How to Turn On or Off Enhanced Anti-Spoofing for Windows Hello Face Authentication in Windows 11

|

|

The article presents a detailed guide on enabling or disabling enhanced anti-spoofing for Windows Hello face authentication in Windows 11. This is a feature of Windows 11’s Windows Hello system that enhances security through PIN, facial recognition, or fingerprint sign-in options. To adjust this feature, users can follow the steps outlined via either the Local…

This article explains how to turn on or off enhanced anti-spoofing for Windows Hello face authentication in Windows 11.

Windows 11 has a Windows Hello feature that provides a more personal and secure way to sign into Windows.

With Windows Hello, one can use a PIN, facial recognition, or fingerprint to sign into their devices. In addition, the Windows Hello feature offers several ways to ditch their passwords in favor of a more secure and personal authentication method.

Enhanced anti-spoofing is an optional additional security feature for Windows Hello face authentication that prevents unauthorized access via spoofing.

Below is how to turn on or off enhanced anti-spoofing for Windows Hello face authentication in Windows 11.

Turn on or off enhanced anti-spoofing for Windows Hello face authentication

As mentioned, users can enable enhanced anti-spoofing for Windows Hello face authentication in Windows 11.

This feature is disabled by default. However, if you want to add additional security for Windows Hello, you can use the steps below.

Here’s how to do that.

Click the Start menu button to search for “Edit group policy." Then, under Best match, select Edit group policy result.

windows 11 edit group policy

In the left pane of Local Group Policy Editor, expand the tree: 

Computer Configuration -> Administrative Templates -> Windows Components -> Biometrics -> Facial Features

Then, in the Facial Features details pane on the right, locate and double-click the “Configure enhanced anti-spoofing “setting to open its settings window.

On the Configure enhanced anti-spoofing window set the option to Not ConfigureEnabled, or Disabled.

  • Not Configured (default)
  • Enabled – Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication.
  • Disabled – Windows doesn’t require enhanced anti-spoofing for Windows Hello face authentication.

Turn on or off enhanced anti-spoofing for Windows Hello Face authentication via Registry

Another way users can enable or disable enhanced anti-spoofing for Windows Hello face authentication is via the Windows Registry editor.

First, open the Windows Registry, and navigate to the folder key path below.

HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal

If you don’t see the FacialFeatures folder key, right-click on the Biometrics key, then create the subkey (FacialFeatures) folders.

Right-click the FacialFeatures folder key’s right pane and select New -> DWORD (32-bit) Value. Next, type a new key named EnhancedAntiSpoofing.

Double-click the new key item name (EnhancedAntiSpoofing) and make sure the Base option is Decimal, and then update the Value data:

  • To enable it, type: 1
  • To disable it, type 0 or delete the item name.

Save your changes and restart your computer.

That should do it!

Conclusion:

This post showed you how to turn on or off enhanced anti-spoofing Windows Hello face authentication in Windows 11. Please use the comments form below if you find any errors or have something to add.

Like this:



2 responses to “How to Turn On or Off Enhanced Anti-Spoofing for Windows Hello Face Authentication in Windows 11”

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.