How to Set Up Windows Hello for Going Passwordless in Windows 11 Accounts

Prerequisites for a Passwordless Windows Setup

Before you remove your password, your computer needs the right hardware and software in place. Check each item below first.

• A Trusted Platform Module (TPM 2.0) chip. This is a security component that generates and stores cryptographic keys. Windows 11 requires TPM 2.0 to install in the first place, so most supported PCs already have it. It must also be enabled in the firmware (BIOS/UEFI). You can confirm its status in the Windows Security app under Device security.
• At least one compatible authentication method, configured and tested. That means one or more of the following:
  • A fingerprint reader (Windows Hello Fingerprint)
  • A compatible infrared camera for facial recognition (Windows Hello Face)
  • A secure numerical or alphanumeric PIN
• A Microsoft account linked to your Windows profile. A standard offline local account will not work, because cloud syncing handles the passwordless transition state.

A PIN works on every PC, so it is the safe baseline. Face and fingerprint need the matching hardware. An ordinary webcam will not do for face sign-in, because it must have an infrared sensor. If your PC has no suitable hardware, those options will not appear or will be greyed out in Settings. That is normal, and the PIN is still available.

Set Up Windows Hello Biometrics and PIN

Do this before you touch any password settings.

1. Open Settings. You should see the main Settings window with the category list on the left.
2. Select Accounts.
3. Click Sign-in options. You should now see a list of sign-in methods, each of which expands when clicked.
4. Expand the Windows Hello Face, Windows Hello Fingerprint, or PIN section, depending on your hardware. On Windows 11 these may be labelled Facial recognition (Windows Hello), Fingerprint recognition (Windows Hello) and PIN (Windows Hello).
5. Follow the on-screen prompts to register your biometric data or create your secure PIN. Windows will ask you to confirm your current password once. For face or fingerprint, it will also ask you to set up a PIN, which it uses as a fallback if the sensor cannot read you.
6. Lock your PC and sign back in with the new method to confirm it works.

If a method is greyed out, check that the camera or reader is connected and that its driver is installed. Section 6 covers driver problems. To undo a registration later, return to the same section and use the Remove button.

Remove the Password from Your Microsoft Account

Now stop your Microsoft profile from accepting a standard password. This has two parts: make sure the PC uses a Microsoft account, then remove the password from that account online.

1. Open Settings.
2. Select Accounts.
3. Click Your info. This page shows the account you are signed in with. If it shows an email address and a Sign in with a local account instead link, you are already on a Microsoft account and can go to step 5.
4. Look under Account settings. If you are currently using a local profile, select Sign in with a Microsoft account instead and follow the prompts to complete the transition. Otherwise, just verify that your cloud identity link is in place.
5. Open a web browser and go to your Microsoft account security dashboard. Sign in, then find the advanced security settings and remove the password sign-in option. Microsoft calls this a passwordless account. It relies on the Microsoft Authenticator app on your phone, so set that up first if you have not already.

If you change your mind, you can turn the password back on from the same page in your Microsoft account. You will not lose any data on the PC either way.

Enforce Passwordless Sign-In on Your Windows Device

The last step on the PC is to stop Windows offering passwords on the sign-in screen at all.

1. Open Settings.
2. Select Accounts.
3. Click Sign-in options.
4. Locate the section labeled For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. It is usually under the additional settings further down the page.
5. Toggle this switch to On.

The change may not show until you sign out or restart. After that, the sign-in screen offers only your Windows Hello methods. If the switch is missing or greyed out, make sure you have registered at least one Windows Hello method (section 2) and that Windows is up to date. To go back, set the switch to Off.

Manage Alternative Verification Methods

A dirty fingerprint reader, a broken camera or a bad driver update can all stop biometric sign-in working. Plan for that before it happens.

1. Open Settings.
2. Select Accounts.
3. Click Sign-in options.
4. Add a secondary method, such as a security key or an alternate Windows Hello PIN. A security key is a physical USB or NFC device, and it is the best backup if you have one.
5. Keep your Microsoft Authenticator app updated on your mobile phone so you can approve remote sign-in prompts.

Test each backup once while you are still comfortably signed in. A backup you have never tried is not much of a backup.

Troubleshooting Common Passwordless Sign-In Errors

If something does not work as described, start with updates. If the option to disable passwords is missing, make sure your Windows installation is fully updated through Windows Update. Outdated builds often lack the policy support needed for complete password elimination and biometric recognition. Restart after the updates install, then check the settings again.

If your biometric hardware fails to recognize you, sign in with your backup PIN. Then open Device Manager and update or reinstall the drivers for your biometric sensor. If it still fails, remove your face or fingerprint data in Sign-in options and register it again. Cleaning the camera or reader often helps too.

What to do next

You should now be able to lock and unlock your computer using only your biometric features or secure PIN without ever typing a traditional password. Consider exploring hardware-based security keys next for multi-factor authentication across your broader web services.