Security
Windows Hello Windows 11 Guide: PIN, Face and Fingerprint
Written by Windows 11 Field Guide Editorial Team · Updated
Windows Hello is the sign-in system built into Windows 11. It lets you unlock your PC with a PIN, your face or your fingerprint instead of typing a password, and it also protects passkeys for signing in to websites. This Windows Hello Windows 11 guide goes step by step: how to set up each method, what hardware you need, how passkeys fit in, and what to do when it stops working.
The steps apply to Windows 11 version 24H2 and 25H2 on Home and Pro. Work or school PCs may use Windows Hello for Business, which your organisation manages; some options below may be locked on those devices.
Where to set up Windows Hello
Everything is in one place:
- Press Win+I to open Settings.
- Select Accounts, then Sign-in options.
Under Ways to sign in you will see:
| Option | What you need |
|---|---|
| Facial recognition (Windows Hello) | An infrared (IR) camera that supports Windows Hello |
| Fingerprint recognition (Windows Hello) | A built-in or USB fingerprint reader that supports Windows Hello |
| PIN (Windows Hello) | Nothing extra |
| Security key | A physical FIDO2 security key, such as a USB key |
| Password | Your account password |
| Picture password | A touchscreen is helpful but not required |
If an option says it is unavailable, Windows has not found compatible hardware.
Set up a PIN first
The PIN is the foundation. Face and fingerprint setup will ask you to create one if you do not have it, and it is your fallback if a camera or reader fails.
- In Sign-in options, select PIN (Windows Hello).
- Select Set up.
- Confirm your account password.
- Enter a new PIN twice. Tick Include letters and symbols if you want a stronger, longer PIN.
- Select OK.
Why a PIN rather than a password? Microsoft’s reasoning is that a Windows Hello PIN is tied to the specific device. A password can be used from anywhere; a PIN only works on the PC where it was set up, so if someone learns it they also need your PC.
Add fingerprint sign-in
- Select Fingerprint recognition (Windows Hello), then Set up.
- Select Get started and enter your PIN.
- Touch the reader repeatedly as prompted, shifting your finger slightly each time.
- Select Add another finger if you want a backup finger, which is a good idea.
If the option is missing on a laptop that has a reader, the driver may not be installed. Get the latest fingerprint or biometric driver from your PC maker’s support page.
Add face sign-in
Windows Hello face recognition uses an infrared camera that can see in low light and is designed to reject photos. A normal webcam is not enough, which is why the option is often unavailable on desktop PCs.
- Select Facial recognition (Windows Hello), then Set up.
- Select Get started and enter your PIN.
- Look at the screen until setup finishes.
- If you wear glasses, select Improve recognition afterwards and repeat the scan with or without them.
Once set up, the PC unlocks when you look at it from the lock screen.
Passkeys and Windows Hello
A passkey is a sign-in credential that replaces a password on supporting websites and apps. On Windows 11, passkeys you save on the PC are protected by Windows Hello: when you sign in, Windows asks for your face, fingerprint or PIN instead of a password.
To use one, choose the site’s passkey option (for example Sign in with a passkey) and confirm with Windows Hello. You can also use a passkey stored on a phone by scanning a QR code. Passkeys saved on your PC can be viewed and deleted in Settings > Accounts > Passkeys, which is the place to remove a passkey for a site you no longer use.
Useful settings under Additional settings
Further down Sign-in options:
- For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. When on, the password option is hidden at sign-in and you sign in with Windows Hello only. This option is the usual reason the Remove button for the PIN is greyed out; turn it off first if you need to remove the PIN.
- Dynamic lock. Pair your phone over Bluetooth and Windows can lock automatically shortly after you walk away with it.
- If you’ve been away, when should Windows require you to sign in again? Sets how soon a sign-in is required after the screen turns off.
Fixing common Windows Hello problems
- “Something went wrong” or the PIN is not accepted. On the sign-in screen, select I forgot my PIN and follow the prompts to verify your account and create a new PIN. If you have also lost the password, see Windows 11 forgot password.
- Face or fingerprint stopped working after an update. Remove the method in Sign-in options and set it up again. Then check for an updated camera or biometric driver from your PC maker.
- Options are greyed out on a work PC. Your organisation controls them through Windows Hello for Business policy.
- Windows Hello disappeared after a reset. A reset of Windows 11 removes Windows Hello data; set it up again.
For the bigger picture of how sign-in fits with Defender, encryption and Smart App Control, see the Windows 11 security hub. If you also want to tidy what appears on your lock screen, see disable Windows 11 ads and suggestions, and for the full map of Settings, the Windows 11 Settings tour.
To have Windows lock itself when you walk away with your phone, set up Dynamic lock in Windows 11.
Frequently asked questions
Is a Windows Hello PIN safer than a password?
Microsoft's point is that the PIN is tied to the one device it was set up on. Someone who learns it cannot use it to sign in to your Microsoft account from another PC.
Why doesn't Facial recognition appear in Sign-in options?
Windows Hello face sign-in needs an infrared camera that supports it. Most basic webcams are not compatible, so the option shows as unavailable.
Can I use Windows Hello without a Microsoft account?
Yes. You can set up a PIN, face or fingerprint with a local account. Some features, such as saving passkeys synced across devices, depend on your account type.
What happens if my fingerprint reader stops working?
You can always sign in with your PIN, which is set up first. Then update the reader's driver from the PC maker and remove and re-add your fingerprints.
Sources
Windows 11 Field Guide Editorial Team
Editorial team
The Windows 11 Field Guide team writes and updates independent Windows 11 guides and checks each step against Microsoft's documentation and the current Settings app.
