How to Allow Windows Hello Secure Sign-in to Windows 11 Using a Fingerprint

What is Windows Hello?

Windows Hello is Microsoft’s sign-in system for Windows. Instead of a password, it checks your fingerprint, your face, or a PIN (a short code tied to one device). Fingerprint and face sign-in each need compatible hardware, while a PIN works on any PC.

Microsoft’s release notes for the “Everyday experiences, reimagined” update (October 15, 2026) describe improvements to both face and fingerprint recognition. Signing in with Windows Hello should be faster and more reliable once your PC has the update. The rollout is gradual, so a PC that has not received it yet will get it later. To check, open Settings › Windows Update and select Check for updates.

Update KB5089573 changes which method Windows offers first. When Windows Hello face or fingerprint is set up and available, it is now the default sign-in method every time you sign in. That holds even if you used a different method the last time.

There is one exception. If you sign in with your PIN three times in a row, Windows stays with PIN until you switch methods. To switch back to your fingerprint:

1. On the sign-in screen, select Sign-in options. The available methods appear as icons.
2. Select the fingerprint option.
3. Touch the fingerprint reader with the finger you enrolled.

That’s it. Windows should unlock with your fingerprint, and it will keep offering fingerprint first as long as you do not fall into the three-PIN pattern again.

Windows Hello is available in both Windows 11 Home and Pro. The Settings steps and the registry method in this tutorial work the same way on both editions. The release notes do not describe any change to the registry method.

Small USB security keys also work for sign-in, though they need separate configuration. Treat them as a separate setup. They do not replace the fingerprint reader, and the steps below do not cover them.

Why Turn Fingerprint Sign-In On or Off?

Windows Hello fingerprint sign-in lets you unlock your computer with your finger instead of typing a password. Turn it on to save time at sign-in. Turn it off if your fingerprint reader stops working or you prefer a standard PIN.

The registry method below works as an on/off switch for the feature. A registry entry is a named setting stored in the Windows registry, the database where Windows keeps its configuration. Removing the entry restores the default behavior, so you can undo the change at any time.

Keep the default in mind. With fingerprint set up and available, Windows offers it first at every sign-in, as described in the KB5089573 release notes. Blocking fingerprint sign-in with the registry is the way to stop that.

Failing fingerprint readers and personal preference are the usual reasons to turn this feature off. Falling back to your PIN or password gives you a dependable way in when the sensor malfunctions.

How to Enable or Disable Fingerprint Sign-In

Editing the Windows Registry carries risk, because a wrong change can make Windows unstable. Follow the steps exactly and keep these points in mind:

• Change only the one entry described here and leave everything else alone.
• If you want a safety net, back up first. In Registry Editor, choose File › Export, then save a copy of the registry to a location you can find later.
• Double-check each name and value before you click OK.

Step 1Open Windows Registry Editor

This change needs administrator rights. If you sign in with a standard account, Windows asks for an administrator’s credentials when you open Registry Editor. If you do not have them, ask the person who manages the PC to make the change.

1. Press the Win and R on the keyboard at the same time. The Run dialog box opens in the lower-left corner of the screen.
2. Type regedit in the Open box.
3. Press Enter. Windows now asks for permission to continue, as described below.

1. Look for the User Account Control prompt asking for permission to let the app make changes to your device.
2. Click Yes to continue. If the prompt asks for a password instead, enter the administrator account’s credentials. Registry Editor opens.

That’s it. Registry Editor is open and ready for you to move to the right folder.

Step 2Find the Fingerprint Setting

In Registry Editor, use the left sidebar to navigate to the folder shown above. The sidebar works like File Explorer, with each folder opening into the ones inside it.

1. Click the small arrow next to each folder to expand it, working down the path one level at a time.
2. When you reach the last folder, click its name once. Its contents appear in the right pane.

