Windows Hello lets you sign in to your work computer with your face, your fingerprint, or a PIN instead of typing your password. It's faster for you and much harder for scammers, because your PIN and biometrics only work on your own computer.
This is optional. Nothing changes if you do nothing, and your password keeps working. Setup takes about 2 minutes.
Before you start, you'll need:
Your work computer, signed in with your work account
Your phone with Microsoft Authenticator (to approve one sign-in)
About 2 minutes
Screenshots below come from Microsoft's documentation and show Microsoft example accounts. Your screens will show your own name.
Select Start > Settings > Accounts > Sign-in options. Shortcut: press the Windows key, type sign-in options, and press Enter.
The Windows Hello options are the first three items under Ways to sign in (highlighted below). Always start with the PIN. Face and fingerprint are added after the PIN, and the PIN is your backup if the camera or reader can't see you.
A full-screen window titled Use Windows Hello with your account opens. Select OK. The wording says your organization "requires" it; that is standard Microsoft text. For us, Windows Hello is optional. If your computer has a Windows Hello camera or fingerprint reader, Windows may offer to set that up first. You can do it or skip it.
Windows asks you to verify your work account. A number appears on your screen. Open Microsoft Authenticator on your phone, type that number, and tap Yes. Your prompt may look a little different from this example.
In the Set up a PIN window, enter a PIN, enter it again to confirm, and select OK. Follow any requirements shown on screen. Choose something you will remember, but avoid easy guesses like 123456, 111111, or your birthday.
Back in Sign-in options, select Facial recognition (Windows Hello) or Fingerprint recognition (Windows Hello) > Set up, then follow the prompts.
Face: look straight at the camera for a few seconds. If you wear glasses, select Improve recognition afterward to scan with and without them.
Fingerprint: lift and touch your finger on the reader several times. You can add more fingers later.
These options only work if your computer has a Windows Hello camera or fingerprint reader.
Heads up: You may see the Use Windows Hello with your account screen (Step 3) on its own when you sign in. That is expected and safe, even though it says "requires." You can set it up right then, or close it and do it later.
The next time you lock (Windows key + L) or restart your computer, just look at the camera, touch the reader, or type your PIN. To switch methods or use your password, select Sign-in options on the lock screen.
Once you are signed in to Windows with Windows Hello, Microsoft 365 (Outlook, Teams, OneDrive) usually signs you in automatically. There is nothing extra to set up for your work computer.
A passkey replaces your password with your device's own face, fingerprint, or screen lock. On your work computer, Windows Hello already is your passkey. If you also sign in to Microsoft 365 on a phone, tablet, or home computer, you can add a passkey there.
Your work computer: Windows Hello (the steps above). Nothing else needed.
Your phone or tablet: a passkey saved in Microsoft Authenticator or your phone's password manager (iCloud Keychain or Google Password Manager).
A home or shared computer: use the passkey on your phone by scanning a QR code, or save a passkey to your browser's password manager (Chrome or Edge) or a password manager you already use.
Don't add a second passkey on your work computer. If you choose This Windows device while on your work computer, you may see an error saying a passkey already exists. That is normal and means you are already covered.
On the device where you want the passkey, go to aka.ms/mysecurityinfo and sign in with your work account.
Then select Next. If Passkey isn't listed, submit a Service Desk ticket.
Your device shows the places it can save a passkey, and the list depends on your device and browser. On a phone, choose Microsoft Authenticator or your phone's password manager. On a home computer, choose your browser's password manager, or pick iPhone, iPad, or Android device and scan the QR code with your phone's camera to save it there.
Confirm with your face, fingerprint, or screen lock. Give the passkey a name you will recognize (for example, iPhone passkey), select Next, then Done.
On a Microsoft sign-in page, enter your email, or select Sign-in options > Face, fingerprint, PIN or security key. Then confirm with your device.
If your passkey is on your phone and you are on a different computer, choose iPhone, iPad, or Android device, then scan the QR code with your phone's camera. Keep Bluetooth on for both devices.
Do I have to set this up?
No. Windows Hello and passkeys are optional. Your password continues to work.
Do I still need my password?
Rarely. Your PIN, face, or fingerprint replaces typing your password day to day. Keep your password, though; you may still need it on other devices.
Is my face or fingerprint sent to anyone?
No. Your face and fingerprint data stay encrypted on your computer and are never uploaded. Windows stores a mathematical representation, not a photo.
Is my PIN the same as my password?
No. Your PIN only works on the one computer where you created it, and it never leaves that computer. Changing your password later does not affect your PIN.
I forgot my PIN.
On the sign-in screen, select I forgot my PIN and follow the prompts. You will confirm it's you with Authenticator, then create a new PIN. If you are already signed in, go to Settings > Accounts > Sign-in options > PIN (Windows Hello) > I forgot my PIN.
Windows Hello doesn't recognize me.
Type your PIN instead. It always works as a backup. For face sign-in, make sure the camera isn't covered and try Improve recognition in Sign-in options. For fingerprint, clean the reader and make sure your finger is dry.
I don't see Facial recognition or Fingerprint as options.
Your computer doesn't have a Windows Hello camera or fingerprint reader. The PIN gives you the same security benefits on its own.
I got a new or replacement computer.
Windows Hello is set up per computer. Repeat the setup steps on the new one.
I got a new phone.
Passkeys saved in iCloud Keychain or Google Password Manager usually move to your new phone automatically. Passkeys saved in Microsoft Authenticator stay with the old phone, so add a new passkey from the new phone and remove the old one in Security info.
My phone passkey QR code sign-in isn't working.
Turn on Bluetooth and make sure both devices have internet. Use your phone's built-in camera app to scan the code.
What webcams work with Windows Hello?
Need help?
Submit a Service Desk ticket and we will be glad to help.
Screenshots on this page courtesy of Microsoft documentation (Microsoft Learn and Microsoft Support).
