PIN may become unusable or password may be lost after Windows Update

Windows Update is a tool to keep your Windows security up to date, but after updating, some users have reported issues such as being unable to sign in with a PIN or losing saved passwords (credentials).

In this article, we will delve into the specifics of this phenomenon, its technical background, and the measures we should take to address it.

Specific phenomena that occur

After applying Windows Update and restarting your PC, you may experience the following symptoms:

• Windows Hello PIN no longer works
  • On the sign-in screen,Something went wrong and your PIN cannot be used. Click to set your PIN again." error message is displayed.
• Saved credentials disappear
  • Passwords for websites and apps saved in Credential Manager will disappear and you will have to enter them manually each time.

Why does this happen? Explaining the cause and how to deal with it

Cause

To put it simply, the problem was caused by two important security updates being released at the same time.

This may be a bit technical, but to make it easier to understand, let's use the example of a safe and a password.

• Safe (TPM/VSM)Your PIN and passwords are stored in a highly secure safe protected by a security chip called a TPM inside your PC.
• Password (PCR value): This safe can only be opened with a number of "secret words" to verify that your PC is in good working order.

This "password" reflects various states of the PC. The two that are related to this issue are as follows:

1. Password A: Security rule status This is "Secure Boot DBX", which is a program to block dangerous programs.Banned ListWhen this list is updated by Windows Update, the password A will change.
2. Password B: PC base condition This is the most basic program on a PC. BIOS/UEFI firmwareIf the BIOS is updated, the secret word B will change.

Usually, these secret words are updated one by one so that the safe can be opened without any problems.

However, when you perform a Windows Update, the BIOS update provided by the PC manufacturer (changing password B) and the DBX update provided by Microsoft (changing password A) may be performed at the same time.

Then, the security system that guards the safe responds, "Multiple passwords have been changed at once! This is a dangerous sign that someone has forced modifications or that you are under attack!" And to protect your information,Lock the safe completely

This is the true nature of the phenomenon that occurs when PIN or password information cannot be retrieved and appears as "unusable" or "disappeared."

Solution: If you encounter a problem

Unfortunately, once this happens, there is no easy way to unlock the safe.

The solution is to "reset your PIN and credentials."

The reason why resetting is necessary is that when this occurs, the "key" that encrypts the password is intentionally discarded by the security function. The encrypted password data itself remains on the PC, but since the key is lost, it can never be restored.

This requires the user to manually enter the password again and have the system generate new password data and a new encryption key.

• Reset PINIf an error message appears on the sign-in screen, click "Sign-in options" and sign in with your password. Then, go to "Settings" > "Accounts" > "Sign-in options" and delete your PIN, then set it again.
• Re-enter credentials: If you lose your passwords for websites or apps, you'll need to manually re-enter them and save them in your browser or app.

Are there any preventative measures or workarounds?

So, is there a way to prevent this problem from happening?

Automatic prevention measures

Unfortunately, as of October 2025, the Windows OS does not support "Secure Boot DBX updates" and "BIOS/UEFI firmware updates" at the same time.There is no automatic prevention.

Microsoft is aware of this issue and has provided feedback to the development team, so it is possible that it will be improved in a future Windows Update.

[Advanced] How to manually avoid simultaneous updates

If you're a PC expert, here are some manual steps you can take to potentially work around the issue:

this is,Detect signs of "Secure Boot DBX update (change of password A)" ​​in advance and avoid "BIOS update (change of password B)" at that time.That's the idea.

When a DBX update is applied, a record will be placed in the system event log.

▼How to check the event log

1. Start buttonRight-click and click Event Viewer.
2. From the tree on the left, select "Windows Logs" > "System".
3. In the central list, look for the following information:

• Log Name: System
• Source: TPM-WMI
• Event ID: 1034
• level: 情报
• Description includes "Secure Boot Dbx Update successfully applied"

If you find this log, it is a sign that password A (security rules) will change the next time you reboot.

While this sign is displayed, avoid updating the BIOS/UEFI firmware (changing password B) using Windows Update's "Optional Updates" option.

Therefore, you can prevent the issue by restarting your PC first to allow the DBX update to be fully applied, and then updating the BIOS again.

note: The Secure Boot DBX was recently updated with KB5065789, which was released in preview on September 29, 2025. Therefore, even if you don't currently have KB5065789 installed, it will be automatically updated with the next monthly update.

Additional information: What to do if you don't see the option to sign in with your Microsoft account password

If you see the message "There was a problem and your PIN can't be used. Click to set your PIN again" after starting Windows 11, you can no longer sign in using Windows Hello (PIN or biometric authentication), and the option to sign in with your Microsoft account password doesn't appear, the following method may resolve the issue.

