How to Configure Enhanced Sign-in Security in Windows 11

Enhanced Sign-in Security in Windows 11 strengthens your face or fingerprint login. This feature works with Windows Hello, the system that lets you sign into your PC using your face or fingerprint instead of a password.

Enhanced sign-in security adds an extra protection layer for Windows 11 biometric data, such as fingerprint scans. This security upgrade makes it much harder for unauthorized people to steal or fake user login information.

This security boost is especially important because hackers are always looking for ways to access your computer. Enhanced Sign-in Security helps prevent them from intercepting and misusing your face or fingerprint data.

When you turn this feature on, Windows 11 uses more secure hardware to protect your login details. This ensures that only trusted devices can be used to sign you in.

How to Turn Enhanced Sign-in Security On or Off

Let’s learn how to change this setting using the Windows Settings app.

Step 1Go to Sign-in Options

You can find Windows 11 sign-in options by opening ⚙️ the Settings app and going to the Accounts section. Click the ⊞ Start button, then the Settings gear icon, choose Accounts from the left menu, and finally click Sign-in options.

• Click the Start button. It’s usually in the bottom-left corner.
• Click the Settings gear icon.
• In ⚙️ the Settings window, click on Accounts in the left menu.
• Then, click on Sign-in options.

Quick Tip: You can also press the Windows key + I on your keyboard. This opens Settings. Then navigate to Accounts and Sign-in options. Alternatively, type “Sign-in options” in the Windows 🔍 search bar and select it.

Step 2Find Enhanced Sign-in Security Settings

The Enhanced Sign-in Security setting is located on the Sign-in options page, typically under ‘Additional settings’. For Windows 11, Version 24H2 and newer, scroll down on this page to find ‘Enhanced sign-in security’, which makes your sign-in method more secure.

For Windows 11, Version 24H2 and Newer:

• Scroll down on the Sign-in options page.
• Look for a section called Additional settings.
• You should see Enhanced sign-in security. There will be a switch next to it.

For Windows 11, Version 23H2:

• Look for the Additional settings section.
• You might see a setting called Sign in with an external camera or fingerprint reader. This controls Enhanced Sign-in Security.

Step 3Turn Enhanced Sign-in Security On or Off

Enhanced Sign-in Security is a setting that you can turn on or off. Turning the Enhanced Sign-in Security setting on makes your fingerprint or face login more secure by requiring compatible devices. Turning Enhanced Sign-in Security off allows more types of fingerprint readers or cameras, giving you more choices but less security.

Understanding the switch (Windows 11, v24H2+):

• Switch is OFF: Enhanced Sign-in Security is off. You can use more types of fingerprint readers or cameras. This gives you more choices.
• Switch is ON: Enhanced Sign-in Security is on. This is the most secure option for your fingerprint or face login. Only devices made for this security will work. Devices not made for this security won’t work for logging in. You can still use these devices in apps like Microsoft Teams.

Understanding the switch (Windows 11, v23H2):

• Switch is OFF: Enhanced Sign-in Security is actually ON. Your computer is using the stricter security. Some external devices might not work for logging in. You can still use them in apps.
• Switch is ON: Enhanced Sign-in Security is OFF. Your computer allows more types of fingerprint readers or cameras to be used for logging in. This is less secure but gives you more options.

Reference:

https://support.microsoft.com/en-US/Windows/Security/Identity-Signin/enhanced-sign-in-security-in-windows

Summary

Enhanced Sign-in Security in Windows 11 strengthens your Windows Hello login. You manage Enhanced Sign-in Security in the Sign-in options within ⚙️ Windows Settings. Turning Enhanced Sign-in Security on provides better protection by limiting device choices; turning Enhanced Sign-in Security off allows more device options but reduces overall security.