author avatar
    Specialist of Customer Service Dept.
Last update by Olivia Brown at 25 October 2026

Summary
This guide provides comprehensive methods to fix the “TPM error: PIN unavailable” issue in Windows 10 by addressing root causes such as BIOS updates, TPM state mismatches, and corrupted Ngc folder data. It outlines a prioritized troubleshooting sequence from password sign-in and PIN recreation to advanced steps like clearing the TPM.



If you see the message “Something happened and your PIN isn’t available” in Windows 10, it usually means Windows Hello has lost trust in the PIN key protected by your TPM. This guide explains how to fix the “TPM error: PIN unavailable” issue in Windows 10 using safe, step-by-step methods: recreating your PIN, checking TPM status, repairing the Ngc folder, disabling Fast Startup, and—only as a last resort—clearing the TPM. Always start with the lowest-risk fix to avoid unnecessary BitLocker recovery prompts or risky BIOS changes.

Why Windows 10 says your PIN isn’t available after a TPM error

Windows 10 may suddenly reject your PIN, often right after a BIOS update, TPM reset, or hardware change. While the PIN itself might still exist, Windows Hello can’t verify it because the TPM’s state no longer matches the stored key. This can be puzzling, especially if the PIN worked just minutes before.
Windows sign-in screen displaying 'Windows Hello PIN is no longer available' error
Key points to understand:
- Symptom: Windows displays “Something happened and your PIN isn’t available.”
- Immediate action: Try signing in with your account password first. This gets you back into Windows so you can repair the PIN.
- Cause: The Windows Hello PIN is tied to the TPM chip. BIOS updates, TPM resets, or hardware changes can break this link.
- Warning: Clearing the TPM may trigger BitLocker recovery. Make sure you have your recovery key ready.

Lowest-risk fixes to try first for a TPM-related PIN unavailable error

Start with the fix that matches your situation. Avoid clearing the TPM unless all other options fail, as it is the most disruptive step.
Trigger / Cause Recommended First Fix Risk Level Notes / Potential Roadblocks

🔧 BIOS / Firmware Update

Sign in with your password and recreate your PIN

🟡 Moderate

This option won't work if the account password is unknown.

🔒 TPM Cleared or Disabled

Check TPM status in tpm.msc or re-enable TPM in BIOS/UEFI

🟠 Elevated

Requires access to BIOS/UEFI settings.

🪟 Windows Update Issue

Recreate your PIN or repair the NGC folder

🟠 Elevated

Repairing the NGC folder typically requires administrator privileges.

⚡ Fast Startup / fTPM Conflict

Disable Fast Startup

🟢 Low

Requires access to Control Panel settings.

Recovery order, from easiest to most advanced:
1. Password sign-in & recreate PIN (Non-technical)
2. tpm.msc check (Intermediate)
3. Ngc folder repair (Intermediate, command-line)
4. Clear TPM (Advanced, last resort, requires BitLocker key)
Reset Forgotten Windows Password to Regain PC Access

Create New Admin Account Instantly create a new local administrator account to regain access and clear PIN status.

Recover the files Recover the deleted files without Windows system.

Transfer the data Transfer the important files of the computer with system.

Multifuctional Data transfer, data recovery, bootable problem recovery can be run without system.

Highly compatible Windows 11/10/8.1/8/7/XP/Vista. UEFI boot.

Remove Login Password Support Windows 11/10/8.1/8/7/XP/Vista. UEFI boot.

Recover the files Recover the deleted files without Windows system.

Transfer the data Transfer the important files of the computer with system.

Free TrialFree TrialNow 2000 people have downloaded!

Step-by-step: check TPM status, restore Windows Hello PIN, and repair the Ngc folder

Work through these steps in order. After each step, restart your PC and check if PIN sign-in works.

1. Sign in with password and recreate the PIN

Always start here. Your account password should still work, even if the PIN is broken.
Password sign-in option on the Windows lock screen
1. On the sign-in screen, select Sign-in options.
2. Choose your Microsoft or local account password and sign in.
3. Open Settings > Accounts > Sign-in options.
4. Under Windows Hello PIN, select Remove.
5. Select Add to create a new PIN.
6. Restart your PC and test the new PIN.

2. Check TPM readiness in tpm.msc

The TPM Management Console shows whether Windows can use the TPM for Windows Hello.
1. Press Win + R.
2. In the Run dialog, type:

tpm.msc

3. Press Enter.
4. Under Status, confirm it says “The TPM is ready for use.”
tpm.msc status
5. If you see “Prepare the TPM”, select it. This is safe and does not delete personal files.
6. Restart if Windows prompts you.

3. Enable TPM in BIOS/UEFI (If disabled)

If tpm.msc reports that no TPM is available, it may be disabled in your system firmware.
1. Restart your PC.
2. When you see the manufacturer’s logo, press your BIOS/UEFI setup key repeatedly (often F2, F10, F12, or Del).
3. Navigate to Security, Advanced, or Trusted Computing.
4. Locate Intel PTT, AMD fTPM, or TPM Security.
TPM status in BIOS
5. Set the option to Enabled.
6. Save and exit, usually by pressing F10.
7. Let Windows start, then check tpm.msc again.

