Windows Hello PIN setup can be completed without a USB security key; the prompt appears only if a security key sign-in method is being configured instead of a normal PIN.
Use one of these approaches:
- Set up a normal Windows Hello PIN (no security key)
- On the sign-in screen, choose the option to sign in with the account password instead of PIN.
- After signing in, go to Start > Settings > Accounts > Sign-in options.
- Under PIN (Windows Hello), choose Set up and follow the instructions. Do not select Security Key in this flow.
- If the flow is stuck on “Security Key”
- On the sign-in or setup page, look for a link such as Sign-in options, Use Windows Hello or security key instead, or Sign in another way and select it.
- Choose Password (or another method like Authenticator app, text, or phone call if already configured) to complete sign-in.
- Then open Settings > Accounts > Sign-in options and configure a PIN under PIN (Windows Hello), not under Security Key.
- If a security key was intentionally added earlier
- Sign in using another method (password, Authenticator app, text, or phone call).
- Go to the Microsoft account page > Security > Advanced security options.
- Under Ways to prove who you are, remove any security key sign-in methods if they are forcing that flow.
Security keys (FIDO2) are optional hardware for sign-in and two-factor verification; they are not required to use a standard Windows Hello PIN. If a security key is not available, always switch to another verification method (password, Authenticator app, text, or phone call) using the Sign in another way or Sign-in options link, then configure the PIN from within Windows after signing in.
References: