Alex Ruben
How To Resolve PIN Error 0x80280013 on Windows 11/10 Easily
If you’re seeing that pesky PIN error code 0x80280013 on your Windows machine, then yeah—you’re not alone. It’s often tied to issues with the Trusted Platform Module (TPM) or corruption somewhere in the sign-in process. Usually, it just refuses to let you set or update your PIN, which is super frustrating because Windows security shouldn’t be this complicated. Luckily, there are a few tricks that might get this sorted without wiping everything and reinstalling. This isn’t always a clean fix, but sometimes a combination of these steps does the trick, or at least points in the right direction.
By following through, you’ll probably end up with a working PIN again or at least understand where the hiccup is. Fair warning, sometimes one fix works on one machine but not another, so it might be worth trying a few steps if one doesn’t do it right away.
How to Fix PIN Error 0x80280013 in Windows 10/11
Verify TPM Status and Adjust BIOS Settings
This is usually the first place to start because if Windows thinks your TPM isn’t enabled or functioning, PIN setup can get stuck. The tool tpm.msc is your friend here. Open the Run dialog (Windows + R), type tpm.msc, and see what it says. If it shows “TPM is not ready” or “not found”, then you need to check BIOS/UEFI settings—because Windows relies on it for security.
- Reboot your PC and enter BIOS/UEFI (usually by pressing F2, Del, or Esc during startup).
- Look for settings under Security or Advanced. Find options like TPM, Intel PTT, or Security Chip and make sure they are enabled.
- Save changes, exit, and restart. Once back in Windows, run
tpm.mscagain to confirm it’s now ready.
It’s kind of weird, but sometimes TPM settings just get flipped off after BIOS updates or even regular restarts. If the TPM was disabled, Windows might refuse to allow PIN changes, so fixing this often solves the primary problem.
Reset the NGC Folder (Your PIN Settings Cache)
This is a favorite workaround for a lot of folks because the NGC folder stores your PIN info, and sometimes it just gets corrupted. Deleting its contents refreshes that cache, making Windows forget about the old messed-up data.
- Navigate to
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC– this is hidden normally, so you might need to enable “Show hidden files” from the View tab in File Explorer or change folder options. - If you run into access denied, that’s where taking ownership comes in:
- Right-click the NGC folder, go to Properties.
- Go to the Security tab, click Advanced.
- Change the owner to your user account, apply, then try deleting again.
- Once you clear out the folder, restart your PC and test setting the PIN again.
Fingers crossed, this clears corrupted PIN data. Not always guaranteed, but definitely worth a shot.
Use PowerShell to Reset Sign-In Components
If the PIN button still refuses to cooperate, something might be broken in Windows’ sign-in app package. Here’s how to fix it with PowerShell:
- Right-click Start and pick Windows Terminal (Admin) or PowerShell (Admin).
- Paste this command:
Get-AppxPackage Microsoft.AccountsControl | Reset-AppxPackage - Hit Enter and wait for it to do its thing. Might take a minute.
- Reboot and then try to add your PIN again.
Sometimes, this resets the Windows account app and clears out weird glitches in the sign-in process. Not sure why it works sometimes, but hey—it does.
Check Windows Services Related to Sign-In & Security
Some services have to be running for PIN setup to work properly. It’s worth double-checking:
- Open the Run dialog (Windows + R), type
services.msc, and press Enter. - Find these services and make sure they’re set to Automatic and running:
- Credential Manager
- Windows Biometric Service
- TPM Base Services
- If any are stopped, right-click and choose Start.
Usually, these are fine, but occasionally they get disabled or stopped, and that messes with PIN setup. Reboot after fixing service states to double-check.
Create a New User Profile (Worst-Case Scenario)
If everything else fails, maybe your user profile is borked. It’s kinda a last resort, but creating a new local account might save the day:
- Go to Settings > Accounts > Family & other users.
- Click Add account.
- Choose “I don’t have this person’s sign-in info” > “Add a user without a Microsoft account.”
- Set up a new username and password.
- Log into the new account, then try setting a PIN there. If that works, it suggests profile corruption on the old one.
It’s kind of a pain, but sometimes copying over your data from the old profile to a fresh one is easier than fixing a corrupted profile directly.
Extra Tips & Common Issues
While messing around, ensure your Windows is up to date—sometimes updates patch weird bugs that cause issues like this. Also, watch out for third-party security apps or tweaking tools that might interfere with Windows’ native sign-in processes.
And, always back up your critical files before jumping into these tweaks. Better safe than sorry, especially when playing with registry or ownership settings.
Wrap-up
Getting past error 0x80280013 can sometimes feel like chasing your tail, but these steps usually help. TPM checks, clearing PIN caches, resetting app packages, and service tweaks—they all have their moments. Usually, one of these fixes will at least get you closer to a functioning PIN setup or point to where the real issue is. It’s a bit tedious, but if one of them gets your PIN working again, then that’s a win.
Frequently Asked Questions
What causes the PIN error 0x80280013?
Mostly, it’s due to TPM issues or problems with Windows’ sign-in components getting corrupted or misconfigured. It’s kind of weird how these security parts can get out of sync, but that’s Windows for you.
Can I fix this without reinstalling Windows?
Totally. Most fixes involve tinkering inside Windows itself—checking BIOS, resetting caches, or reset app components. Reinstalling is usually a last resort, and these tricks avoid that mess.
How can I tell if my TPM is enabled?
Run tpm.msc from the Run dialog (Win + R) and look for the message “TPM is ready for use.” If it’s not, check your BIOS settings to turn it on.