How to Stop OneDrive Personal Vault from Using Your Windows PIN
Question details
Users are concerned that anyone who knows the computer's Windows PIN can automatically unlock and access the OneDrive Personal Vault.

- Product
- OneDrive
- Device & OS
- Windows
- Scenario
- Trying to restrict access to OneDrive Personal Vault so it cannot be opened by anyone who knows the shared device login PIN.
- Observed behavior
- OneDrive Personal Vault defaults to using the signed-in Windows user profile and Windows Hello verification, which makes its access PIN identical to the computer's login PIN.
Ensure you have access to your Microsoft account credentials and a secondary device or email address to set up multifactor authentication.
Change Personal Vault Verification to Multifactor Authentication (MFA)
Update your OneDrive web settings to require an email or phone code instead of relying on the default Windows PIN.
By default, Windows Hello links your PC PIN to your OneDrive authentication. Changing the verification method via the web forces OneDrive to ask for an extra layer of security, bypassing the local PIN.
Log into your OneDrive account using a web browser and locate your Personal Vault folder.
Open the Personal Vault, click on the 'Options' gear icon, and navigate to the 'Personal Vault' settings menu.
Select 'Manage sign-in'. Follow the on-screen prompts to configure an additional email address or phone-based multifactor authentication method.

Create Separate Windows Accounts for Other Users
Prevent others from using your Windows PIN by giving them their own dedicated local or Microsoft accounts on the PC.
Looking for a Secure and Lightweight Office Alternative?
While securing your Microsoft accounts, consider trying WPS Office. It provides a robust, free, and lightweight suite with built-in cloud storage options to safely manage and protect your sensitive documents without relying solely on standard Windows authentication.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package.
- 2. Install and Log In: Run the installer and log into your WPS account to activate the secure cloud features.
- 3. Protect Your Files: Use WPS Cloud to safely store, sync, and encrypt your important documents across multiple devices.

Frequently Asked Questions
Why does OneDrive Personal Vault use my Windows PIN by default?
By default, Personal Vault integrates closely with Windows Hello. It uses your signed-in Windows user profile's PIN, fingerprint, or facial recognition to provide you with seamless, quick access without needing to enter a password repeatedly.
Can I set a unique PIN exclusively for my Personal Vault?
Currently, OneDrive does not support setting a unique, isolated PIN just for Personal Vault on Windows. You must either use alternative multifactor authentication (like email or SMS codes) or secure your Windows profile by creating separate accounts for other users.
Where can I submit feedback about Personal Vault security to Microsoft?
You can submit feature requests or security feedback directly to Microsoft using the Feedback Hub app built into Windows 10 and 11, or by visiting the official Microsoft feedback web portal.




