Windows Hello error 0x80090016: PIN is no longer valid

The 0x80090016 error in Windows Hello is one of those glitches that appear just when you're in the biggest hurry.You try to log in, it asks for your PIN, you get the message “Something went wrong. Please try again later (0x80090016)” and you're locked out of your own computer. Or, if you're lucky, you can log in with your password, but there's no way to create or use a new PIN.

This problem is almost always related to the Ngc folder, TPM, or corrupted system filesThis error code can appear after a Windows update, while using BitLocker, or simply without warning. This guide will explain, step by step and in detail, exactly what this error code means, why it appears, and all possible solutions before resorting to drastic measures like reinstalling Windows.

What is error 0x80090016 in Windows Hello and when does it usually appear?

The code 0x80090016 is linked to Windows credentials and encryption system, who is responsible for managing the PIN of Windows Hello, the keys associated with the TPM and, in many cases, the authentication of applications such as Outlook or Microsoft services.

In the context of Windows Hello, the typical message is “Something went wrong. Please try again later (0x80090016)” When you try to create, change, or use a PIN. Sometimes it's displayed during sign-in, and other times when setting up Windows Hello from Settings.

The most common scenarios in which this error occurs are quite repetitive: a recent update to Windows 11, a major Windows 10 update, a sudden shutdown, a problem with BitLocker that forces you to enter the recovery key, or a direct corruption of the Ngc folder, where Windows stores the information related to the PIN.

If Windows only lets you log in with a PIN and doesn't correctly display the "I forgot my PIN" option (for example, a gray box appears briefly and then disappears immediately), the situation is more delicate because you are left completely without access to the computer and you have to resort to alternative methods such as the recovery environment.

Most common causes of error 0x80090016 in Windows Hello

Although the error code is always the same, The origin may vary slightly.And it's important to understand this so as not to try random things that are irrelevant or that might even complicate the problem further.

1. Corruption of the Ngc folder (the star case)
The folder Ngc, located in C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGCThis folder contains the PIN configuration information and other Windows Hello data. If this folder becomes corrupted, is left empty when it shouldn't be, or its permissions change incorrectly, Windows is unable to validate or create a new PIN and issues error code 0x80090016.

2. Failed Windows 10 or 11 updates
It's quite common for this error to appear after upgrading to Windows 11 or after a major cumulative update. In these cases, Some system files or credential configurations remain in an inconsistent statecausing the Windows Hello setup to fail.

3. Problems with BitLocker and TPM
On systems where BitLocker is active and the TPM manages part of the keys, a boot problem that forces the use of the BitLocker recovery key can leave the credential environment "damaged". After entering your BitLocker key and logging in with your password, you may no longer be able to create a PIN. and that the system responds with error 0x80090016 every time you try.

4. Corrupted or inconsistent system files
If the Windows components responsible for handling encryption, credentials, and login are corrupted, The system may be unable to complete the PIN creation or validation processThis is where tools like SFC and DISM come into play, which attempt to repair system files and the Windows image.

5. Corrupted user profiles or conflicting credentials
In some cases the problem is limited to the current user profile: a corrupted profile, incorrect entries in the Credential Manager or inherited configurations from previous versions of Windows may cause 0x80090016 in that user, but not in new ones.

Basic steps: Check if you can log in and use other options

Before we get into advanced solutions, the first thing is to find out if you can log in somehowFrom there, the options change a lot.

1. Try using your local or Microsoft account password
On the Windows Welcome screen, click on Login options (usually an icon with a small keyboard or a circle with a padlock) and select the method of passwordIf you manage to log in with your password, you'll have time to work from within Windows.

2. Review the behavior of “I forgot my PIN”
Some users report that when they press on “I forgot my PIN” On the login screen, they only see a gray box that disappears quickly. This behavior indicates that the assistant that should guide you through resetting your PIN is failing., most likely due to the same credential problem that causes 0x80090016.