Changing BIOS settings may trigger BitLocker recovery. Have your recovery key ready before adjusting TPM-related settings.

4. Repair the Ngc folder

Corrupted Ngc data can prevent Windows from storing or reading a new PIN. Only delete the contents of the folder, not the folder itself.
File Explorer method:
1. Open File Explorer.
2. Go to:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc

ngc folder
3. If access is denied, right-click the Ngc folder and select Properties.
4. Go to Security > Advanced.
5. Change the owner to your user account or Administrators.
6. Select Replace owner on subcontainers and objects.
Windows Replace owner on subcontainers and objects
7. Open the Ngc folder, select all contents, and delete them.
8. Restart and recreate your PIN.
Windows search results for Command Prompt with Run as administrator option
1. Open Start, type cmd, right-click Command Prompt, and choose Run as administrator.
2. If prompted by User Account Control, select Yes.
3. Run this command to take ownership:

takeown /F "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc" /R /D Y

4. Run this command to grant full control to Administrators:

icacls "C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc" /grant administrators:F /T

5. Close Command Prompt, open the Ngc folder, delete its contents, and restart.
File Explorer showing the NGC folder under Microsoft in Windows

Do not delete the Ngc folder itself—only remove its contents.

5. Check services and disable Fast Startup

Fast Startup can leave TPM or fTPM state inconsistent between restarts. If the Microsoft Passport service is stopped, PIN setup will fail.
1. Press Win + R.
2. Type:

services.msc

3. Press Enter.
4. Find Microsoft Passport or Microsoft Passport Container.
Microsoft Passport service
5. If the service is stopped, right-click it and select Start.
6. Right-click again, select Properties, and set Startup type to Automatic.
7. Open Control Panel > Power Options > Choose what the power buttons do.
8. Select Change settings that are currently unavailable.
9. Uncheck Turn on fast startup.
10. Select Save changes and restart.

6. Clear TPM (Last resort only)

Clearing the TPM removes all TPM-protected keys, including Windows Hello credentials. It won’t delete your files, but can trigger BitLocker recovery.

Important: Make sure you have your BitLocker recovery key before you clear the TPM.

1. If BitLocker is enabled, locate your recovery key in your Microsoft account or a saved location.
2. Open tpm.msc from the Run dialog.
3. On the right, select Clear TPM.
tpm.msc Clear TPM
4. Restart the PC.
5. If prompted by firmware, confirm the clear action.
6. Sign in and recreate your PIN.

How to confirm the TPM/PIN problem is fixed

After following the steps, check the following:
- PIN sign-in works as expected.
- tpm.msc displays “The TPM is ready for use.”
- The new PIN is saved and accepted after a full restart.
- For fTPM issues: Fast Startup remains disabled or firmware has been updated.
- For work or school devices: If Windows Hello for Business still fails, contact your IT department.
Reset Forgotten Windows Password to Regain PC Access

Create New Admin Account Instantly create a new local administrator account to regain access when the original password is lost.

Recover the files Recover the deleted files without Windows system.

Transfer the data Transfer the important files of the computer with system.

Multifuctional Data transfer, data recovery, bootable problem recovery can be run without system.

Highly compatible Windows 11/10/8.1/8/7/XP/Vista. UEFI boot.

Remove Login Password Support Windows 11/10/8.1/8/7/XP/Vista. UEFI boot.

Recover the files Recover the deleted files without Windows system.

Transfer the data Transfer the important files of the computer with system.

Free TrialFree TrialNow 2000 people have downloaded!

FAQ

What do error codes 0x80090011, 0x80090016, and 0x80090027 mean?

These are Windows Hello or TPM key errors. 0x80090011 means Windows can’t find a valid TPM key. 0x80090016 points to a key mismatch or TPM state change. 0x80090027 signals corrupt PIN container data in the Ngc folder. The same solutions apply: recreate the PIN, check tpm.msc, and repair the Ngc folder if needed.

Will clearing the TPM delete my personal files?

No. Clearing the TPM only removes keys stored in the TPM chip, including Windows Hello PIN data. Your documents, photos, and apps remain. However, if BitLocker is enabled, Windows will require the BitLocker recovery key after clearing the TPM.

What if I don’t know my account password?

If you use a Microsoft account, reset your password online from another device. For a local account without a password reset disk, use another administrator account or Windows recovery options to regain access. Do not clear the TPM until you can sign in with a known password or recovery method.
Renee Passnow – Professional Windows Password Remover

Remove Windows Login Password 3 steps for whole password remove process.

Enable/Create Administrator One click for creating new administrator and enable the disabled account.

Widely Use New version supports UEFI boot model, which can be used on more computers, laptops and even surfaces.

Multifuctional Data transfer, data recovery, bootable problem recovery can be run without system.

Highly compatible Windows 11/10/8.1/8/7/XP/Vista.

Remove Login Password Support Windows 11/10/8.1/8/7/XP/Vista.

Enable/Create Administrator One click for creating new administrator and enable the disabled account.

Easy to use No need of any professional knowledge or password reset disk.

Free TrialFree TrialNow 2000 people have downloaded!

User Comments

Page 1

Leave a Comment


Your comment has been submitted and is awaiting moderation.