How to Fix Greyed-Out Remove PIN Option in Windows 11

Windows Hello PIN is one of the most common sign-in methods in Windows 11, offering quick access through a short numeric code. However, many users encounter a frustrating issue where the “Remove” button under Sign-in options is greyed out. This restriction prevents switching back to password login or other authentication methods, which can be problematic when troubleshooting login problems, managing devices, or simply preferring a traditional password.

The good news? There are several proven ways to fix this limitation. This guide walks you through six effective methods to re-enable the PIN removal option, along with troubleshooting tips for managed or domain-joined devices.

Method 1: Disable “Only Allow Windows Hello Sign-In”

Windows 11 can force Microsoft account users to sign in only with Windows Hello, which blocks PIN removal.

Steps:

1- Open Settings with Win + I.

2- Go to Accounts > Sign-in options.

3- Scroll to Additional settings.

4- Toggle “For improved security, only allow Windows Hello sign-in” to Off.

5- Close and reopen Settings, return to PIN (Windows Hello), and click Remove.

6- Enter your password to confirm.

Method 2: Re-Enable Password Sign-In for Local Accounts

If your account doesn’t have a password set, Windows requires one before removing the PIN.

Steps:

1- Go to Settings > Accounts > Sign-in options.

2- Ensure Password sign-in is enabled.

If missing, enable it via Group Policy or the Registry Editor.

3- If your account has no password, set one under Password > Add.

4- Once a password is active, go back to the PIN section and remove it.

Method 3: Turn Off Passwordless Microsoft Account

Passwordless sign-in may prevent PIN removal on Microsoft accounts.

Steps:

1- In Settings > Accounts > Your info, click the Accounts link.

2- Log into account.microsoft.com.

3- Go to Security > Advanced security options.

4- Disable the Passwordless account setting.

5- Restart your PC and retry PIN removal.

Method 4: Use “I Forgot My PIN” as a Workaround

When the “Remove” button stays greyed out, the “I forgot my PIN” option can bypass restrictions.

Steps:

1- Go to Settings > Accounts > Sign-in options > PIN (Windows Hello).

2- Select I forgot my PIN.

3- Authenticate with your Microsoft account.

4- When asked to set a new PIN, leave it blank and Cancel.

5- Your PIN will be removed, leaving only password sign-in.

Method 5: Remove Windows Hello PIN via Command Prompt (Advanced)

For persistent cases, especially on business or domain-joined devices, you can delete Windows Hello containers using the command line.

Steps:

1- Open Command Prompt as the affected user.

2- Run:

certutil.exe -DeleteHelloContainer

3- Sign out with:

logoff.exe

4- After logging back in, the PIN and other Hello credentials should be cleared.

⚠️ Note: This does not remove sign-in methods registered in Azure AD. Admin permissions may be required.

Method 6: Delete the Ngc Folder (PIN Storage)

The Ngc folder stores PIN data. Resetting it forces Windows to remove stored Hello credentials.

Steps:

1- Navigate to: C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC

2- Take ownership of the folder if access is denied.

3- Run this PowerShell command as administrator:

powershell -windowstyle hidden -command "Start-Process cmd -ArgumentList '/s,/c,takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /d y & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t & RD /S /Q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & MD C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc & icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /T /Q /C /RESET' -Verb runAs"

4. Restart your PC and try removing the PIN again.

Additional Tips and Troubleshooting

• On domain-joined or managed devices, policies may enforce PIN usage. Contact your IT admin if options remain blocked.
• Switching from a Microsoft account to a local account can sometimes restore the Remove button.
• If you see “This setting is managed by your administrator”, Group Policy or Registry edits may be required.
• Always ensure a password is set before attempting to remove a PIN.

Conclusion

A greyed-out Remove PIN button in Windows 11 can be frustrating, but it’s usually caused by system policies, passwordless account settings, or missing password configurations.

• For home users, disabling Hello-only sign-in or using the “I forgot my PIN” option often solves the issue.
• For advanced or enterprise users, editing policies, deleting PIN containers, or resetting the Ngc folder provides a reliable fix.

By applying the right method, you can regain control over your sign-in preferences and choose the authentication method that best suits your needs.