3. Try to enter Safe Mode
If you have access to the recovery environment (for example, after several failed boot attempts) or from Windows you can go to Settings → System → Recovery, Windows starts in Safe ModeYou can also try deleting the Ngc folder or creating another user account, which sometimes circumvents the problem.

If you cannot log in using any method (neither PIN, nor password, nor Safe Mode)You must work from the Windows recovery environment or from external media, which we will see a little later.

Reset or recreate the PIN from Settings

If you can still log into Windows with your password, the first logical solution is Delete the current PIN and create a new one.It is the least invasive procedure and, if the problem is mild, it may be sufficient.

Steps to remove and recreate your Windows Hello PIN

• Open Settings (using the Windows + I key combination).
• Go to Accounts → Login options.
• In the section PIN (Windows Hello)select Remove or a similar option.
• Restart the computer completely, don't just log out.
• Go back to Settings → Accounts → Sign-in options and press on Add PIN to create a new one.

If at this point the system continues to return error 0x80090016 When trying to create the PIN, it is a very clear sign that the Ngc folder is corrupt or that there is a deeper problem with the credentials.

Delete the Ngc folder to regenerate the Windows Hello settings

The most effective solution reported by many users consists of Delete the contents of the Ngc folder and let Windows rebuild it.This folder stores critical PIN and Windows Hello data, so the system will regenerate it as soon as you set up a new PIN.

IMPORTANT: Deleting this folder will remove your current PIN settings and may also affect biometric authentication. (fingerprint or facial recognition). Make sure you can log in with your password before proceeding, and if possible, back up any important data.

Ngc folder location
The route is:

Folder path: C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC

In many cases you will not have permission to directly access this folder.Therefore, the procedure is usually done from a console with elevated privileges.

Advanced steps using the command line (requires administrator privileges):

1. Open Command Prompt as administrator
   On the Start menu, type cmdRight-click on “Command Prompt” and choose “Run as administrator”.
2. Take ownership of the Ngc folder
   Execute:

   takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /r /dy

   This command changes the owner of the folder and its contents so that the administrators' account has control.

3. Grant administrators full control permissions
   Run the following command:

   icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC /grant administrators:F /t

   With this, The administrators account receives full permissions over all files in the folder.

4. Delete the Ngc folder
   Once you have the permissions, delete the folder or its contents from File Explorer or with a simple:

   rmdir /s /q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NGC

5. Restart the computer
   Turn your PC off and on again. After it restarts, Go back to Settings → Accounts → Sign-in options and try adding a new PIN.

In most cases, after deleting the Ngc folder and restarting, error 0x80090016 disappears. And you can create a PIN without any problems. If it still keeps appearing, there's likely additional damage to the system.

Run SFC and DISM to repair corrupted system files

When corruption affects system files, simply touching the Ngc folder is not enough.This is where the repair tools built into Windows come into play: SFC (System File Checker) y DISM.

1. SFC /scannow
This command analyzes protected system files and replace those that are damaged or modified.

• Open the Command Prompt as administrator.
• Writes:

  sfc /scannow

• Wait until finish the analysis and the repair (it can take a while).
• Restart your computer when finished.

2. DISM /Online /Cleanup-Image /RestoreHealth
DISM repairs the Windows image that SFC uses as a reference, so It is recommended to run it if SFC detects problems or fails to repair them all..

• Again, in the Command Prompt as administrator, run:

  DISM /Online /Cleanup-Image /RestoreHealth

• Wait for the process to reach the 100%It may take quite a while, especially on slow computers or those with limited internet connections.
• Restart your PC and try setting the PIN again from the login options.

By combining SFC and DISM with deleting the Ngc folder, both system file problems and PIN-specific configuration problems are covered, which are the two most frequent technical causes of error 0x80090016.

Review the Credential Manager and check for potential conflicts

In some cases, the origin of error 0x80090016 is related to corrupted entries in the Credential Managerespecially when the problem occurs when starting applications like Outlook, using a Microsoft account, or validating associated services.

The idea is to clear conflicting credentials so that Windows recreates them from scratch. when you use them again.

