Specify Maximum and Minimum PIN Length in Windows 10  

    Specify Maximum and Minimum PIN Length in Windows 10

    Specify Maximum and Minimum PIN Length in Windows 10

    How to Specify a Maximum and Minimum PIN Length in Windows 10
    Published by Category: User Accounts
    20 Sep 2020
    Designer Media Ltd

    How to Specify a Maximum and Minimum PIN Length in Windows 10


    Windows Hello in Windows 10 enables users to sign in to their device using a PIN (Personal Identification Number). You can use this PIN to sign in to Windows, apps, and services.

    One important difference between a password and a Hello PIN is that the PIN is tied to the specific device on which it was set up. That PIN is useless to anyone without that specific hardware. Someone who steals your password can sign in to your account from anywhere, but if they steal your PIN, they'd have to steal your physical device too!

    Even you can't use that PIN anywhere except on that specific device. If you want to sign in on multiple devices, you have to set up Hello on each device.

    Maximum PIN length configures the maximum number of characters allowed for the PIN.

    Minimum PIN length configures the minimum number of characters required for the PIN.

    This tutorial will show you how to specify a maximum and minimum PIN length requirement for users in Windows 10.

    You must be signed in as an administrator to be able to do the steps in this tutorial.

    If you set the Maximum PIN length policy to enabled, users are required to have their PIN length less than or equal to the number of characters you specified.

    If you set this Maximum PIN length policy to disabled or not configured (default), users are required to have their PIN length less than or equal to 127 characters.

    If you set the Minimum PIN length policy to enabled, users are required to have their PIN length greater than or equal to the number of characters you specified.

    If you set this Minimum PIN length policy to disabled or not configured (default), users are required to have their PIN length greater than or equal to 4 characters.

    After you apply this policy, users will be required to change their PIN to meet the new PIN complexity requirements.



    Contents

    • Option One: To Specify a Maximum and Minimum PIN Length using Group Policy
    • Option Two: To Specify a Maximum and Minimum PIN Length using Registry Editor



    EXAMPLE: PIN complexity requirements
    Specify Maximum and Minimum PIN Length in Windows 10-pin_complexity.jpg





    OPTION ONE

    To Specify a Maximum and Minimum PIN Length using Group Policy


    The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Two below.


    1 Open the Local Group Policy Editor.

    2 In the left pane of local group policy editor, navigate to the location below. (see screenshot below)

    Computer Configuration\Administrative Templates\System\PIN Complexity

    Specify Maximum and Minimum PIN Length in Windows 10-min-max_pin_length_gpedit-1.png

    3 Do step 4 (max PIN length) and/or step 5 (min PIN length) below.


     4. To Specify a Maximum PIN Length

    A) In the right pane of PIN Complexity in Local Group Policy Editor, double click/tap on the Maximum PIN length policy to edit it. (see screenshot below step 2)

    B) Select (dot) Enabled, enter a number between 4 to 127 in the Maximum PIN length field under Options, click/tap on OK, and go to step 5 (min PIN length) or step 6 (if finished) below. (see screenshot below)

    Be sure to not enter a number lower than or equal to what you specified for the minimum PIN length. If you do, default values will be used for both the maximum and minimum PIN lengths.

    Not Configured is the default setting.

    Specify Maximum and Minimum PIN Length in Windows 10-min-max_pin_length_gpedit-2.png


     5. To Specify a Minimum PIN Length

    A) In the right pane of PIN Complexity in Local Group Policy Editor, double click/tap on the Minimum PIN length policy to edit it. (see screenshot below step 2)

    B) Select (dot) Enabled, enter a number between 4 to 127 in the Minimum PIN length field under Options, click/tap on OK, and go to step 4 (max PIN length) or step 6 (if finished) below. (see screenshot below)

    Be sure to not enter a number higher than or equal to what you specified for the maximum PIN length. If you do, default values will be used for both the maximum and minimum PIN lengths.

    Not Configured is the default setting.

    Specify Maximum and Minimum PIN Length in Windows 10-min-max_pin_length_gpedit-3.png


    6 Close the local group policy editor.

    7 Users must remove and add their PIN again to apply.






    OPTION TWO

    To Specify a Maximum and Minimum PIN Length using Registry Editor


    1 Press the Win + R keys to open Run, type regedit into Run, and click/tap on OK to open Registry Editor.

    2 Navigate to the key below in the left pane of Registry Editor. (see screenshots below step 4A and step 5A)

    If you do not have the PassportForWork key, then right click or press and hold on the Microsoft key, click/tap on New, click/tap on Key, type PassportForWork, and press Enter.

