[Issue] Windows 11 Account Reauthentication PIN pop-up whenever I switch user accounts

[SM03]

I use two different Windows online (MSFT) accounts on my system for different work purposes, and both are MSFT accounts because I have to use OneDrive & Office packages (Word, Excel, etc) tied to them

Recently, when switching (Sign-out) from my account to the other account (Sign-in), then switching (Sign-out) from the other account to my account (Sign-in)
Always getting the reauthentication PIN prompt like this

Spoiler: Screenshot

I tried to find out & disabled all reauthentication-related Windows settings/options, i.e.


Apps > Advanced App Settings: [See above Screenshot]

• “Archive apps” = Off
• “Share across devices” = Off
  

Accounts > Sign-in options > Additional Settings:

• “For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device (Recommended)” = Off

Spoiler: Screenshot

Privact & Security> App Permission > Account Info:

• “Let apps access my account info” = Off

Earlier, before a month or two, even with all those above-mentioned Windows settings options enabled
I rarely faced such a reauthentication pin prompt, i.e. once in a couple of months

But now, since April/May 2025, it's become a consistent issue whenever I switch user accounts, so posting it here for help.

Windows version: Windows 11 24H2 Retail build (currently 26100.4202).
Really appreciate if anyone could help to solve this issue, TIA.

 

[SM03]

No response...
[BUMP]

 

[francis11]

I don't use MS account signin so just a guess.
Notized in Settings/ Accounts theres an option for Accesskeys where you've an option to logon to apps and websites without face req. , fingerprint or Hello pin.

 

[francis11]

Have you taken this Setting into account - think it should be enabled (just a copy/ paste from my own settings).

 

[SM03]

I don't use MS account signin so just a guess.
Notized in Settings/ Accounts theres an option for Accesskeys where you've an option to logon to apps and websites without face req. , fingerprint or Hello pin.

Have you taken this Setting into account - think it should be enabled (just a copy/ paste from my own settings).
View attachment 14532

I am unsure which options you're mentioning here. Could you be more specific and provide the exact settings from the Windows settings so that I can check and revert?

 

[francis11]

As said i don't use MS Account sign-in and i blocked everything concerning MS Account - coz using a local account.
Can't even open Settings/ Accounts/ Sign-In option coz of that.

Settings/ Account/ Pass (Access in danish) keys refers to Use your face (Hello) , fingerprint og pincode to sign-in to apps and websites.

MS explained this here and here

What happen if you change to:

Apps > Advanced App Settings: [See above Screenshot]

• “Archive apps” = On

 

[SM03]

As said i don't use MS Account sign-in and i blocked everything concerning MS Account - coz using a local account.
Can't even open Settings/ Accounts/ Sign-In option coz of that.

Settings/ Account/ Pass (Access in danish) keys refers to Use your face (Hello) , fingerprint og pincode to sign-in to apps and websites.

MS explained this here and here

So, you're referring to this option in your earlier reply
-Settings/Account/Passkeys

I don't have a Hello-certified camera, so for Windows login or any kind of login where the passkeys used, I've to re-enter my Windows PIN.

What happen if you change to:

Apps > Advanced App Settings: [See above Screenshot]

• “Archive apps” = On

It's the same result/issue that I described in my OP. Earlier, I used this option set to ON, but that didn't change anything.

And regarding using MS account, I also mentioned this my the OP that
I use two Microsoft accounts in my system for my work, as those Microsoft accounts are tied to OneDrive and the Office Suite, which are required for my work.

I shared this issue here to know
-Whether the users, using two Win accounts in a system, also having/facing this same issue or not
-Is there any workaround/solution for this issue
-Whether MSFT is aware of this issue and has acknowledged/addressed it anywhere in their log of known issues or not

 

[francis11]

Do you have Passkeys for Onedrive and Office365 as it seems to isolate the problem as Windows get evolved with montlly updates.

