Windows 10: Enable or Disable PIN Expiration in Windows 10

How to: Enable or Disable PIN Expiration in Windows 10


Information PIN (Personal Identification Number). You can use this PIN to sign in to Windows, apps, and services.

One important difference between a password and a Hello PIN is that the PIN is tied to the specific device on which it was set up. That PIN is useless to anyone without that specific hardware. Someone who steals your password can sign in to your account from anywhere, but if they steal your PIN, they'd have to steal your physical device too!

Even you can't use that PIN anywhere except on that specific device. If you want to sign in on multiple devices, you have to set up Hello on each device.

PIN expiration specifies the period of time (in days) that a PIN can be used before the system requires the user to change it.

This tutorial will show you how to enable or disable a PIN expiration requirement for users in Windows 10.

You must be signed in as an administrator to be able to do the steps in this tutorial.

Contents:

• Option One: To Enable or Disable PIN Expiration using Group Policy
• Option Two: To Enable or Disable PIN Expiration using Registry Editor

OPTION ONE [/i] To Enable or Disable PIN Expiration using Group Policy


Note Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Two below.

1. Open the Local Group Policy Editor.

2. In the left pane of local group policy editor, navigate to the location below. (see screenshot below)
*Arrow Computer Configuration\Administrative Templates\System\PIN Complexity




3. In the right pane of PIN Complexity in Local Group Policy Editor, double click/tap on the Expiration policy to edit it. (see screenshot above)

4. Do step 5 (disable) or step 6 (enable) below for what you would like to do.


5. To Disable PIN Expiration
A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Note: Not Configured is the default setting.

6. To Enable PIN Expiration
A) Select (dot) Enabled, enter a number between 1 and 730 days for when to expire after, click/tap on OK, and go to step 7 below. (see screenshot below)




7. Close the local group policy editor.

8. Restart the computer to apply.





OPTION TWO [/i] To Enable or Disable PIN Expiration using Registry Editor
1. Press the Win+R keys to open Run, type regedit into Run, and click/tap on OK to open Registry Editor.

2. Navigate to the key below in the left pane of Registry Editor. (see screenshot below)


Note If you do not have the PassportForWork key, then right click or press and hold on the Microsoft key, click/tap on New, click/tap on Key, type PassportForWork, and press Enter.

If you do not have the PINComplexity key, then right click or press and hold on the PassportForWork key, click/tap on New, click/tap on Key, type PINComplexity, and press Enter.

*Arrow HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity





3. Do step 4 (enable) and/or step 5 (disable) below.


4. To Enable PIN Expiration
A) In the right pane of the PINComplexity key, double click/tap on the Expiration DWORD to modify it. (see screenshot below step 2)


Note If you do not have a Expiration DWORD, then right click or press and hold on an empty area in the right pane of the PINComplexity key, click/tap on New, click/tap on DWORD (32-bit) Value, type Expiration, and press Enter.

B) Select (dot) Decimal, enter a number between 1 to 730 days for when to expire after, click/tap on OK, and go to step 6 below. (see screenshot below)





5. To Disable PIN Expiration
Note: This is the default setting.
A) In the right pane of the PINComplexity key, right click or press and hold on the Expiration DWORD, and click/tap on Delete. (see screenshot below step 2)

B) Click/tap on Yes to confirm, and go to step 6 below. (see screenshot below)





6. Close the local group policy editor.

7. Restart the computer to apply.

That's it,
Shawn


Related Tutorials

• How to Enable or Disable Password Expiration for Your Microsoft Account
• How to Enable or Disable Password Expiration for Local Accounts in Windows 10
• How to Add a PIN to your Account in Windows 10
• How to Enable or Disable Domain Users to Sign in with PIN to Windows 10
• How to Change the PIN for your Account in Windows 10
• How to Remove PIN from your Account in Windows 10
• How to Reset the PIN for your Account in Windows 10
• How to Enable or Disable PIN Reset at Sign-in in Windows 10
• How to Enable or Disable Require Digits for PIN in Windows 10
• How to Enable or Disable Require Lowercase Letters for PIN in Windows 10
• How to Enable or Disable Require Uppercase Letters for PIN in Windows 10
• How to Enable or Disable Require Special Characters for PIN in Windows 10
• How to Specify a Maximum and Minimum PIN Length in Windows 10
• How to Enable or Disable PIN History in Windows 10

:)

 

Disable Windows 10 Pro PIN complexity rules

From Group Policy Editor, you may enable or disable other policies when creating a PIN. You can also configure them to your preferred option. You may double-click the policy that you want to enable or disable according to your preferences. Here's a description
of each policy that is included in the PIN complexity:

• Require digits
  • Not configured - Users must include a digit in their PIN.
    
  • Enabled - Users must include a digit in their PIN.
    
  • Disabled -Users can not use digits in their PIN.
• Require lowercase letters
  • Not configured - Users can not use lowercase letters in their PIN.
    
  • Enabled - Users must include at least one lowercase letter in their PIN.
    
  • Disabled - Users can not use lowercase letters in their PIN.
    
• Maximum PIN length
  • Not configured - PIN length must be less than or equal to 127.
    
  • Enabled - PIN length must be less than or equal to the number you specify.
    
  • Disabled - PIN length must be less than or equal to 127.
    
