How to Turn On Windows Hello Anti-Spoofing in Windows 11

What Is Anti-Spoofing?

Anti-spoofing is a security feature that makes Windows Hello face recognition smarter by helping your computer tell if someone is using a photo or mask instead of your real face.

Note: Turning on enhanced anti-spoofing can sometimes make it harder to sign in if your device does not support it well.

How to Turn On or Off Anti-Spoofing Using Windows Settings

1. Open the ⚙️ Settings app:

   • Click the ⊞ Start menu and select Settings, or
   • Press Windows key + I on your keyboard.
2. Click Accounts on the left side menu.
3. Click Sign-in options on the right.
4. Find Facial recognition (Windows Hello) and click to expand it.
5. Check or uncheck the box next to “Enhanced facial recognition protection” to turn anti-spoofing on or off.
6. Click Restart now if your PC asks you to restart.

You can easily turn Windows Hello anti-spoofing on or off using the main Windows Settings app by going to Accounts, then Sign-in options.

You can easily turn Windows Hello anti-spoofing on or off using the main Windows Settings app by going to Accounts, then Sign-in options.

You can easily turn Windows Hello anti-spoofing on or off using the main Windows Settings app by going to Accounts, then Sign-in options.

How to Turn On or Off Anti-Spoofing Using Group Policy Editor (For Advanced Users)

For users comfortable with system settings, you can turn Windows Hello anti-spoofing on or off using the Local Group Policy Editor by navigating to the Biometrics section.

1. Open the Local Group Policy Editor:

   • Type “Edit group policy” in the ⊞ Start menu search and open it.
2. Navigate to this folder path: Computer Configuration > Administrative Templates > Windows Components > Biometrics > Facial Features
3. On the right, double-click Configure enhanced anti-spoofing.
4. Select:

   • Enabled – to turn on anti-spoofing.
   • Disabled – to turn it off.
   • Not Configured – default, same as off.
5. Click OK to save.

How to Turn On or Off Anti-Spoofing Using Registry Editor (Advanced Users Only)

Advanced users can turn Windows Hello anti-spoofing on or off by carefully editing the Windows Registry, but it’s important to back up first.

1. Open the Registry Editor:

   • Press Windows key + R, type regedit, and press Enter.
2. Go to this folder: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Facial Features
3. If the FacialFeatures folder does not exist, create it by right-clicking Biometrics > New > Key, and name it FacialFeatures.
4. Right-click inside FacialFeatures, select New > DWORD (32-bit) Value, and name it EnhancedAntiSpoofing.
5. Double-click EnhancedAntiSpoofing and set its value to:

   • 1 to turn on anti-spoofing
   • 0 to turn it off
6. Click OK and close the Registry Editor.
7. 🔄 Restart your PC to apply the changes.

Summary

• Better Security: Anti-spoofing helps protect your Windows Hello face sign-in from fake attempts.
• Multiple Ways to Change: You can turn it on or off using Settings, Group Policy Editor, or Registry Editor.
• Possible Sign-in Issues: Turning it on may cause occasional sign-in problems on some devices.
• Be Careful: Always back up your system or registry before making big changes.
• Check Compatibility: Make sure your device supports enhanced anti-spoofing to use it well.

Turning on Windows Hello anti-spoofing adds a layer of security to your face sign-in, protecting it from fake attempts like photos or masks.

For more tips on Windows Hello, check out:

How to Sign in with Your Face in Windows 11

How to Use a PIN to Sign in

How to Use Fingerprint Sign-in