[PIN reset | Microsoft Learn](https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/pin-reset?tabs=intune) [[Windows Hello for Business]] provides the capability for users to reset forgotten PINs. There are two forms of PIN reset: - _Destructive PIN reset_: the user's existing PIN and underlying credentials, including any keys or certificates added to their Windows Hello container, are deleted from the client and a new sign in key and PIN are provisioned. Destructive PIN reset is the default option, and doesn't require configuration - _Non-destructive PIN reset_: the user's Windows Hello for Business container and keys are preserved, but the user's PIN that they use to authorize key usage is changed. For nondestructive PIN reset, you must deploy the _Microsoft PIN reset service_ and configure your clients' policy to enable the _PIN recovery_ feature