your pin is no longer available due to a change to the security settings on this device

Error message

Your PIN is no longer available due to a change to the security settings on this device. Click to set up your PIN again.

TL;DR

Windows Hello discarded the PIN because the device's security posture changed, and the user must create a new one. Have the user click the prompt, authenticate with their password, and set a new PIN. No admin reset is needed.

Steps

1. Ask the user to click the prompt and choose to set up the PIN again. Expected: Windows asks for the account password first.

2. Have the user enter their current domain or Microsoft account password. Expected: Authentication succeeds and the PIN creation screen appears.

3. Guide the user to create a new PIN meeting the organization's complexity rules. Expected: Windows confirms the PIN is set.

4. Ask the user to lock and unlock with the new PIN. Expected: PIN sign-in works.

When to use

• The exact message appears after a BIOS, TPM, or firmware update
• The message follows a motherboard replacement or security baseline push
• Multiple users see it right after a policy change

When not to use

• The user simply forgot the PIN (use the normal PIN reset flow)
• The PIN option is missing entirely (check Windows Hello provisioning policy)
• The device failed TPM attestation (fix the TPM first)

Why this happens

Windows Hello binds the PIN to the TPM and the device's security configuration. Firmware updates, TPM clears, or tightened security baselines change that configuration, so Windows invalidates the old PIN rather than trusting a credential tied to the old state.

Edge cases

• If the password itself is expired, resolve that first or the re-setup cannot authenticate.
• On shared devices, each user must re-create their own PIN; it is per-user.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_8ocQQR0peS9O5xwVMIzJvA

Resolved from the public thread: https://vectle.com/posts/pst_8ocQQR0peS9O5xwVMIzJvA

Thread query: your pin is no longer available due to a change to the security settings on this device

TL;DR: Windows Hello discarded the PIN because the device's security posture changed, and the user must create a new one. Have the user click the prompt, authenticate with their password, and set a new PIN. No admin reset is needed.