Windows 11 + makes me reset pin after update, on multiple computers

The repeated “create a PIN again” behavior after updates is typically caused by Windows Hello/TPM state being reset or invalidated, so Windows treats the device as if Windows Hello has not been set up yet.

Based on the available information, use these steps and checks:

1. When prompted after an update, allow Windows to recreate the PIN
   • When the message appears (for example, "Something happened and your PIN isn't available. Click to set up your PIN again"), follow the prompt and create the PIN again. This is the supported way to restore Windows Hello after its keys have been invalidated.
   • If you see errors during PIN creation, refer to the guidance for Windows Hello PIN creation errors and follow the mitigation steps there. For errors not listed, contact Microsoft Support as advised.
2. Re-register Windows Hello sign-in options
   • After signing in with the account password, reconfigure Windows Hello completely:
     • Go to Settings > Accounts > Sign-in options.
     • Under PIN (Windows Hello), remove the existing PIN if present, then set it up again.
     • If using fingerprint on either device, under Fingerprint recognition (Windows Hello):
       • Select Remove to delete existing fingerprints.
       • Select Set up (or Add another) and re-enroll fingerprints, making sure to capture different angles of the finger as recommended.
3. Avoid clearing or resetting the TPM unless necessary
   • Clearing the TPM explicitly removes keys used by Windows Hello. After a TPM clear, Windows Hello PIN and biometrics will no longer work until the PIN is reset.
   • If the TPM has been cleared (manually or as part of firmware/security operations), expect to be asked to set up the PIN again. After that, the behavior should stabilize unless the TPM is cleared repeatedly.
   • If TPM firmware has been updated or cleared as part of troubleshooting, follow the documented guidance to reset the PIN afterward.
4. Be aware of known Windows Hello issues after reset operations
   • Certain Windows builds have known issues where, after a Reset this PC or push-button reset with Keep my files, Windows Hello PIN/face can break and show messages like "Something happened and your PIN isn't available" or "Sorry something went wrong with face setup".
   • These are addressed in later cumulative updates (for example, KB5058411 for the specific out-of-band update mentioned in the documentation). Ensure both devices are fully updated to the latest cumulative update so that any known Windows Hello reset issues are fixed.
5. If the issue persists across updates on both devices
   • Because the same Microsoft account is used and the behavior is mirrored on both machines, and SFC/DISM/CHKDSK are clean, this points to a persistent Windows Hello/TPM state issue rather than general system corruption.
   • If, after fully updating and recreating the PIN and any biometrics, the devices still force PIN recreation after nearly every update, collect any error codes shown during the Create a PIN step and use the Windows Hello PIN error documentation to look up specific mitigations. If the error code is not listed, the documentation explicitly recommends contacting Microsoft Support.

If none of the above stabilizes the behavior and no specific error code guidance applies, the remaining supported path is to work with Microsoft Support for deeper investigation, as repeated post-update PIN re-creation on multiple devices is not expected behavior once Windows Hello and TPM are in a healthy state.

References:

• Troubleshoot problems with Windows Hello on Surface
• Windows Hello common issues and troubleshooting tips
• Windows Hello errors during PIN creation
• Update Your Security Processor (TPM) Firmware
• April 16, 2025—KB5059087 (OS Build 26100.3781) Out-of-band