How to Turn On Windows Hello Anti-Spoofing in Windows 11
Windows Hello anti-spoofing is a security feature in Windows 11 that stops anyone from unlocking your PC with printed photos, digital images, or fake masks. This setting makes facial recognition much safer by checking that a real, live person sits in front of the camera.
Enabling this extra protection takes less than two minutes inside the Windows Settings app . Once active, your camera blocks unauthorized login attempts and keeps your personal files secure.
Open Settings , navigate to Accounts Sign-in options, expand Facial recognition (Windows Hello), and check the box for “Enhanced facial recognition protection.” This setting helps prevent unauthorized access using fake images or masks.
What Is Anti-Spoofing?
Windows Hello anti-spoofing is a built-in security feature that prevents unauthorized people from unlocking your computer with a printed photo or a 3D mask. This setting forces Windows Hello facial recognition to check for depth and liveness before granting access. While it greatly improves sign-in security, turning on enhanced anti-spoofing can occasionally cause sign-in errors or camera failures on certain older hardware configurations.
How to Turn On or Off Anti-Spoofing Using Windows Settings
- Open the Settings app:
- Click the Start menu and select Settings, or
- Press
Windows key + Ion your keyboard.
- Click Accounts on the left side menu.
- Click Sign-in options on the right.
- Find Facial recognition (Windows Hello) and click to expand it.
- Check or uncheck the box next to “Enhanced facial recognition protection” to turn anti-spoofing on or off.
- Click Restart now if your PC asks you to restart.
You can turn on Windows Hello anti-spoofing in Windows 11 using the main Settings app by going to the Accounts section. This method is the fastest and safest way to control enhanced facial recognition protection without needing to touch advanced system tools. Simply open your settings, select sign-in options, expand the facial recognition menu, and check the box for the protection setting.
Click Accounts on the left.
Select Sign-in options and find Facial recognition.
How to Turn On or Off Anti-Spoofing Using Group Policy Editor (For Advanced Users)
Advanced users can manage Windows Hello anti-spoofing using the Local Group Policy Editor (a tool for configuring system settings across Windows). This method lets you enforce the facial features policy across a local machine, which is helpful if the standard settings menu is restricted. You need to open the editor from the Start menu and browse through the system folders to locate the biometric controls.
- Open the Local Group Policy Editor:
- Type "Edit group policy" in the Start menu search and open it.
- Navigate to this folder path:
Computer Configuration > Administrative Templates > Windows Components > Biometrics > Facial Features - On the right, double-click Configure enhanced anti-spoofing.
- Select:
- Enabled – to turn on anti-spoofing.
- Disabled – to turn it off.
- Not Configured – default, same as off.
- Click OK to save.
How to Turn On or Off Anti-Spoofing Using Registry Editor (Advanced Users Only)
You can configure Windows Hello anti-spoofing through the Windows Registry (a hierarchical database storing low-level operating system settings) if you prefer editing system keys directly. This advanced approach requires opening the registry tool via the run menu and navigating to the specific biometrics path. Always back up your registry before making changes, as incorrect edits can cause system instability.
- Open the Registry Editor:
- Press
Windows key + R, typeregedit, and pressEnter.
- Press
- Go to this folder:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Facial Features - If the FacialFeatures folder does not exist, create it by right-clicking Biometrics > New > Key, and name it FacialFeatures.
- Right-click inside FacialFeatures, select New > DWORD (32-bit) Value, and name it EnhancedAntiSpoofing.
- Double-click EnhancedAntiSpoofing and set its value to:
1to turn on anti-spoofing0to turn it off
- Click OK and close the Registry Editor.
- Restart your PC to apply the changes.
Summary
- Better Security: Anti-spoofing helps protect your Windows Hello face sign-in from fake attempts.
- Multiple Ways to Change: You can turn it on or off using Settings, Group Policy Editor, or Registry Editor.
- Possible Sign-in Issues: Turning it on may cause occasional sign-in problems on some devices.
- Be Careful: Always back up your system or registry before making big changes.
- Check Compatibility: Make sure your device supports enhanced anti-spoofing to use it well.
Windows Hello anti-spoofing provides an extra layer of biometric security by blocking fake login attempts with photos, but it can occasionally cause hardware recognition issues. You can easily turn this protection on or off using the standard Settings app, the Local Group Policy Editor, or the Registry Editor depending on your preference. Always keep a system backup ready before modifying advanced policies or registry keys.
Explore these guides for more Windows Hello tips:
```Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!