 

[garlin]

If you're not using a MS Account, then don't speculate on how it works.

When your user account is tied to a MS Account, Windows Hello is bound to that identity. You can't be logged into two or more MS Account identities at the same time, either on a browser or from the Office and OneDrive apps. It sounds like MS is beginning to enforce security better, and not allow the previously cached MS Account credential to work after switching users.

Therefore it wants you to re-authenticate, and asks for the PIN again.

The only way around this is to create two separate Windows accounts, each linked to a different MS Account. You could switch between simultaneous user sessions so each desktop can stay logged on to their respective MS Account identities.

In the end, it's which setup is worse for you: re-entering the PIN, or keeping two user sessions.

 

[SM03]

Do you have Passkeys for Onedrive and Office365 as it seems to isolate the problem as Windows get evolved with montlly updates.

If you're not using a MS Account, then don't speculate on how it works.

When your user account is tied to a MS Account, Windows Hello is bound to that identity. You can't be logged into two or more MS Account identities at the same time, either on a browser or from the Office and OneDrive apps. It sounds like MS is beginning to enforce security better, and not allow the previously cached MS Account credential to work after switching users.

Therefore it wants you to re-authenticate, and asks for the PIN again.

The only way around this is to create two separate Windows accounts, each linked to a different MS Account. You could switch between simultaneous user sessions so each desktop can stay logged on to their respective MS Account identities.

In the end, it's which setup is worse for you: re-entering the PIN, or keeping two user sessions.

francis11 & garlin,
There's no separate passkey required or created for Win/OneDrive?Office account.

I've two different user accounts in Windows and both Windows user accounts are tied to two different MSFT accounts
and both MSFT account is logged into their respective app, i.e. OneDrive & MSFT Office, in & with their respective Windows accounts

Like garlin said this

not allow the previously cached MS Account credential to work after switching users

That's what I said earlier; this issue was not persistent. I saw it occasionally, sometimes within a couple of months, but now, every time I log in to account 1 to account 2, then sign back to account 1, it asks me to enter the PIN consistently. Haven't experienced this same in 23H2, so I guess that since 24H2, MSFT changed this policy.

Is there any official documentation of this policy change? Has MSFT officially published any statement regarding this?

and regarding this

In the end, it's which setup is worse for you: re-entering the PIN, or keeping two user sessions.

I could/have to bear with this issue, if MSFT continue with this tighten security policy, but for this, I've been having another issue in Google Chrome in the last few months,

Like Windows, Chrome is also signed in to different Gmail accounts in both Windows accounts: account 1 & account 2
and for this windows issue, everytime, I switch between Win accounts. chrome SYNC is getting paused and everytime I need to sign in Chrome, which is much worse than entering the Windows PIN, becuase pausing Chrome Sync causes inactive cookies/account authentication for every website I signed up earlier, therefore, I've to sign in again and again on all of those websites.

And this is the reason I mainly asked this question here at the first place, currently as I've been facing this issue and haven't found any proper way to deal with it,

As a workaround: w/out completely logging off the user account 1, I'm just switching to user account 2 instead.

 

[garlin]

Even if you have passkeys, you will be required to re-auth with Hello at least once per session.

https://support.microsoft.com/en-us/windows/passkeys-overview-301c8944-5ea2-452b-9886-97e4d2ef4422

Are you tired of constantly forgetting your passwords and having to type them in every time you want to access your favorite websites and applications? Say hello to passkeys! Passkeys provide a more secure and convenient way to sign in. With passkeys, you can use Windows Hello to sign in with a PIN, facial recognition, or fingerprint, making the authentication process faster and more convenient than ever before. And if you're on the go, you can even use your phone or tablet to sign in by scanning a QR code or via Bluetooth!

The real problem here is most platforms and apps only support having one secure identity per session. You may have cached credentials for multiple identities, but you can't use them simultaneously. And to switch back and forth, they require another security check.