How to Enable Passwordless Sign-in in Windows 11

Why Do This?

Passwordless sign-in enhances device security by replacing passwords with Windows Hello (a biometric or PIN sign-in method). Linked apps and browsers then switch to biometric authentication automatically, leaving standard passwords behind.

Once passwordless sign-in is enabled, your apps and browsers linked to your Microsoft account will automatically adopt Windows Hello for authentication. Your previous passwords will then be unusable for signing into Windows.

Learn more: How to go passwordless with your Microsoft account – Microsoft Support and Go passwordless in Windows – Microsoft Support

What You Need to Know

An administrator account is required on the computer before making this change. Once enabled, the option to enter a username and password will vanish from the sign-in screen, and you will not be able to remove your PIN associated with your Microsoft account.

When you turn on passwordless sign-in:

• The option to enter a username and password will be removed from the sign-in screen
• You cannot remove your PIN from your Microsoft account
• Password and picture password sign-in options will not be available

Option 1Use Settings

Open Settings by pressing Win+I on your keyboard. Click Accounts on the left side, then click Sign-in options on the right side. Locate the setting titled 'For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device'.

1. Open Settings by pressing Win+I on your keyboard.
2. Click Accounts on the left side. Then click Sign-in options on the right side
3. Find the setting that says For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. Turn it On or Off based on what you want.
4. Close Settings when you're done.

A Windows Hello method, such as a PIN, facial recognition, or fingerprint, is required.

Option 2Use Registry Editor

⚠️ This method also requires administrator privileges.

Open the Windows Terminal app as an administrator and execute the following commands.

To Turn On Passwordless Sign-in

This represents the default configuration.

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessBuildVersion /t REG_DWORD /d 2 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessUpdateType /t REG_DWORD /d 1 /f

To Turn Off Passwordless Sign-in

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessBuildVersion /t REG_DWORD /d 0 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v DevicePasswordLessUpdateType /t REG_DWORD /d 1 /f

Summary

Passwordless sign-in in Windows 11 enhances device security by replacing traditional passwords with Windows Hello methods like your face, fingerprint, or PIN.