How to Configure Enhanced Sign-in Security in Windows 11

Enhanced Sign-in Security adds hardware-level protection to Windows Hello face scan and fingerprint logins by locking down biometric data to block theft and fake sign-in attempts. This Windows 11 feature requires a PC with a supported biometric sensor and specific processor features to keep your login details safe from attacks.

How to Turn Enhanced Sign-in Security On or Off

Changing this configuration takes only a few moments inside the Windows Settings ⚙️ app.

Step 1Go to Sign-in Options

Sign-in options in Windows 11 are located inside the Settings ⚙️ app under the Accounts menu. You need to open this screen first to change your Windows 11 enhanced sign-in settings. Open the Start menu ⊞, click Settings, choose Accounts on the left side, and click Sign-in options to reach the correct page.

• Click the Start button. It’s usually in the bottom-left corner.
• Click the Settings gear icon.
• In the Settings ⚙️ window, click on Accounts in the left menu.
• Then, click on Sign-in options.

Quick Tip: Pressing Win+I on your keyboard opens Settings directly. Navigate to Accounts and choose Sign-in options from there. Typing “Sign-in options” into the Windows search bar 🔍 provides another fast route.

Step 2Find Enhanced Sign-in Security Settings

Enhanced sign-in security is located on the Sign-in options page under the Additional settings section. If you use Windows 11 Version 24H2 or newer, scroll down the page to find this feature. Once you locate the setting, you can check whether your PC currently supports it.

For Windows 11, Version 24H2 and Newer:

• Scroll down on the Sign-in options page.
• Look for a section called Additional settings.
• You should see Enhanced sign-in security. There will be a switch next to it.

For Windows 11, Version 23H2:

• Look for the Additional settings section.
• You might see a setting called Sign in with an external camera or fingerprint reader. This controls Enhanced Sign-in Security.

Pending Windows updates can also cause missing options, so check Settings › Windows Update for available patches.

Step 3Turn Enhanced Sign-in Security On or Off

Windows 11 enhanced sign-in security can be turned on or off using the toggle switch inside your Sign-in options. Turning this feature on forces your PC to use only specialized biometric hardware for your fingerprint reader or camera, which adds extra protection but might block some older hardware accessories.

Understanding the switch (Windows 11, v24H2+):

• Switch is OFF: Enhanced Sign-in Security is off. You can use more types of fingerprint readers or cameras. This gives you more choices.
• Switch is ON: Enhanced Sign-in Security is on. This is the most secure option for your fingerprint or face login. Only devices made for this security will work. Devices not made for this security won't work for logging in. You can still use these devices in apps like Microsoft Teams.

Understanding the switch (Windows 11, v23H2):

Microsoft inverted the toggle logic in older builds, which catches many people off guard.

• Switch is OFF: Enhanced Sign-in Security is actually ON. Your computer is using the stricter security. Some external devices might not work for logging in. You can still use them in apps.
• Switch is ON: Enhanced Sign-in Security is OFF. Your computer allows more types of fingerprint readers or cameras to be used for logging in. This is less secure but gives you more options.

Reference:

https://support.microsoft.com/en-US/Windows/Security/Identity-Signin/enhanced-sign-in-security-in-windows

Summary

Enhanced Sign-in Security reinforces Windows Hello logins within the Windows Settings app. Turning this protection on restricts device choices for tighter security, while turning it off broadens hardware support at the expense of overall safety.