• Open the control Panel classic.
• Go to User accounts → Credential manager.
• On the tab Windows CredentialsCheck the saved entries.
• Remove any problematic credentials or credentials that appear to be related to Microsoft Account, Office, or Outlook services. if the error appears when using those programs.
• Close everything, restart the computer and Try accessing again. or the Windows Hello settings.

This measure is usually useful when 0x80090016 appears not only in the Windows Hello PINbut also when authenticating in applications that use the same credential APIs.

TPM, BitLocker and their relationship with error 0x80090016

In modern laptops, especially corporate computers or those with drive encryption enabled, the TPM plays a key role and may be involved in the problem.

When the startup fails and the computer asks for the BitLocker recovery keyWhen you enter the PIN, you can log into Windows, but you're unable to create a new Windows Hello PIN. Error 0x80090016 appears repeatedly, and the PIN never finishes being set up.

In these cases, an advanced option is to clear the TPMHowever, this should be done with great care and only if you have all the necessary recovery keys.

Basic steps to check and clean the TPM (only if you know what you're doing):

• Press Windows + R, type tpm.msc and press Enter.
• The TPM management console will open. Check the status it displays.
• If you decide to proceed, use the option to “Delete TPM” (Clear TPM). Before doing so, make sure you have your BitLocker recovery keys handy. or other encryption systems.
• Restart your computer. You may be asked to confirm the TPM erase during startup.
• Once the process is complete, try again. Set up a Windows Hello PIN.

Resetting the TPM can resolve internal key conflicts. that are preventing the correct creation of the PIN, but it is not a step to be taken lightly: it is best to leave it as a last technical resort before reinstalling or repairing Windows.

Create a new user profile when the current one is corrupted

Sometimes the problem is so deeply embedded in the current user profile that it's not worth continuing to troubleshoot it. One way to check is to create a new account and see if you can use or configure Windows Hello without errors.

If everything works fine for the new user, then it's clear that the original profile is corrupted (folders, logs, credentials, etc.) and the cleanest thing in the medium term is to migrate to that new account.

Steps to create a new user account:

• Open Settings → Accounts.
• Enter Family and other users (in some versions it appears as “Other users”).
• Click on “Add another person to this team”.
• Choose whether you want to create it with a Microsoft account or as a local account.
• Once created, log out of your current account and log in with the new one.
• Go to Login options and try setting up a Windows Hello PIN.

If the PIN works on the new account without the 0x80090016 errorYou need to decide whether to continue using the old (and problematic) profile or migrate your files and settings to the new account for a more stable system.

Using the Recovery Environment and restoring the system to a previous point

When the problem prevents you from logging in at all times, or the previous solutions don't work, you have to resort to... Windows Recovery Environment (WinRE)From there, you can try to restore the system or repair the boot process.

Access to the Recovery Environment
WinRE usually appears automatically after several failed boot attempts, but you can also enter it from a Windows 10 or 11 installation media.

Useful options within WinRE:

• Startup repair: attempts to troubleshoot problems that prevent Windows from starting correctly.
• System RestoreIf you had created restore points, you can return Windows to a time when the PIN worked properly.
• Accessing the command promptFrom here you can also try to manually delete or rename the Ngc folder if you don't have access from Windows itself.

System restore is especially useful if you know that the problem started right after a specific update or change.By reverting to a previous point, changes to system files and settings are undone without losing personal documents (although some applications installed after the restore point may be lost).

If you still can't use Windows Hello or the PINThe next step would be an in-place repair of Windows (keeping files but reinstalling the system) or, in the worst-case scenario, a clean installation. In these cases, it's advisable to back up everything important beforehand, for example, by copying the data to another boot drive if necessary.

Windows Hello error 0x80090016 can usually be resolved without needing to reinstall the entire system.However, sometimes it requires trying several layers of repair: from the simplest (removing and recreating the PIN, checking credentials) to more technical measures such as deleting the Ngc folder, running SFC/DISM, checking the TPM, or even using the recovery environment and System Restore. By combining these strategies, on most computers it's possible to log back in with both the PIN and biometric methods without losing programs or data.