Microsoft provided convenience PIN as one of sign-in option in Windows 10. The ‘convenience‘ term used here implies that PIN is easy to remember and is handy to use. We all know that PIN sign-in option is much safer than using traditional password for login.

Well, if you’re on Windows 10 V1607 or later and joined to Active Directory domain, you might not be able to add PIN. When you go to Settings app > Accounts > Sign-in options and try opt to add PIN, the option is dimmed/disabled (refer screenshot below).

FIX Cant Add Sign-in PIN For Windows 10

If you’re also experiencing this issue, the nothing to worry about because this is known problem. Microsoft says, this issue is expected because Windows 10 V1607 or later includes stronger authentication properties for Windows Hello for Business feature. This contradicts with the convenience PIN feature.

Using below mentioned registry manipulation, you can fix this issue.

FIX: Can’t Add Sign-in PIN For Windows 10

Registry Disclaimer: The further steps will involve registry manipulation. Making mistakes while manipulating registry could affect your system adversely. So be careful while editing registry entries and create a System Restore point first.

1. Press W8K + R and put regedit in Run dialog box to open Registry Editor (if you’re not familiar with Registry Editor, then click here). Click OK.

Windows 10 Registry Editor

2. In left pane of Registry Editor window, navigate to following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System

FIX Cant Add Sign-in PIN For Windows 10

3. Now in the right pane of System registry key, right click in blank space, select New > DWORD Value. Name the newly created registry DWORD (REG_DWORD) as AllowDomainPINLogon. Double click on this registry DWORD to modify its Value data:

FIX Cant Add Sign-in PIN For Windows 10

4. Finally, set the Value data to 1 and click OK. Close Registry Editor and reboot to make changes effective.

After restarting your system, you’ll find that you can add sign-in PIN now.

FIX Cant Add Sign-in PIN For Windows 10

Checkout this video to illustrate this method:

FIX via Group Policy: If you fix this issue on multiple machines in your organization/workplace, you can deploy the relevant GPO setting. Configure Turn on convenience PIN sign-in setting at Computer configuration > Administrative templates > System > Logon to Enabled.

Hope this helps!

Read next: PIN not working in Windows 10.

18 Comments

Add your comment

  • Azungu

    I had a varient of thesame issue. When I click on the PIN button and entered my password, nothing happed! After modifying the Registery following yourinstruction and rebooting,all if fin again!

    Thx!!

  • Kapil Arya

    ^^ Glad it worked 😊

  • Nikesh

    It didnt worked
    my laptop even doesnt show the pin login in settings too

  • Kapil Arya

    ^^ What build you are running? Is your system part of organization?

  • Nikesh

    i am using 64bit operating system, x64 based processor windows 10 home

  • Kapil Arya

    ^^ Run winver command and let me know build number or version number. Is your system connected to domain? Also refer this fix: https://www.kapilarya.com/fix-pin-not-working-in-windows-10.

  • Nikesh

    version 1903 (os build 18362.418)

  • Tristan

    Mins keeps saying my “company” wants me to change my PIN. Why though? I’m not even employed. How do I fix this?

  • Kapil Arya

    ^^ Is your system connected to domain or Azure AD? Or if you’ve configured any Group Policy for PIN?

  • Ryan Orila

    Hi Kapil, what happens to the PIN when a computer is joined to a domain??? thanks

  • Kapil Arya

    ^^ Ryan, here is the exact answer you’re looking forward to: docs.microsoft.com/en-us/troubleshoot/windows-client/user-profiles-and-logon/cannot-configure-a-convenience-pin#cause

  • Ryan Orila

    Thanks for the info Kapil. So if my PC is joined in a domain, I just have to follow the Resolution?

    Policy: Turn on convenience PIN sign-in (which was already done before)
    PIN complexity: Manage PIN complexity in the standard way by using policies that are found in the following location:

    Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business \PIN Complexity

    The thing was, I had this working before then after 3 days, the sign-in option for fingerprint and/or PIN just disappeared. Now I can no longer add fingerprint/PIN but the setup buttons are available…

    Thanks again

  • Kapil Arya

    ^^ Ryan, if you want to create PIN on a domain joined system, you must have Turn on convenience PIN sign-in enabled and Windows Hello for Business should be disabled. If both are enabled, you won’t be able to create the PIN.

  • Ryan Orila

    Thanks Kapil. Appreciate it. I shall try this one. I assume that the Windows Hello Fingerprint will also work on this setup? Thanks again.

  • Kapil Arya

    ^^ Ryan, I didn’t tested this setting with Windows Fingerprint so can’t comment on it, but you give it a try 😊

  • Cas Chodzko

    cant edit value name.

  • Kapil Arya

    ^^ Take ownership of registry key: https://www.kapilarya.com/how-to-manually-take-ownership-of-registry-key-in-windows-10.

  • W.

    If the pin doesn’t work and I cannot get into my computer, how do I follow the steps you lay out by getting into the system to make changes? Perhaps we’re talking of different “pin” problems here; the pin doesn’t work, nor does the password; so, …?

  • Leave a Reply

    Your email address will not be published. Required fields are marked *