    If you do not have the PINComplexity key, then right click or press and hold on the PassportForWork key, click/tap on New, click/tap on Key, type PINComplexity, and press Enter.

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity

    3 Do step 4 (max PIN length) and/or step 5 (min PIN length) below.


     4. To Specify a Maximum PIN Length

    A) In the right pane of the PINComplexity key, double click/tap on the MaximumPINLength DWORD to modify it. (see screenshot below)

    If you do not have a MaximumPINLength DWORD, then right click or press and hold on an empty area in the right pane of the PINComplexity key, click/tap on New, click/tap on DWORD (32-bit) Value, type MaximumPINLength, and press Enter.

    Specify Maximum and Minimum PIN Length in Windows 10-max_pin_length-1.png

    B) Select (dot) Decimal, enter a number between 4 to 127, click/tap on OK, and go to step 5 (min PIN length) or step 6 (if finished) below. (see screenshot below)

    Be sure to not enter a number lower than or equal to what you specified for the minimum PIN length. If you do, default values will be used for both the maximum and minimum PIN lengths.

    Deleting the MaximumPINLength DWORD will use its default setting.

    Specify Maximum and Minimum PIN Length in Windows 10-max_pin_length-2.png


     5. To Specify a Minimum PIN Length

    A) In the right pane of the PINComplexity key, double click/tap on the MinimumPINLength DWORD to modify it. (see screenshot below)

    If you do not have a MinimumPINLength DWORD, then right click or press and hold on an empty area in the right pane of the PINComplexity key, click/tap on New, click/tap on DWORD (32-bit) Value, type MinimumPINLength, and press Enter.

    Specify Maximum and Minimum PIN Length in Windows 10-min_pin_length-1.png

    B) Select (dot) Decimal, enter a number between 4 to 127, click/tap on OK, and go to step 4 (max PIN length) or step 6 (if finished) below. (see screenshot below)

    Be sure to not enter a number higher than or equal to what you specified for the maximum PIN length. If you do, default values will be used for both the maximum and minimum PIN lengths.

    Deleting the MinimumPINLength DWORD will use its default setting.

    Specify Maximum and Minimum PIN Length in Windows 10-min_pin_length-2.png


    6 Close the local group policy editor.

    7 Restart the computer to apply.

    8 Users must now remove and add their PIN again to apply.


    That's it,
    Shawn






  1. Posts : 5,478
    2004
       #1

    If you change the minimum or maximum PIN length you need to remove and re-add the PIN. Otherwise the rules before the change still apply.

    Specify Maximum and Minimum PIN Length in Windows 10-capture.png

    For example, if I have a 4 long PIN and change minimum length from 4 to 6 I can still change to another 4 long PIN. Only if the PIN is deleted and a new one added does the 6 minimum take effect.

    I don't know if this is intended or not but is confusing.

    Also on 17134 it is required to check the "Include letters and symbols" box to see the PIN requirements. This looks like a definite bug to me but may be useful to know.

    Specify Maximum and Minimum PIN Length in Windows 10-capture1.png
    Specify Maximum and Minimum PIN Length in Windows 10-capture2.png
    Specify Maximum and Minimum PIN Length in Windows 10-capture3.png
      My Computer


  2. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Hmm, interesting. I could have sworn all you had to do was restart the computer afterwards to enforce the policy the next time the PIN was changed.

    I've updated the tutorial to have users remove and add PIN to apply. It has to be a bug since it doesn't make since that the policy is not enforced when only changing the PIN.
      My Computers


  3. Posts : 1
    Windows
       #3

    This is what I'm seeing as well (I'm on Version 1709, OS Build 16299.431). But how do you delete a PIN and create a new one? I only have the option to Change PIN or "Forgot my PIN"?

    Specify Maximum and Minimum PIN Length in Windows 10-2018-10-15-08_39_29-settings.png
      My Computer


  4. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #4

    Hello Mikael, and welcome to Ten Forums.

    See if you may be able to reset your PIN using Option 1 below, but cancel at step 5 to see if that may remove it for you.

    Reset PIN for your Account in Windows 10 | Windows 10 Tutorials
      My Computers


 

Tutorial Categories

Specify Maximum and Minimum PIN Length in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:36.
Find Us




Windows 10 Forums