在之前的一篇文章中，我们介绍了如何启用和配置 PIN 复杂性组策略。在这篇文章中，我们将向您展示在 Windows 11/10中轻松指定最小和最大 PIN 长度的简单方法。^{(specify minimum and maximum PIN length)}

在我们直接进入它之前，有一点背景。

PIN（个人识别码）是^{(PIN (Personal Identification Number))}Windows 10和Windows 8.1提供的  最新安全功能，旨在保护与用户帐户相关的数据。如果启用 Windows Hello PIN 保护，则可以输入PIN而不是实际密码。

优点是Hello PIN与设置它的特定设备相关联 - 即使有人设法获取了您的Microsoft 帐户和密码^{(Microsoft account and password)}，他们仍然需要实际拥有您的设备才能访问您的数据. PIN不等同于可以在任何设备和任何网络上使用的Microsoft帐户^(Microsoft)密码 - 它是真正的本地帐户，不会传输到Microsoft的服务器进行验证。

Hello PIN的另一个优点是可访问性。与密码不同，PIN不需要您按Enter键来注册。由于它只是一个简短的 4 位数字，只要您输入正确的PIN ， Windows就会让您登录。

除了TPM硬件支持外，您还将受到保护，免受暴力攻击 - 在过多的错误猜测后，设备将被暂时锁定。

如何指定最小^(Minimum)和最大 PIN^{(Maximum PIN)}长度

您可以使用本地组策略编辑器在^{(Local Group Policy Editor)}Windows 10中指定^{(Windows 10)}最小^(Minimum)和最大 PIN^{(Maximum PIN)}长度。对于Windows 11/10Home用户，本地组策略编辑器^{(Local Group Policy Editor)}不是该版本的本机。您需要添加该功能^{(add the feature)}，然后按照下面概述的说明执行操作，就像在Windows 11/10Pro上一样。

要使用Windows 10^{(Windows 10)}中的本地组策略编辑器^{(Local Group Policy Editor)}指定最小^(Minimum)和最大 PIN^{(Maximum PIN)}长度，请执行以下操作：

• 按Windows key + R调用“运行”对话框。
• 在 Run 对话框中键入gpedit.msc并按 Enter打开 Group Policy Editor^{(open Group Policy Editor)}。
• 在本地组策略编辑器^{(Local Group Policy Editor)}中，使用左窗格导航到以下路径：

Computer Configuration > Administrative Templates > System > PIN Complexity

要指定最小 PIN^{(Minimum PIN)}长度，请执行以下操作：

• 在右侧窗格中，双击最小 PIN 长度^{(Minimum PIN length )}以编辑其属性。
• 在最小 PIN^{(Minimum PIN)}长度窗口中，选择已 启用^(Enabled)的单选按钮。
• 接下来，移动到下面的框并将最小 PIN^{(Minimum PIN)}长度 设置为4 到 127 之间的值^(127 )
• 通过使用下拉菜单或键入值。

如果您将其设置为 7，您将能够创建更长的 pin（最多 7 位数字）。

• 单击应用^(Apply)>确定^(OK)。

要指定最大 PIN^{(Maximum PIN)}长度，请执行以下操作：

• 双击同一右侧窗格中的最大 PIN^{(Maximum PIN)} 长度^(length)。
• 在最大 PIN^{(Maximum PIN)}长度窗口中，选择已 启用^(Enabled)的单选按钮。
• 接下来，移动到下面的框，并通过使用下拉菜单或键入值将最大 PIN^{(Maximum PIN)}长度设置为4 到 127之间的值。^{(127 )}
• 单击应用^(Apply)>确定^(OK)。

现在已修改最大和最小长度，您可以根据需要进一步自定义PIN创建规则。^(PIN)如果您查看右侧窗格，您可以执行其他策略。您可以允许使用特殊字符、要求使用大写或小写字母，甚至可以在PIN中添加过期日期。

That’s it!

相关文章^{(Related post)}：指定 Windows 中 BitLocker 启动 PIN 的最小长度。

How to specify Minimum and Maximum PIN length in Windows 11/10

In an earlier pоst, we covered how to enаble & configure PIN Complexitу Group Policy. In this post, we will show you the simрle way you can easily specify minimum and maximum PIN length in Windows 11/10.

