The Hello PIN on the PC and a Microsoft Account passkey are related but separate. The PIN that unlocks Windows is a Windows Hello credential stored on the device; the passkey used on the Microsoft Account sign-in page is a web authentication credential that must be created and stored as a passkey for the account. The error messages indicate that the existing passkey for the Microsoft Account is no longer valid and that the attempt to create a new one is failing.
From the documented behavior, when a passkey is not found or is no longer valid, it is typically because the passkey has been deleted or is no longer associated correctly with the account. The recommended remediation is:
- Remove any stale or invalid passkeys:
- Open the authenticator app (if used) on the mobile device and delete any passkeys that no longer apply to the Microsoft Account.
- In the Microsoft Account security settings, remove any old passkeys listed under ways to sign in.
- Set up a new passkey from scratch:
- Sign in to the Microsoft account Advanced Security Options page.
- Select Add a new way to sign in or verify.
- Choose Face, Fingerprint, PIN, or Security Key.
- Follow the prompts so the device can open the security window and register a new passkey.
If a new device has been introduced or the environment changed in the last six months, a new passkey may be required for the current device, and any old passkeys can then be removed after the new one is created.
If the Windows Hello PIN itself is problematic (for example, if the PIN setup or verification is failing on the device), use the Windows Hello troubleshooting steps:
- If prompted to create a PIN again or errors occur during PIN creation, sign out and sign back in, then attempt to create or reset the PIN again.
- If specific Windows Hello error codes appear during PIN creation, apply the corresponding mitigations (for example, sign out/in again, check network and credentials, or rejoin the device to Microsoft Entra ID if applicable).
If the passkey creation error persists across multiple browsers and after removing old passkeys, the next step is to rely on password sign-in temporarily and contact Microsoft support, as further investigation of the account’s authentication configuration may be required.
References: