Windows Hello: What It Is and How to Set It Up

Windows Hello is a biometric sign-in feature built into Windows 10 and Windows 11 that lets you unlock your device with your face, fingerprint, or a PIN instead of typing a password. It is designed to be both faster and more secure than a traditional password because it uses unique physical characteristics or a device-specific PIN that never travels over the network. This guide explains what Windows Hello is, how it works, and walks you through setting it up on a Windows 11 PC, including troubleshooting common issues.

What Exactly Is Windows Hello?

Windows Hello is Microsoft’s biometric authentication framework, introduced with Windows 10 in 2015. It is not a single feature but a set of technologies that work together to replace passwords for signing into your device, apps, and online services. The three main sign-in methods it supports are:

Facial recognition – uses an infrared (IR) camera to map your face in 3D, even in low light.
Fingerprint recognition – uses a capacitive fingerprint sensor built into laptops, keyboards, or external readers.
PIN – a numeric (or alphanumeric) code that is tied to the specific device, not to your Microsoft account.

Windows Hello also works with companion devices (like a phone or smartwatch) to unlock your PC when you are nearby, but the core methods are the three above. It is important to note that Windows Hello is not the same as a password manager; it is the authentication layer that verifies you are you.

How Windows Hello Works

Windows Hello uses two key technologies to keep your biometric data safe:

Biometric data is stored locally – your face or fingerprint data never leaves your device. It is encrypted and stored in a secure area of the hardware called the Trusted Platform Module (TPM) or in the processor’s secure enclave. This means even if your device is stolen, the data cannot be extracted or used on another machine.
PIN is device-specific – unlike a password, your PIN is not sent over the internet. It is used to unlock the local encryption keys that protect your data. If someone steals your PIN, they would need your physical device to use it.

When you sign in with your face or fingerprint, the sensor captures the image or scan, converts it into a mathematical representation (a template), and compares it to the stored template. If it matches, you are signed in. The process takes less than a second, which is why it feels instant.

For facial recognition, Windows Hello requires a special IR camera that can see depth. Regular webcams cannot be used because they lack the IR sensor needed to prevent spoofing with a photo. Many modern laptops have this built-in, but you can also buy an external IR camera that plugs into a USB port.

How to Set Up Windows Hello in Windows 11

Before you start, make sure your device has the necessary hardware: a fingerprint reader or an IR camera. If you are not sure, check your device’s specifications or look for a small camera icon with an IR LED next to it. For a PIN, you do not need any special hardware.

Here are the steps to set up each method in Windows 11:

Open Settings – Press Win + I to open Settings.
Navigate to Accounts – In the left sidebar, click “Accounts”.
Select Sign-in options – On the right, click “Sign-in options”.
Set up a PIN first – Windows Hello requires a PIN as a fallback. Under “PIN (Windows Hello)”, click “Add”. If you already have a PIN, you can skip this step.
Set up face or fingerprint – Under “Facial recognition (Windows Hello)” or “Fingerprint recognition (Windows Hello)”, click “Set up”. You will be prompted to enter your PIN to verify it is you.
Follow the prompts – For face, look at the camera and follow the on-screen instructions to position your face. For fingerprint, place your finger on the sensor several times until it registers.
Add a recovery PIN – If you set up face or fingerprint, you will be asked to create a PIN as a backup. This is mandatory and ensures you can still sign in if the biometric fails.

Once set up, you can use Windows Hello to sign in, and you can also enable “Windows Hello sign-in for Microsoft apps” to use it for apps like Outlook or Teams.

Choosing the Right Method for You

Each method has its pros and cons, so the best choice depends on your hardware and how you use your device:

Facial recognition – Fast and hands-free. It works well if you sit directly in front of your screen. It can be fooled by a high-quality photo if the camera lacks depth sensing, but most IR cameras are secure. It does not work well in complete darkness unless the camera has an IR illuminator.
Fingerprint – Very fast and works in any lighting. It is ideal for laptops where you rest your hand on the keyboard. However, it requires a fingerprint sensor, which is not present on all devices. Some sensors are finicky with dry or wet fingers.
PIN – Works on any device, even without biometric hardware. It is more secure than a password because it is device-specific, but it can be shoulder-surfed. Use a long PIN (at least 6 digits) for better security.

If you have both face and fingerprint, you can enable both and Windows will let you use either. This is useful if one method fails (e.g., you are wearing a mask).

Common Problems and How to Fix Them

Even with proper setup, you might run into issues. Here are the most common ones and their fixes:

“We couldn’t find a fingerprint scanner” – This means your device does not have a fingerprint reader, or the driver is not installed. Check Device Manager under “Biometric devices”. If nothing is there, you need external hardware.
Face sign-in doesn’t work in low light – Make sure the IR camera is not blocked by a privacy shutter or sticker. Some cameras have a small LED that indicates IR activity; if it is off, the camera may not be enabled.
Windows Hello option is greyed out – This often happens when the device does not meet the hardware requirements, or the TPM is disabled. You can enable TPM in your BIOS/UEFI settings (look for “Intel PTT” or “AMD fTPM”).
Fingerprint sensor is slow or inaccurate – Re-register your finger, making sure to cover the sensor fully and vary the angle slightly. Clean the sensor with a dry cloth.
After a Windows update, Windows Hello stops working – Update your drivers via Windows Update or the manufacturer’s website. Sometimes a simple restart fixes it.

If you are still stuck, you can always sign in with your password and re-run the setup.

Windows Hello vs. Traditional Passwords

Windows Hello is not just a convenience; it is a security upgrade. Here is how it compares to passwords:

Security – Biometric data is unique and cannot be guessed or phished. A password can be stolen and used from anywhere, but your face or fingerprint cannot be used without your physical presence.
Speed – Signing in with a face or fingerprint takes less than a second, versus several seconds to type a password.
Convenience – No need to remember complex passwords. You only need your PIN as a fallback.
Limitations – Biometrics are not perfect: they can be affected by cuts, aging, or changes in appearance. A PIN is a good backup.

One common misconception is that Windows Hello stores a picture of your face or a copy of your fingerprint. It does not. It stores a mathematical template that cannot be reversed to recreate the original image. This is why it is safe even if the data is compromised.

Frequently Asked Questions

Is Windows Hello safe to use?

Yes, Windows Hello is considered safe because your biometric data is stored locally on your device, not in the cloud. It is encrypted and protected by the TPM chip. Even if someone steals your device, they cannot extract your biometric data.

Can I use Windows Hello without a Microsoft account?

Yes, you can set up a PIN for a local account, but facial and fingerprint recognition require a Microsoft account because they are tied to your identity. If you use a local account, you can still use a PIN, but not the biometric methods.

Does Windows Hello work with third-party apps?

Yes, Windows Hello can be used with apps that support it, such as password managers (like LastPass or 1Password) and banking apps. The app must integrate with the Windows Hello API, which many do.

What if I forget my PIN?

If you forget your PIN, you can reset it by clicking “I forgot my PIN” on the sign-in screen. You will need to verify your identity with your Microsoft account password or a recovery email. After resetting, you may need to re-register your biometrics.

Can I use Windows Hello on multiple devices?

Yes, you can set up Windows Hello on each of your Windows 11 devices. Your biometric data is stored separately on each device, so you need to set it up on each one. Your PIN is also device-specific, so you may have different PINs on different devices.

Is Windows Hello available on Windows 10?

Yes, Windows Hello was introduced in Windows 10 and is available in Windows 11 as well. The setup process is similar, though the Settings layout differs slightly.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →