Prevent plaintext PINs from being returned by Credential Manager
- Policy ID
- DisallowPlaintextPin
- Scope
- Computer Configuration
- Supported on
- At least Windows Vista Service Pack 1
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Smart Card
Description
This policy setting prevents plaintext PINs from being returned by Credential Manager.
If you enable this policy setting, Credential Manager does not return a plaintext PIN.
If you disable or do not configure this policy setting, plaintext PINs can be returned by Credential Manager.
Note: Enabling this policy setting could prevent certain smart cards from working on Windows. Please consult your smart card manufacturer to find out whether you will be affected by this policy setting.
Registry
ComputerHKEY_LOCAL_MACHINE
- DisallowPlaintextPinREG_DWORD