How to Enable Enhanced Sign-in Security on Windows 11

What is Enhanced Sign-in Security?

Enhanced Sign-in Security on Windows 11 adds a stronger lock to your computer login.

Enhanced Sign-in Security (ESS) adds extra protection to your sign-in information. ESS uses special hardware and software built into your PC to prevent hackers from stealing fingerprint or facial recognition details.

What Does Your PC Need to Support ESS?

Your device should have:

• Virtualization-Based Security (VBS) turned on
• Trusted Platform Module 2.0 (TPM 2.0) chip installed
• A biometric sensor (camera or fingerprint reader) that supports ESS
• Device software (firmware) that supports secure biometric hardware

How to Turn On Enhanced Sign-in Security (ESS)

You can turn on Enhanced Sign-in Security (ESS) in Windows 11 using the Settings app for extra login protection.

Enhanced Sign-in Security (ESS) offers improved protection for your Microsoft account. Users can activate or deactivate ESS through the Windows Settings application. This security feature uses a one-time code sent to your email or phone when signing in from a new device, adding an extra layer of safety against unauthorized access.

1. Click the ⊞ Start menu button at the bottom-left of your screen, then choose Settings. Or, press Windows key + I on your keyboard to ⚙️ open Settings quickly.
2. In Settings, click Accounts on the left menu.

   

3. On the right side, click Sign-in options.

   

4. Scroll down to find Sign in with an external camera or fingerprint reader under Additional settings. Toggle the switch to On to enable or Off to disable ESS.

   

5. Close ⚙️ the Settings app when done.

How to Enable ESS Using Registry Editor (Advanced)

If you’re comfortable with advanced settings, you can enable Enhanced Sign-in Security (ESS) using the Windows Registry Editor.

If you’re comfortable with advanced settings, you can also turn ESS on or off using the Windows Registry Editor.

1. Open the Registry Editor by pressing Windows key + R, type regedit, and press Enter. (If you want help opening Registry Editor, see this guide.)
   
2. In Registry Editor, go to this folder path: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WinBio
3. Look for a value named SupportPeripheralsWithEnhancedSignInSecurity in the right pane.
4. Double-click it to open.

   • Enter 0 to turn ON Enhanced Sign-in Security.
   • Enter 1 to turn OFF Enhanced Sign-in Security.
5. If the value is missing, right-click inside the right pane, choose New > DWORD (32-bit) Value, name it SupportPeripheralsWithEnhancedSignInSecurity, then set the value as above.
6. Close Registry Editor and 🔄 restart your computer to apply changes.

   

What Happens After You Turn On ESS?

Enhanced Sign-in Security (ESS) requires you to enter your password or PIN during the next sign-in. After you enter your password or PIN, you must re-register your face and fingerprint. This extra sign-in step increases biometric data protection by demanding re-authentication.

Summary

• Extra Protection: ESS makes your sign-in safer by using modern hardware and software.
• Check Your Device: Make sure your PC supports ESS before trying to enable it .
• Easy to Change: You can turn ESS on or off in Settings or Registry Editor.
• Setup Again: After enabling ESS, you will need to set up your face and fingerprint sign-ins again.
• Keep Hackers Away: ESS helps stop bad people from stealing your biometric info.

Enhanced Sign-in Security (ESS) makes your sign-in safer by using modern hardware and software, helping keep hackers away.

Reference: Microsoft – Enhanced Sign-in Security