MFA Security Issues

How to Use Microsoft Authenticator Instead of Windows Hello PIN for OneDrive Personal Vault

Elise Williams Oct 14, 2026 869 views

Question details

The user wants to force OneDrive Personal Vault to require Microsoft Authenticator approval rather than unlocking locally with a Windows Hello PIN.

How to Use Microsoft Authenticator Instead of Windows Hello PIN for OneDrive Personal Vault

Product: Microsoft OneDrive
Device & OS: Windows
Scenario: Unlocking OneDrive Personal Vault on a Windows PC where the default security prompt has changed to a PIN.
Observed behavior: OneDrive Personal Vault prompts for a Windows Hello PIN instead of sending an approval request to the Microsoft Authenticator app. This behavior sometimes varies between different devices and can change after system updates.

Before you start

Ensure you have your Microsoft account password readily available and that the Microsoft Authenticator app is correctly set up and active on your mobile device.

Solution 1Recommended

Remove Windows Hello PIN to Force Microsoft Authenticator

Since OneDrive links Personal Vault security to your device's Windows sign-in method, removing the local Windows Hello PIN forces the system to fall back to Microsoft Authenticator.

Microsoft does not currently provide a dedicated setting within OneDrive to exclusively disable PIN unlocks for the Personal Vault. Instead, OneDrive relies on the system-wide security configurations of your Windows device. To bypass the PIN requirement, you must adjust your Windows sign-in options.

Open Windows Sign-in Options

Press the Windows key + I to open Settings, navigate to 'Accounts', and click on 'Sign-in options' from the left or main menu.

Remove the Windows Hello PIN

Locate the 'PIN (Windows Hello)' section, click on it to expand the options, and select 'Remove'. You may be prompted to enter your Microsoft account password to confirm the removal.

Restart and Test Personal Vault

Restart your computer to ensure the security policies update. Open OneDrive and attempt to unlock your Personal Vault; it should now prompt for Microsoft Authenticator approval.

Remove Windows Hello PIN to Force Microsoft Authenticator

Device-Specific Settings: Windows Hello configurations apply on a per-device basis. If you use multiple PCs, you will need to remove the PIN on each specific device where you want to enforce Microsoft Authenticator for your Personal Vault.

Free Microsoft Office alternative

Manage Your Documents Securely with WPS Office

If you are dealing with frustrating Microsoft security changes and Windows updates, consider switching to WPS Office for your document needs. It is a powerful, lightweight, and completely free alternative to Microsoft Office that keeps your workflow smooth and secure.

1. Download WPS Office: Visit the official WPS website and click the free download button for Windows.
2. Install the Software: Run the downloaded installer and follow the simple on-screen instructions to complete the setup.
3. Open Your Files: Launch WPS Office and instantly open your existing Word, Excel, or PowerPoint documents without losing any formatting.

Fully compatible with all major Microsoft Office formats (.docx, .xlsx, .pptx).Free and lightweight, consuming minimal system resources on your Windows PC.Familiar user interface ensures a seamless transition with zero learning curve.Built-in cloud syncing for secure and easy document backup across all your devices.

microsoft office alternative - wps office

Frequently Asked Questions

Why does OneDrive Personal Vault use a PIN instead of Authenticator?

OneDrive integrates directly with Windows security features. If a Windows Hello PIN is active on your device, OneDrive often prioritizes it as the default, frictionless unlock method for the Personal Vault over external multi-factor authentication apps.

Is there a dedicated setting in OneDrive to disable PIN unlock just for the Vault?

No, Microsoft does not currently offer a standalone setting within the OneDrive app to disable Windows Hello PIN unlocking. The Vault's security relies entirely on your system-wide Windows Account sign-in configurations.

Why does my laptop require Authenticator but my desktop only asks for a PIN?

Personal Vault security behavior is evaluated independently on each device. Variations in Windows update versions, system policies, or local sign-in configurations (such as having a PIN set up on the desktop but not the laptop) will cause these differences.

Microsoft Office Security Issues