Windows Hello lets you sign in to a Windows device with a PIN, fingerprint, or facial recognition instead of typing an account password each time. The available methods depend on the hardware in the PC.
Understand the Windows Hello options
A Windows Hello PIN is associated with one device rather than being the same as your Microsoft account password. Fingerprint sign-in requires a fingerprint reader. Facial recognition requires a Hello-compatible infrared camera. [1]
1. Open Sign-in options
- Open Settings.
- Select Accounts.
- Select Sign-in options.
The available settings vary by device configuration, hardware, and organization policy. [2]
2. Set up a Windows Hello PIN
- Under Ways to sign in, select PIN (Windows Hello).
- Select Set up.
- Authenticate when Windows asks for your account credentials.
- Create and confirm the PIN.
Choose a PIN that is difficult for someone nearby to guess. Do not reuse a short numeric code that you use for unrelated services.
3. Set up fingerprint recognition
- Under Ways to sign in, select Fingerprint recognition (Windows Hello).
- Select Set up.
- Follow the enrollment instructions.
- Place and lift the registered finger as requested.
Fingerprint setup requires a working fingerprint reader. If the computer does not include one, a compatible USB reader may be used. [1]
4. Set up facial recognition
- Under Ways to sign in, select Facial recognition (Windows Hello).
- Select Set up.
- Follow the camera enrollment prompts.
Facial recognition requires a Hello-compatible infrared camera. A standard webcam may not support this sign-in method. [1]
5. Test the sign-in methods
Lock the device and test the configured method. Keep the account password or another recovery method available in case the sensor is unavailable, the lighting is unsuitable, or the device requires a password after a security event or restart.
6. Review additional sign-in settings
Windows includes additional settings that can affect sign-in behavior. You can choose whether Microsoft accounts must use Windows Hello, whether external cameras or readers are allowed, and whether Dynamic Lock should automatically lock the PC when a paired phone moves out of Bluetooth range. Review these settings against your organization’s security policy. [2]
7. Keep the device secure
Windows Hello is one part of device security. Keep Windows updated, use a strong account recovery method, lock the PC when leaving it unattended, and avoid enrolling another person’s biometric data on a personal work device unless policy allows it.
Common mistakes
- Trying to configure facial recognition without a compatible infrared camera.
- Assuming every fingerprint reader supports Windows Hello.
- Using an easily guessed PIN.
- Removing password recovery options before testing the new method.
- Ignoring organization policy or device-management restrictions.