• Minimum PIN length
  • Not configured - PIN length must be greater than or equal to 4.
    
  • Enabled - PIN length must be greater than or equal to the number you specify.
    
  • Disabled - PIN length must be greater than or equal to 4.
    
• Expiration
  • Not configured - PIN does not expire.
    
  • Enabled - PIN can be set to expire after any number of days between 1 and 730, or PIN can be set to never expire by setting the policy to 0.
    
  • Disabled - PIN does not expire.
    
• History
  • Not configured - Previous PINs are not stored.
    
  • Enabled - Specify the number of previous PINs that can be associated to a user account that can't be reused.
    
  • Disabled - Previous PINs are not stored.
    
• Require special characters
  • Not configured - Users can not include a special character in their PIN.
    
  • Enabled - Users must include at least one special character in their PIN.
    
  • Disabled - Users can not include a special character in their PIN.
    

• Require uppercase letters
  • Not configured - Users can not include an uppercase letter in their PIN.
    
  • Enabled - Users must include at least one uppercase letter in their PIN.
    
  • Disabled - Users can not include an uppercase letter in their PIN.

After configuring the policy settings, attempt to create your desired PIN that would meet those requirements, this is to check if those policies would work. If the PIN and the policy settings are not working, attempt to create those policy settings and PIN
on another device to see if it is isolated to your device only. If it still persists, kindly send the issue through the
Feedback Hub app. This way, engineers would see this problem and address it. You may follow the steps on this
link on how to send feedback to Microsoft through the
Feedback Hub app. If you are to submit a feedback through the
Feedback Hub app, make sure that you include every detail about the issue so that the engineers would have a better understanding of the issue. Also, make sure to visit your submission frequently for news or updates about what you have submitted.

If you have further questions, feel free to ask us.

 

Windows 10 Password Expiration - Enable or Disable

The procedure to disable password expiration listed in prior posts does not work in Windows 10.

The Local User Groups Manager reports:

"This snapin may not be used with this edition of Windows 10.

To manage user accounts for this computer, use the User

Accounts tool in the Control Panel"

But that Windows 10 Control Panel tool does not have an option to Disable the password expiration

I'm using Windows 10 Home - up to date of this post

 

Disable Windows 10 Pro PIN complexity rules

@David_Haz, you did not address the actual problem that was expressed by the original poster. I have a hard time believing that you even read the question before Copying and Pasting a generic answer in.

In the original post, he says he went where you are describing. He says he turned ALL of them off so there were no requirements set from group policy.

His concern is that MICROSOFT is forcing him to have a non sequential and not repeating pattern for his pin, and that there is no way of turning off that requirement.

This problem is not something isolated to a single machine, it is not related to a single setting. This is a "Feature" that MICROSOFT added in one of their recent "updates" to force their will on the customers. Kind of a "MICROSOFT knows best" attitude.
So, telling him to submit a bug to the feedback app isn't viable since Microsoft "Decided for us" that we had to have this.

@David_Haz. My reccomendation to you, and the rest of the Windows Answers team is that, If you don't have an answer to the OP's original question, Don't post an answer, or at least post a reply that says there is no fix at this time. That way you can show
come competance and make the users feel like we aren't talking to a computer, but to an actual human.

And for God Sakes, Don't blindly mark your answer as "Correct" if you don't even address the original question. I mean, sure, the information is good for some people, but it doesn't answer the actual question of what was asked. I never feel confidant in
comming to answers.microsoft.com. For the one reason of your windows team doesn't read the user's questions, don't answer their questions, and mark their own answers as correct when you never actually addressed the problem.

IMHO: This entire website is COMPLETELY USELESS unless the question is something so simple as "how do i send an email"... it's almost like there is no technical experience at all on this "answers" site.

 

Windows 10 Password Expiration - Enable or Disable

The password expiration is one of properties for user accounts on Windows. This property is disabled by default on Windows 10/8/7. If the password expiration is enabled, once the deadline is up, Windows will alert that your
password has expired and must be changed. You can fix this problem, click link to see the solution.

Here this guide will show you 2 ways to disable password expiration.

Option 1: disable password expiration in Local User and Group

Step 1: Open Local User and Group.

Press Win + R to open Run dialog, type in
lusrmgr.msc, then click OK.





Step 2: Click on User folder, double-click on a user account that you want to disable its password expiration.





Step 3: In Properties dialog, select the General tab, check the
Password never expires checkbox, then click Apply followed by
OK.





Option 2: disable password expiration in Command Prompt

Step 1: Open and run Command Prompt as an administrator.

To do: Press Windows logo key+ X, and hit A
key on keyboard.





Step 2: In the opening window, type in wmic UserAccount where Name='username' set PasswordExpires=False, and press
Enter key to execute this command.

Tip: Replace the username with your user name.

False = Disabled

True = Enabled





When it shows Property(s) update successful, the user’s password expiration is disabled.

Step 3: If you want to disable password expiration for all user accounts at once, type
wmic UserAccount set PasswordExpires=False, and press the
Enter key.





When finished, close the Command Prompt window.

 

Disable Sign In PIN

Hello,

You can also disable PIN using registry. Try these steps:

1. Open Registry Editor.
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System.
3. Set AllowDomainPINLogon to 0.
4. Close Registry Editor and reboot your system.

Hope this helps!