Before we jump right into it, a bit of background.

The PIN (Personal Identification Number) is the newest security feature available with Windows 10 and Windows 8.1 aimed at protecting data related to a user account. If you enable Windows Hello PIN protection, you can enter the PIN instead of the actual password.

The advantage is that Hello PIN is tied to the specific device in which it was set up – even if someone manages to obtain your Microsoft account and password, they’ll still need to be physically in possession of your device to gain access to your data. A PIN is not the equivalent of a Microsoft account password that can be used on any device and any network – it’s truly local and won’t be transmitted to Microsoft’s servers for verification.

Another advantage of the Hello PIN is accessibility.  Unlike a password, a PIN will not require you to hit the Enter key to register it. Since it’s just a short 4 digit number, Windows will log you in as soon as you enter the correct PIN.

In addition to TPM hardware support, you will also be protected against brute-force attacks – after too many incorrect guesses, the device will be temporarily locked.

How to specify Minimum and Maximum PIN length

You can specify Minimum and Maximum PIN length in Windows 10 using Local Group Policy Editor. For Windows 11/10 Home users, the Local Group Policy Editor is not native to the edition. You’ll need to add the feature then carry out the instructions as outlined below just like you would on Windows 11/10 Pro.

To specify Minimum and Maximum PIN length using Local Group Policy Editor in Windows 10, do the following:

• Press Windows key + R to invoke the Run dialog.
• In the Run dialog box type gpedit.msc and hit Enter to open Group Policy Editor.
• Inside the Local Group Policy Editor, use the left pane to navigate to the path below:

Computer Configuration > Administrative Templates > System > PIN Complexity

To specify the Minimum PIN length, do the following:

• On the right pane, double-click on Minimum PIN length to edit its properties.
• In the Minimum PIN length window, select the radio button for Enabled.
• Next, move to the box below and set the Minimum PIN length to a value between 4 and 127 
• either by using the drop-down menu or by typing the value.

If you set it to 7, you will then be able to create a longer pin (up to 7 digits).

• Click Apply > OK.

To specify the Maximum PIN length, do the following:

• Double-click on Maximum PIN length from the same right pane.
• In the Maximum PIN length window, select the radio button for Enabled.
• Next, move to the box below and set the Maximum PIN length to a value between 4 and 127 either by using the drop-down menu or by typing the value.
• Click Apply > OK.

Now that the maximum and minimum length have been modified, you can customize the PIN creation rules even further if you want. If you take a look at the right pane, you have other policies that can be enforced. You can allow the use of special characters, require uppercase or lowercase letters or even add an expiration date to the PIN.

That’s it!

Related post: Specify Minimum Length for BitLocker Startup PIN in Windows.

Related posts

• 如何将Group Policy Editor添加到Windows 10 Home Edition

• 如何启用或禁用Windows 10 Win32 Long Paths

• Windows 10自动Delete旧用户配置文件和文件

• 如何在Windows 10中禁用Picture Password Sign-In option

• 如何在Windows 11/10上追踪WorkGroup Mode的User Activity

• 如何指定自动重新启动前Update installation截止

• Group Policy Client service在Windows 11/10中失败了登录

• Programs的Prevent installation来自可拆卸Media Source

• 如何安装Group Policy editor（gpedit.msc）

• 如何在Windows 10中更改BitLocker PIN

• 如何仅在Windows 10应用Group Policy至Non-Administrators

• Windows 10中的进口，Export，Repair，Restore Default Firewall Policy

• 启用，禁用Autocorrect and Highlight Misspelled Words - Windows 10

• 如何检查Windows 10计算机上应用的Group Policy

• File Explorer中Windows 11/10中File Explorer中最近的搜索条目的Turn

• 使用Group Policy or Registry启用Windows 10 Full屏幕Start Menu

• Limit Reservable Bandwidth Setting在Windows 10

• 使用Group Policy禁用Internet Explorer 11作为standalone browser

• Group Policy Windows 10中缺少的设置

• Desktop Background Group Policy不适用于Windows 10