Windows Hello Setup on a New Surface

This guide walks you through setting up Windows Hello on a new Surface, covering face recognition, fingerprint (on supported models), and PIN sign-in. You’ll need your Surface powered on, an internet connection, and your Microsoft account password ready. The process takes about five minutes and makes unlocking faster and more secure.

What You’ll Need

• A Surface with Windows 10 or Windows 11 (most recent models support Windows Hello Face; Surface Book 2 and later, Surface Pro 5 and later, Surface Laptop 1 and later, Surface Go 1 and later, and Surface Studio 1 and later have the necessary hardware).
• Your Microsoft account password or the local account password you set during initial setup.
• An internet connection (required for the first-time setup to verify your account).
• For fingerprint setup: a Surface with a fingerprint reader (e.g., Surface Pro Type Cover with Fingerprint ID or Surface Laptop 4 and later).

Step-by-Step

1. Sign in to Windows with your current password or PIN. If you haven’t completed the initial Windows setup yet, do that first – Windows Hello options appear during that process, but you can also set them up later.
2. Open Settings by clicking the Start button (Windows logo) and then the gear icon, or press Windows key + I.
3. Go to Accounts (or Sign-in options in older Windows 10 versions).
4. In the left sidebar, click Sign-in options.
5. You’ll see several sections: Windows Hello Face, Windows Hello Fingerprint, Windows Hello PIN, and Security Key. The first three are what you’ll set up.
6. Set up a PIN first (recommended). Under Windows Hello PIN, click Add. If prompted, enter your account password to verify you’re the owner. Then choose a PIN – it must be at least 6 characters, but you can enable letters and symbols by checking the box. Re-enter to confirm, and click OK.
7. Set up Face recognition (if your Surface has a camera with infrared). Under Windows Hello Face, click Set up. Click Get started in the pop-up. Look directly at the screen – the camera will scan your face. You’ll be asked to turn your head slightly to the left and right to capture different angles. Once done, click Close.
8. Set up Fingerprint (if your Surface has a reader). Under Windows Hello Fingerprint, click Set up. Click Get started, then place your finger on the reader. Lift and re-place it several times as the animation shows, covering different parts of your fingertip. You’ll be prompted to set up a PIN if you haven’t already – do that. When the scan is complete, click Close.
9. Improve recognition (optional but recommended). After face or fingerprint setup, click Improve recognition to run another scan – this helps with glasses, lighting changes, or different finger placements.
10. Test it. Lock your Surface (Windows key + L), then try unlocking with your face, fingerprint, or PIN. If it works, you’re done. If not, see Troubleshooting below.

Common Mistakes

• Skipping the PIN – Windows Hello Face and Fingerprint require a PIN as a fallback. If you don’t set a PIN first, the options may be grayed out.
• Poor lighting – Face recognition works best in even, moderate light. Backlit or very dim rooms can cause failures.
• Not removing glasses or hats – While Windows Hello can handle some variations, a completely different look (e.g., large sunglasses vs. none) may fail. Use the “Improve recognition” option to add a second look.
• Dirty fingerprint sensor – Oil or dust on the reader or your finger can cause repeated failures. Clean the sensor gently with a dry cloth.
• Using the wrong account type – Windows Hello works with Microsoft accounts and local accounts, but some features (like “Sign-in with a security key”) require a Microsoft account. If you’re using a local account, PIN and face still work.
• Not updating Windows – Older builds may have bugs or missing drivers. Always install the latest updates before troubleshooting.

Tips

• Set up multiple looks – Use “Improve recognition” with glasses on, then again with them off, to make face unlock more flexible.
• Use a PIN with letters – A longer alphanumeric PIN is more secure than a short numeric one, and you can still type it quickly.
• Keep your Surface’s camera clean – A smudged lens will degrade face recognition. Wipe it with a microfiber cloth occasionally.
• Enable “For improved security, only allow Windows Hello sign-in” – This forces you to use Windows Hello instead of your password, which is more convenient and secure. You’ll find this toggle in the same Sign-in options page.
• Use Dynamic Lock (optional) – You can set Windows to lock your Surface when you walk away with your phone. It’s in Settings > Accounts > Sign-in options > Dynamic lock.

Troubleshooting

• Option is grayed out – This usually means the hardware isn’t detected or the driver is missing. Go to Device Manager (right-click Start > Device Manager), expand “Cameras” or “Biometric devices,” and check for a yellow warning icon. If present, right-click and select “Update driver.” If that fails, uninstall the device and restart – Windows will reinstall it.
• Face recognition fails repeatedly – First, try “Improve recognition” again. If that doesn’t help, go to Sign-in options, click “Remove” under Windows Hello Face, then set it up again from scratch. Also check that the camera isn’t covered by a privacy shutter (some Surface models have one).
• Fingerprint reader not working – Ensure your finger is clean and dry. Re-register your fingerprint. If the reader isn’t recognized at all, check Device Manager for “Biometric devices.” If you see an error, run Windows Update – the driver may be pending. If you have a Surface Type Cover with Fingerprint ID, make sure it’s fully attached and the connector is clean.
• “Something went wrong” during setup – This often happens if your account isn’t verified. Sign out of Windows, sign back in with your password, then try again. Also ensure you have an internet connection – Windows Hello needs to sync your recovery key to your Microsoft account.
• PIN works but face doesn’t – The infrared camera may be disabled. Check Settings > Privacy & security > Camera and ensure “Let apps use the camera” is on. Also check the camera in Device Manager – if it’s disabled, right-click and enable it.
• After a Windows update, Hello stops working – This is usually a driver issue. Run Windows Update again (Settings > Windows Update > Check for updates). If that doesn’t fix it, go to Device Manager, right-click the camera or biometric device, and select “Uninstall device,” then restart. Windows will reinstall the driver.

Frequently Asked Questions

Is Windows Hello secure?

Yes. Windows Hello uses biometric data (face or fingerprint) that is stored locally on the device in an encrypted format – it’s never sent to Microsoft’s servers. The PIN is also stored locally and is tied to the device’s Trusted Platform Module (TPM) chip.

Can I use Windows Hello with a local account?

Yes, you can set up a PIN, face, or fingerprint with a local account. However, some features like “Sign-in with a security key” require a Microsoft account. For most people, a Microsoft account is recommended because it also enables device encryption and sync.

Does Windows Hello work if I wear glasses or a hat?

Generally yes, but it depends on how different you look. Use the “Improve recognition” option to add a second scan with glasses or a hat on. If you change your look drastically (e.g., growing a full beard), you may need to re-register.

Can I have multiple fingerprints registered?

Yes. Under Windows Hello Fingerprint, you can click “Add another” to register additional fingers. This is useful if you want to unlock with either hand.

What if I forget my PIN?

You’ll need to reset it. On the sign-in screen, click “I forgot my PIN” (or “PIN forgotten”) and follow the prompts. You’ll need your Microsoft account password to verify your identity. If you’re using a local account, you’ll need the password you set during setup.

Can I disable Windows Hello and go back to a password?

Yes. Go to Settings > Accounts > Sign-in options. Under each method (Face, Fingerprint, PIN), click “Remove.” You can then sign in with your password. You can also toggle off “For improved security, only allow Windows Hello sign-in” to allow password sign-in.

Related

• How to Set Up Linux Bash Shell on Windows 10
• How to Verify a Valid Bank Account
• Fix Power Button Not Working on Windows 11