How to change the PIN length in Windows 10

Windows 10 offers the use of a PIN number as an alternative to classic password entry. This helps reduce the time to access the desktop if the password is too long or complex. However, the standard four-digit size for the PIN number makes us sacrifice a bit of security, unless we make certain adjustments. If you want to know how to change the length of the PIN in Windows 10, you have three options: Group Policy, Registry editing, or directly turning the PIN into a secondary password.

One of the most developed aspects of Windows 10 is security related to sign-in. Redmond enables the creation of two types of profiles in the operating system: One offline and traditional, and the other based on a Microsoft account (for example, Hotmail or Outlook). To this we must add Windows Hello with its biometric registration, the use of an image as a password, dynamic lock for paired devices out of range, and the PIN number. Let's imagine for a moment that you have protected your Microsoft account with a password generated in a password manager like KeePass. The final result combines numbers, uppercase and lowercase letters, spaces, hyphens, and special characters. A nightmare to remember (that's the manager's job), and most of all, to type. There the PIN number shines: Four digits, and we're in. Now... four digits sounds a bit weak, right?.

How to change the PIN length in Windows 10, and make it more complete

If you want to change the PIN length in Windows 10, there are three possible paths. The first one takes us to the Group Policy section, available in Windows 10 Pro versions or higher. We open gpedit.msc, go to Computer Configuration, Administrative Templates, System, and finally to PIN Complexity. There you can modify the minimum and maximum length of the PIN, as long as the values are between 4 and 127. If you are one of those users who makes the numeric keypad catch fire entering digits, this option will please you.

The problem is that this method leaves all Windows 10 Home users isolated, because Microsoft insists on not including Group Policy. That's when the Registry intervenes: Run regedit.exe, and the full path is HKEY_LOCAL_MACHINE - SOFTWARE - Policies - Microsoft - PassportForWork - PINComplexity. If the keys PassportForWork and PINComplexity do not exist, make sure to create them. Inside PINComplexity add two DWORD values: MinimumPINLength and MaximumPINLength. Set the minimum and maximum as decimal numbers, and that will be it (remember to respect uppercase and lowercase).

The third path is to forget the numeric profile of the PIN and turn it into an alternative password. This will allow you to go beyond the typical security of a PIN, without being forced to change the original password. To do this, go to the Settings menu, then Accounts, and then Sign-in Options.

When clicking to activate or change the PIN, add a check to the option Include letters and symbols. Personally I have used this method without incidents, and it is definitively recommended.