How to Configure Enhanced Sign-in Security in Windows 11

Enhanced Sign-in Security in Windows 11 adds an extra layer of hardware protection to your face scan or fingerprint login. This Windows security feature locks down your biometric data so hackers cannot steal or fake your login details.

Most modern Windows 11 computers with compatible hardware support this setting to keep your sign-in details safe from attacks. You need a PC with a supported biometric sensor and specific processor features to turn it on.

How to Turn Enhanced Sign-in Security On or Off

Changing this configuration takes only a few moments inside the Windows Settings ⚙️ app.

Step 1Go to Sign-in Options

Accessing Windows 11 sign-in controls begins by opening the Settings ⚙️ app and navigating to the Accounts section. Click the Start button ⊞, select the Settings gear icon, choose Accounts from the left menu, and click Sign-in options.

• Click the Start button. It’s usually in the bottom-left corner.
• Click the Settings gear icon.
• In the Settings ⚙️ window, click on Accounts in the left menu.
• Then, click on Sign-in options.

Quick Tip: Pressing Win+I on your keyboard opens Settings directly. Navigate to Accounts and choose Sign-in options from there. Typing “Sign-in options” into the Windows search bar 🔍 provides another fast route.

Step 2Find Enhanced Sign-in Security Settings

The Enhanced Sign-in Security setting sits on the Sign-in options page, usually nestled under ‘Additional settings’. Windows 11 Version 24H2 and newer requires scrolling down this page to locate the toggle.

For Windows 11, Version 24H2 and Newer:

• Scroll down on the Sign-in options page.
• Look for a section called Additional settings.
• You should see Enhanced sign-in security. There will be a switch next to it.

For Windows 11, Version 23H2:

• Look for the Additional settings section.
• You might see a setting called Sign in with an external camera or fingerprint reader. This controls Enhanced Sign-in Security.

Step 3Turn Enhanced Sign-in Security On or Off

Enabling Enhanced Sign-in Security locks down your biometrics by requiring specialized hardware. Disabling the toggle permits a broader range of fingerprint readers and cameras, trading maximum security for peripheral compatibility.

Understanding the switch (Windows 11, v24H2+):

• Switch is OFF: Enhanced Sign-in Security is off. You can use more types of fingerprint readers or cameras. This gives you more choices.
• Switch is ON: Enhanced Sign-in Security is on. This is the most secure option for your fingerprint or face login. Only devices made for this security will work. Devices not made for this security won't work for logging in. You can still use these devices in apps like Microsoft Teams.

Understanding the switch (Windows 11, v23H2):

Microsoft inverted the toggle logic in older builds, which catches many people off guard.

• Switch is OFF: Enhanced Sign-in Security is actually ON. Your computer is using the stricter security. Some external devices might not work for logging in. You can still use them in apps.
• Switch is ON: Enhanced Sign-in Security is OFF. Your computer allows more types of fingerprint readers or cameras to be used for logging in. This is less secure but gives you more options.

Reference:

https://support.microsoft.com/en-US/Windows/Security/Identity-Signin/enhanced-sign-in-security-in-windows

Summary

Enhanced Sign-in Security reinforces Windows Hello logins within the Windows Settings app. Turning this protection on restricts device choices for tighter security, while turning it off broadens hardware support at the expense of overall safety.