Step1. Create a Windows 11 installation USB memory stick

Please refer to the following page to create a USB memory stick for installing Windows 11.

How to Use the Windows 11 Media Creation Tool | Error Troubleshooting

*If you do not have any other user accounts (administrators) that can sign in, please borrow a friend or family member's PC and create one.

Step2. Boot from USB memory

Connect the USB memory stick you created to the problematic PC, turn on the PC, and immediately press a specific key (e.g., F12, ESC, F2, etc., depending on the manufacturer) to bring up the boot menu, select "USB Drive" or "UEFI: (USB memory stick name)" or similar to boot from the USB.

reference:Boot your PC from the installation media

Step3. Select "Repair your PC"

1. When the Windows 11 setup screen (language selection) appears, click "Next".

2. Click "Next" on the keyboard selection screen in the same way.

3. On the Setup Options screen, click Repair your PC.

4. Select "Microsoft IME" as the keyboard layout.

Step 4. Open Command Prompt

5. When "Choose an option" appears, select "Troubleshoot".

6. The "Advanced Options" will appear, so select "Command Prompt".

7. If device encryption or BitLocker drive encryption is enabled, you will be asked to enter the recovery key. Enter the recovery key to disable device encryption.

How to find your recovery key from your Microsoft account

Step 5. Open Registry Editor

Please follow the steps carefully.

If you operate the registry incorrectly, it may cause problems such as the system being unable to start. Please make a backup in advance using system restore or similar, and proceed at your own risk.

• How to create and restore a system restore point
• How to open and back up the Registry Editor
• Windows 11/10 Registry Basics: Concept, How to Open, and Internal Structure
• How to Take Ownership and Change Permissions in Windows 11 Registry
  

Acronis True Image 2025 (perpetual version) 1PC

To avoid panicking if your PC suddenly breaks down, it's a good idea to have a standard backup software to protect your important photos and data.

View on Amazon

Pochip

8.Then, the command prompt will appear,regeditand press Enter.

Step 6. Prepare to change the registry values ​​for your current version of Windows 11

Without this step, you will not be able to change the registry value in your current version of Windows 11.

9. The Registry Editor will open.HKEY_LOCAL_MACHINEWith the " key selected, select "File" > "Loading Hive…"Click.

10.The "File Location" dialog box will open, so locate the drive on your PC where Windows is installed.

*The C drive may be replaced with the D drive, etc. Please check the contents of the folder to determine this.

11. Once you find it, open the drive where Windows is installed > Windows > System32 > config folder.

12. 「SOFTWARE" (extensionSelect the file named "Not Available" and click "Open."

13. You will be asked for the "Key Name", so enter "SOFTWARE2" and click OK.

Step 7. Modify Registry Values

14. Open the following key:

HKEY_LOCAL_MACHINE\SOFTWARE2\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device

15. Right-click on "DevicepasswordLessBuildVersion" in the right column and click "Modify".

16. Change the Value data to "0" and click OK.

17. Close the Registry Editor with the × button.

18. Close the command prompt with the × button.

19. Click Continue.

If BitLocker Drive Encryption is enabled (even if you just disabled it), Remove the USB memory and click "Continue"If you click "Continue" without removing the drive, the "BitLocker Recovery" screen may appear.

The reason given is "Your Secure Boot policy changed unexpectedly and BitLocker requires a recovery key to unlock your drive."

If BitLocker recovery appears,

1. Press the ESC key once.

2. Remove the Windows 11 installation USB memory stick.

3. Click "Skip this drive" at the bottom.

4. Click Continue.

20.Then, the sign-in screen will open.Forgot your PIN?" under "Sign-in options" will be displayed, so click it.

21.Two icons will appear under "Sign-in options".Select the right sideYou can then sign in with your Microsoft account password.

Summary

The issue of PINs and passwords not working after a Windows Update is not a PC malfunction, but the result of multiple important security updates being performed at the same time.The system overreacted to protect user informationIt can be said.

Microsoft is already aware of this issue, so it may be fixed in the future.

Just in case, make a full backup of your current state first.I recommend that.

If you encounter this issue, it's proof that your PC's security features are working properly. Don't panic; reset your PIN or password to maintain a secure PC environment.

• [Windows 11] Back up your entire OS for free! Completely restore your PC with your own "custom installation media"
• Reasons why you can't sign in even after entering your PIN on the Windows 11 sign-in screen and how to fix it
• [Warning] BIOS manipulation can make your PC unbootable? Three measures to prepare for Secure Boot updates

Acronis True Image 2025 (perpetual version) 1PC

To avoid panicking if your PC suddenly breaks down, it's a good idea to have a standard backup software to protect your important photos and data.

View on Amazon

Pochip