Accounts > Sign in options, then scroll down to mid page under Additional Settings.

  1. Open Settings > Accounts > Sign-in options.
  2. Scroll to Additional settings and find For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device.
  3. Make sure that toggle is turned OFF, then close Settings and restart the computer. (Microsoft Learn)
  4. If the prompt still appears, go back to Sign-in options and remove the PIN, then set it up again.
  5. If Windows still pushes passwordless sign-in, type netplwiz in the search on the taskbar and press enter.
  6. Select your user, check the box if it is not checked, click Apply, then uncheck the box and click Apply again.
  7. On the pop up window, erase the username that's prefilled, enter your full Microsoft email address, type your Microsoft account password, click OK, then click OK again on the netplwiz page and restart the computer.

Windows Security warning

Windows Security can show a warning in Account protection when Windows wants you to finish Hello setup. In some cases, the warning includes a Dismiss action and later shows a green tick after it is cleared. Open Windows Security, go to Account protection, and dismiss the warning before you try the PIN flow again.

  1. Open Windows Security.
  2. Select Account protection.
  3. Click Dismiss if the warning is shown.
  4. Return to Settings > Accounts > Sign-in options.
  5. Retry the PIN setup only after the warning clears.

Is the Ngc folder causing the loop?

Is the Ngc folder causing the loop?
Windows File Explorer shows the Ngc folder highlighted with an arrow

The Ngc folder stores and manages PIN-related information, and corruption there can keep Windows Hello asking for setup again. The path on Windows 11 and Windows 10 is C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc. Treat this as a repair step after you know you can still sign in with your password.

  1. Make sure password sign-in still works before you touch the folder.
  2. Open File Explorer with Win+E.
  3. Go to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft.
  4. If you cannot see the path, show hidden files and folders first.
  5. Open Ngc. If access is blocked, change the folder ownership so you can open it.
  6. Select all files and folders inside Ngc and delete them.
  7. Restart the PC, then return to Settings > Accounts > Sign-in options and create a new PIN.

How do you know when to clear it?

If the Remove PIN button is greyed out, the setup screen returns after a successful PIN entry, or Windows insists that you create a PIN that already exists, the PIN container is a stronger suspect than the account itself. Clearing damaged Ngc data is a repair move, not a first click. Restart after the cleanup so Windows rebuilds the sign-in data cleanly.

Why is Outlook asking for your Windows Hello PIN?

Outlook can trigger the prompt without the whole system being broken. That usually means the app wants Microsoft account credentials again, while Windows Hello still works elsewhere. Fix the device prompt first, then refresh the app sign-in so Outlook stops asking for Hello credentials in a loop.

  1. Finish the Windows Hello fix in Settings > Accounts > Sign-in options first.
  2. Open Outlook and sign out of the Microsoft account if it still prompts for Hello.
  3. Sign back in with the same Microsoft account after the PIN issue is resolved.
  4. If the prompt appears in more than one Microsoft app, treat it as a broader account sign-in problem rather than an Outlook-only issue.
  5. Restart the computer after the account refresh.

When Settings itself is the problem

If the Settings app is damaged, PIN setup and removal screens can loop or fail to load correctly. Use this after the account and Ngc checks, not before them.

  1. Open elevated Windows PowerShell or Command Prompt.
  2. Reset the Settings app from the app itself or from the elevated shell if that is the only route available.
  3. Restart the PC after the reset.
  4. Reopen Settings > Accounts > Sign-in options.
  5. Try the PIN flow again and confirm whether the loop is gone.

Still not working?

Still not working?
Windows settings sign-in options screen with large overlay text

If the loop survives the account toggle, PIN recreation, Ngc cleanup, and Settings reset, switch the Microsoft account to a local account as a workaround. On managed work or school PCs, policy can override local changes, so device policy may need admin help. Advanced Group Policy or Registry changes should be the last step on consumer devices and the first discussion point with IT on managed systems.

  1. Open Settings > Accounts > Your info.
  2. Select Sign in with a local account instead.
  3. Complete the switch, then restart.
  4. If the device is managed, ask whether a policy is forcing Windows Hello-only sign-in.
  5. Only on managed or advanced setups, adjust the Windows Hello prompt through Group Policy or Registry after local fixes fail.

Prevention: after the PIN works again, leave a password sign-in path available unless your organization requires Windows Hello-only access. That gives you a fallback if the PIN store breaks again or an app starts prompting unexpectedly.

Frequently asked questions

Why do I need a windows hello pin?

Windows Hello lets you sign in with face, fingerprint, or PIN, and Microsoft labels it as part of Windows security. On Microsoft accounts, the PIN can be the faster local credential Windows prefers on that device. If the system keeps pushing it, check Settings > Accounts > Sign-in options and the Hello-only toggle first. (Microsoft)

How do I stop Windows from asking for a PIN every time it starts?

Start with Settings > Accounts > Sign-in options, then turn off For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. If the prompt still returns, use netplwiz to restore password sign-in and restart. On some systems, the same loop comes back until both steps are done.

What if the Windows Hello PIN remove button is greyed out?

A greyed-out Remove button usually points to policy or damaged sign-in data. Check the Hello-only toggle in Sign-in options first, then open Windows Security > Account protection and dismiss any warning there. If it still stays greyed out, the Ngc folder or Settings app is the next place to look.

How do I reset Windows Hello when I already have a PIN?

Go to Settings > Accounts > Sign-in options, remove the existing PIN, restart, and create a new one. If Windows keeps reopening the same screen, clear the Ngc folder after confirming password access. That rebuilds the PIN data instead of reusing a possibly damaged entry.

Is deleting the Ngc folder safe?

It is a repair step, not a casual cleanup. The folder stores PIN-related information, so delete its contents only after you confirm you can still sign in with your password. Also expect permission trouble: you may need to change folder ownership before you can open it in C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc.

Will resetting the Settings app fix Windows Hello PIN prompts?

It can, especially when the setup screen loops after an existing PIN or the page will not load correctly. Reset Settings with elevated PowerShell or Command Prompt, then restart and return to Settings > Accounts > Sign-in options to test again.