How to set up and use a passwordless sign-in with Windows Hello for Business on Windows 11

Summary

This guide helps you troubleshoot and resolve: How to set up and use a passwordless sign-in with Windows Hello for Business on Windows 11. Follow the steps below to fix the issue.

Common Causes

Windows Hello for Business replaces passwords with strong two-factor authentication using a PIN, facial recognition, or fingerprint. Once configured, you can sign in to your company laptop without typing a password, which reduces the risk of credential theft and phishing. This guide walks you through enabling and using Windows Hello for Business on your Windows 11 device.

Before You Begin

• Ensure your Windows 11 device is joined to your organisation’s domain or Azure AD (Entra ID). If you are unsure, contact your IT administrator.
• Have your current Windows password handy — you will need it once during setup.
• If you plan to use facial recognition or fingerprint, confirm your device has a compatible infrared camera or fingerprint reader.
• Check that Windows is fully up to date by going to Settings > Windows Update and selecting Check for updates.

Quick Fix Steps

1. Open Settings > Accounts > Sign-in options.
2. Under Ways to sign in, select PIN (Windows Hello).
3. Click Set up and follow the prompts to create a PIN.
4. If available, set up Facial recognition or Fingerprint recognition.
5. Restart your computer and sign in using your new PIN or biometric method.

Detailed Instructions

Step 1: Check Your Account Type

Windows Hello for Business requires a work or school account. To verify:

1. Open Settings by pressing Windows key + I.
2. Go to Accounts > Access work or school.
3. Confirm your organisation account is listed. If not, select Connect and sign in with your work credentials, or contact your IT administrator.

Step 2: Set Up a Windows Hello PIN

1. In Settings, navigate to Accounts > Sign-in options.
2. Under Ways to sign in, locate PIN (Windows Hello).
3. Click Set up.
4. Enter your current Windows password when prompted to verify your identity.
5. Create a PIN that meets your organisation’s complexity requirements. By default, Windows 11 allows PINs of 4 to 127 characters, including letters and symbols.
6. Re-enter the PIN to confirm, then click OK.

Step 3: Configure Biometric Sign-In (Optional)

If your device has a compatible infrared camera or fingerprint reader, you can add biometric authentication:

1. In Sign-in options, select Facial recognition (Windows Hello) or Fingerprint recognition (Windows Hello).
2. Click Set up.
3. Follow the on-screen instructions. For facial recognition, position your face within the frame and slowly turn your head as directed. For fingerprint, lift and rest your finger on the sensor several times until Windows captures the full print.
4. Once complete, click Close.

Step 4: Test Passwordless Sign-In

1. Lock your computer by pressing Windows key + L.
2. At the sign-in screen, you should see options for PIN, facial recognition, or fingerprint instead of a password field.
3. Use your chosen method to sign in.
4. If prompted for a password, restart your device and try again. Some policies require a password at first sign-in after configuration.

Using Windows Hello for Business Day to Day

• Signing in: At the lock screen, simply look at the camera, touch the fingerprint sensor, or enter your PIN.
• UAC prompts: When installing software or changing system settings, Windows may ask you to authenticate with your PIN or biometric method instead of a password.
• Passwordless apps: Some Microsoft 365 and Azure AD-integrated applications will accept Windows Hello authentication automatically.

Troubleshooting

“This option is currently unavailable”

• Your device may not meet hardware requirements for facial recognition or fingerprint. A PIN still works for passwordless sign-in.
• Your organisation may have disabled Windows Hello via Group Policy or Intune. Contact your IT administrator to confirm.
• Ensure your device is not in S mode, which does not support Windows Hello for Business.

PIN Not Accepted After Setup

• Confirm you are entering the PIN on the same device where you created it. PINs do not roam between computers.
• If you have forgotten your PIN, select I forgot my PIN on the sign-in screen and follow the prompts to reset it using your password.

Facial Recognition Fails in Low Light

• Windows Hello uses infrared, so it should work in the dark. However, direct sunlight or strong backlighting can interfere. Try adjusting your position or lighting.
• Remove glasses, hats, or other items that obscure your face, then retry.
• Re-run facial recognition setup from Settings > Accounts > Sign-in options to improve recognition accuracy.

Fingerprint Reader Not Responding

• Clean the fingerprint sensor with a dry, lint-free cloth.
• Ensure your finger is clean and dry. Moisture or residue can prevent accurate reads.
• Remove and re-add your fingerprint in Sign-in options.

Windows Hello Works but Some Apps Still Ask for a Password

• Not all applications support Windows Hello for Business. Legacy or third-party apps may still require a password.
• Check with the software vendor to see if passwordless authentication is supported.

If you continue to experience issues after following this guide, please Open a Ticket and our support team will assist you. You may also find the Password reset (Windows login) article helpful if you have forgotten your password.

Still Having Issues?