You should now be looking at the correct folder, with its entries listed on the right. If a folder in the path is missing, stop and recheck the path before you change anything.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{BEC09223-B018-416D-A0AC-523971B639F5}

Step 3Change the Fingerprint Sign-In Option

Registry Editor (a tool for advanced system settings) lets you turn Windows Hello fingerprint sign-in on or off by editing one registry value. To block fingerprint access, you set an entry value. To allow it, you delete the entry.

The entry is named Disabled. If you do not see it in the right pane, it has not been created yet. That usually means fingerprint sign-in is currently allowed.

To disable fingerprint sign-in:

1. Double-click the entry named Disabled. The edit window opens.
2. Change its value to 1.
3. Click OK. The entry now shows the new value in the right pane.

That’s it. Fingerprint sign-in is now blocked once you restart, and you will sign in with your PIN or password. If the Disabled entry does not exist yet, create it first using the steps further down.

To enable fingerprint sign-in:

1. Find the Disabled entry in the right pane.
2. Right-click it and choose Delete.
3. Confirm the deletion if Windows asks. The entry disappears from the list.

That’s it. Fingerprint sign-in is allowed again after a restart. Do not set the value to anything else, because removing the entry is what allows it. Once your fingerprint is available, Windows offers it first at sign-in again.

Custom registry values control whether a feature is available across the profile. If the Disabled entry is not there and you want to turn fingerprint sign-in off, create it:

1. Right-click an empty spot in the right pane of Registry Editor.
2. Select New › DWORD (32-bit) Value. A new entry appears with its name ready to edit.
3. Name it Disabled and press Enter.
4. Double-click the new entry and set its value to 1.
5. Click OK. The new entry appears in the right pane with the value 1.

You should now have a Disabled entry set to 1, which blocks fingerprint sign-in after a restart. Deleting the entry re-enables it.

Step 4Restart Your Computer

1. Close Registry Editor.
2. Open Start › Power › Restart to apply the change. Choose Restart rather than shutting down and powering on, because Windows 11 may use fast startup and keep some settings in memory.
3. Wait for the PC to reach the sign-in screen. The change is now in effect.

That’s it. The PC has restarted with your fingerprint setting applied.

After the restart, check that the change took effect. On the sign-in screen, see whether the fingerprint option is offered.

1. Open Settings › Accounts › Sign-in options.
2. Look at the fingerprint recognition entry. It shows whether Windows Hello fingerprint sign-in is available on this PC.
3. If the result is not what you expected, reopen Registry Editor and check that the Disabled entry is present or absent as intended.

You should now know whether fingerprint sign-in is on or off. If you allowed it and your fingerprint is set up, Windows should offer it first at every sign-in, per the KB5089573 release notes. After three PIN sign-ins in a row, Windows stays with PIN until you pick another method on the sign-in screen.

Once your PC has Microsoft’s October 2026 update, fingerprint sign-in should also feel faster and more reliable. Because Microsoft is rolling the update out in stages, some PCs will see the improvement later than others.

Need More Help?

Review the official Microsoft documentation covering Windows sign-in options and account protection for additional details. It is the best place to check hardware requirements and any changes in newer Windows 11 builds.

For the face and fingerprint sign-in improvements, read Microsoft’s release notes, “What’s new in Windows 11: Everyday experiences, reimagined,” published on October 15, 2026, on the Windows Experience Blog. The default sign-in change is described in the support article for KB5089573 at support.microsoft.com/help/5089573.

Summary

• You can turn fingerprint sign-in on or off depending on your needs. Your PIN or password keeps working either way.
• Changing this setting requires using the Registry Editor, so be careful. Back up the registry first if you are unsure.
• Fingerprint sign-in adds security but may not work on all devices. You need a built-in or USB fingerprint reader. Microsoft’s October 2026 update improves fingerprint and face recognition, and it is reaching PCs gradually. Update KB5089573 also makes Windows Hello the default sign-in method when a fingerprint or face is set up, unless you use your PIN three times in a row.
• Always restart your PC after making changes.