How to Enable Passwordless Sign-in in Windows 11

Why Do This?

Passwordless sign-in for Windows 11 enhances device security by replacing traditional passwords with Windows Hello methods like your face, fingerprint, or PIN. Enabling this feature replaces traditional passwords with Windows Hello methods like a PIN, face, or fingerprint. Linked apps and browsers then switch to biometric authentication automatically, leaving standard passwords behind.

Once passwordless sign-in is enabled, your apps and browsers linked to your Microsoft account will automatically adopt Windows Hello for authentication. Your previous passwords will then be unusable for signing into Windows.

Learn more: How to go passwordless with your Microsoft account – Microsoft Support and Go passwordless in Windows – Microsoft Support

What You Need to Know

An administrator account is required on the computer before making this change. Once enabled, the option to enter a username and password will vanish from the sign-in screen, and you will not be able to remove your PIN associated with your Microsoft account.

When you turn on passwordless sign-in:

• The option to enter a username and password will be removed from the sign-in screen
• You cannot remove your PIN from your Microsoft account
• Password and picture password sign-in options will not be available

Option 1Use Settings

The Settings app offers a quick way to enable passwordless sign-in, provided an active Microsoft account is signed in on the machine. Press Win+I to launch Settings, select Accounts on the left menu, and click Sign-in options on the right. Locate the setting titled 'For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device'.

1. Open Settings by pressing Win+I on your keyboard.
2. Click Accounts on the left side. Then click Sign-in options on the right side
3. Find the setting that says For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. Turn it On or Off based on what you want.
4. Close Settings when you're done.

Option 2Use Registry Editor

⚠️ This method also requires administrator privileges.

Open the Windows Terminal app as an administrator and execute the following commands.

To Turn On Passwordless Sign-in

This represents the default configuration.

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessBuildVersion /t REG_DWORD /d 2 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessUpdateType /t REG_DWORD /d 1 /f

To Turn Off Passwordless Sign-in

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessBuildVersion /t REG_DWORD /d 0 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessUpdateType /t REG_DWORD /d 1 /f

Summary

Passwordless sign-in in Windows 11 enhances device security by replacing traditional passwords with Windows Hello methods like your face, fingerprint, or PIN.