How to Set Up Windows Hello for Going Passwordless in Windows 11 Accounts

Prerequisites for a Passwordless Windows Setup

Before you remove your password, your computer needs the right hardware and software in place. Two requirements apply to every step in this guide. The PC should run a currently supported version of Windows 11, which is 24H2 or 25H2. Changing sign-in options may also need administrator rights, so sign in with an administrator account or have the administrator’s credentials ready.

Then check each item below.

• A Trusted Platform Module (TPM 2.0) chip. This is a security component that generates and stores cryptographic keys. Windows 11 requires TPM 2.0 to install in the first place, so most supported PCs already have it. It must also be enabled in the firmware (BIOS/UEFI). You can confirm its status in the Windows Security app under Device security.
• At least one compatible authentication method, configured and tested. That means one or more of the following:
  • A fingerprint reader (Windows Hello Fingerprint)
  • A compatible infrared camera or a supported camera with Enhanced Sign-in Security for facial recognition (Windows Hello Face)
  • A secure numerical or alphanumeric PIN
• A Microsoft account linked to your Windows profile. A standard offline local account will not work, because cloud syncing handles the passwordless transition state.

A PIN works on every PC, so it is the safe baseline. Face and fingerprint need the matching hardware. An ordinary webcam will not do for face sign-in, because it must have an infrared sensor. If your PC has no suitable hardware, those options will not appear or will be greyed out in Settings. That is normal, and the PIN is still available.

Set Up Windows Hello Biometrics and PIN

1. Open Settings. The main Settings window appears, with the category list on the left.
2. Select Accounts.
3. Click Sign-in options. A list of sign-in methods appears, and each one expands when clicked.
4. Expand the Windows Hello Face, Windows Hello Fingerprint, or PIN section, depending on your hardware. On Windows 11 these may be labelled Facial recognition (Windows Hello), Fingerprint recognition (Windows Hello) and PIN (Windows Hello).
5. Follow the on-screen prompts to register your biometric data or create your secure PIN. Windows asks you to confirm your current password once. For face or fingerprint, it also asks you to set up a PIN, which it uses as a fallback if the sensor cannot read you.
6. Lock your PC and sign back in with the new method to confirm it works.

If a method is greyed out, check that the camera or reader is connected and that its driver is installed. The Troubleshooting section covers driver problems. To undo a registration later, return to the same section and use the Remove button.

Windows Hello also works with passkeys, a current passwordless option. A passkey is a credential that replaces a password for a website or app. Windows can store it on your PC and unlock it with your face, fingerprint or PIN. Microsoft accounts and many other websites support passkeys. When a site offers to create or use one, Windows asks you to verify with Windows Hello.

Remove the Password from Your Microsoft Account

Now stop your Microsoft profile from accepting a standard password. This has two parts: make sure the PC uses a Microsoft account, then remove the password from that account online.

1. Open Settings.
2. Select Accounts.
3. Click Your info. This page shows the account you are signed in with. If it shows an email address and a Sign in with a local account instead link, you are already on a Microsoft account and can go to step 5.
4. Look under Account settings. If you are currently using a local profile, select Sign in with a Microsoft account instead and follow the prompts to complete the transition. Otherwise, verify that your cloud identity link is in place.

• Your backup email address and phone number are current in your Microsoft account security settings.
• Microsoft Authenticator is installed on your phone and signed in to this account.
• Authenticator works. Approve a test sign-in prompt and confirm it succeeds.

5. Open a web browser and go to your Microsoft account security dashboard. Sign in, then find the advanced security settings and remove the password sign-in option. Microsoft calls this a passwordless account. It relies on the Microsoft Authenticator app on your phone, so set that up first if you have not already.

If you change your mind, you can turn the password back on from the same page in your Microsoft account. You will not lose any data on the PC either way.

Enforce Passwordless Sign-In on Your Windows Device

The last step on the PC is to stop Windows offering passwords on the sign-in screen at all.

1. Open Settings.
2. Select Accounts.
3. Click Sign-in options.
4. Locate the section labeled For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. It is usually under the additional settings further down the page.
5. Toggle this switch to On.

The change may not show until you sign out or restart. After that, the sign-in screen offers only your Windows Hello methods. If the switch is missing or greyed out, make sure you have registered at least one Windows Hello method (section 2) and that Windows is up to date. Administrator rights may also be needed. To go back, set the switch to Off.

Manage Alternative Verification Methods

Set up backup methods so you are never locked out if your primary sensor fails. A dirty fingerprint reader, a broken camera or a bad driver update can all stop biometric sign-in working. Plan for that before it happens.

1. Open Settings.
2. Select Accounts.
3. Click Sign-in options.
4. Add a secondary method, such as a security key or an alternate Windows Hello PIN. A security key is a physical USB or NFC device, and it is the best backup if you have one.
5. Keep your Microsoft Authenticator app updated on your mobile phone so you can approve remote sign-in prompts.

Keep your account recovery email and phone number up to date as well. They are your last resort if the PC, the phone and the sensor all fail together.

Test each backup once while you are still comfortably signed in. A backup you have never tried is not much of a backup.

Troubleshooting Common Passwordless Sign-In Errors

If something does not work as described, start with updates. If the option to disable passwords is missing, make sure your Windows installation is fully updated through Windows Update. Outdated builds often lack the policy support needed for complete password elimination and biometric recognition. Restart after the updates install, then check the settings again.

If your biometric hardware fails to recognize you, sign in with your backup PIN. Then open Device Manager and update or reinstall the drivers for your biometric sensor. If it still fails, remove your face or fingerprint data in Sign-in options and register it again. Cleaning the camera or reader often helps too.

What to do next

You should now be able to lock and unlock your computer using only your biometric features or secure PIN without ever typing a traditional password. Passkeys extend the same approach to Microsoft and other websites. Consider exploring hardware-based security keys next for multi-factor authentication across your broader web services.