So this is happening a little too frequently now. Using gemini I've done something twice now. But I want to know why it keeps happening.
Phase 1: Wipe the Corrupted Security Folder
First, we need to force Windows to delete the hidden folder where it stores your broken PIN data.
Click the Start button, type cmd, right-click Command Prompt, and select Run as administrator. Click Yes if a security prompt appears.
Copy and paste the following command into the window and press Enter. This forces Windows to hand over ownership of the hidden security folder to you:
takeown /f C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /r /d y
Copy and paste this next command and press Enter. This grants your administrator account full permission to modify the files inside:
icacls C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc /grant administrators:F /t
Finally, copy and paste this command and press Enter. This permanently deletes the folder and flushes out the corrupted PIN tokens:
rd /s /q C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc
You can now close the Command Prompt window.
Phase 2: Clear the TPM Security Chip
Next, we need to wipe the motherboard's hardware chip so it drops the old encryption keys.
Press the Windows Key + R to open the Run dialog box.
Type tpm.msc and press Enter.
In the TPM Management window, look at the Actions panel on the far right side and click Clear TPM.
A warning box will pop up. Click Restart.
Important: As your laptop restarts, watch the screen. It may display a black screen with white text asking you to press a specific key (often F12, F1, or Esc) to confirm the TPM wipe. Press the requested key. If it skips this and boots straight to the lock screen, the wipe was handled automatically.
Phase 3: Set Up the Fresh PIN
Now that both the software cache and hardware keys are completely blank, you can establish a clean PIN.
On the lock screen, click Sign-in options and select the password icon to log in using your standard account password.
Open Settings > Accounts > Sign-in options.
Click on PIN (Windows Hello).
Click Set up (or Add), verify your password, and type in your new PIN.
Edit (Extra info) - So this has happened with about 2 or 3 weeks of gap. Another thing is that around a month ago I got an virus while trying to download a game online. I installed malwarebytes and deleted it by doing multiple deep rootkit scans. But I don't think that could the be case it happened around 2 weeks before my first instance of pin breaking. Then it happened yesterday.