How to Turn On Windows Hello Anti-Spoofing in Windows 11
Windows Hello anti-spoofing is a security setting in Windows 11 that stops people from unlocking your PC with printed photos or masks. This feature makes facial recognition smarter by checking that the face in front of the camera belongs to a real, live person.
Turning on this extra protection takes just a few clicks in your settings app . Once active, your PC blocks unauthorized access attempts and keeps your personal files much safer.
Open Settings , navigate to Accounts Sign-in options, expand Facial recognition (Windows Hello), and check the box for “Enhanced facial recognition protection.” This setting helps prevent unauthorized access using fake images or masks.
What Is Anti-Spoofing?
Windows Hello anti-spoofing is a security setting that stops unauthorized people from unlocking your computer with a photo or mask. This feature ensures only your genuine face signs you in. While this protection hardens device security, certain computers experience sign-in issues when anti-spoofing remains active.
How to Turn On or Off Anti-Spoofing Using Windows Settings
- Open the Settings app:
- Click the Start menu and select Settings, or
- Press
Windows key + Ion your keyboard.
- Click Accounts on the left side menu.
- Click Sign-in options on the right.
- Find Facial recognition (Windows Hello) and click to expand it.
- Check or uncheck the box next to “Enhanced facial recognition protection” to turn anti-spoofing on or off.
- Click Restart now if your PC asks you to restart.
Open the Settings app by pressing the Win and ‘I’ together. Navigate to Accounts, select Sign-in options, and find Facial recognition. Check or uncheck the box for enhanced protection.
Open the Settings app by pressing the Win and ‘I’ together. Navigate to Accounts, select Sign-in options, and find Facial recognition. Check or uncheck the box for enhanced protection.
Open the Settings app by pressing the Windows key and 'I' together. Navigate to Accounts, select Sign-in options, and find Facial recognition. Check or uncheck the box for enhanced protection.
How to Turn On or Off Anti-Spoofing Using Group Policy Editor (For Advanced Users)
Advanced users can manage Windows Hello anti-spoofing using the Local Group Policy Editor (a tool for configuring system settings across Windows). Type 'Edit group policy' in the Start menu search to open the editor. Navigate through Computer Configuration, Administrative Templates, Windows Components, Biometrics, and Facial Features.
- Open the Local Group Policy Editor:
- Type "Edit group policy" in the Start menu search and open it.
- Navigate to this folder path:
Computer Configuration > Administrative Templates > Windows Components > Biometrics > Facial Features - On the right, double-click Configure enhanced anti-spoofing.
- Select:
- Enabled – to turn on anti-spoofing.
- Disabled – to turn it off.
- Not Configured – default, same as off.
- Click OK to save.
How to Turn On or Off Anti-Spoofing Using Registry Editor (Advanced Users Only)
Windows Registry (a hierarchical database storing low-level operating system settings) control offers another management route. Press the Windows key and 'R' together, type 'regedit' and press Enter to launch the Registry Editor. Access this specific path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Facial Features.
- Open the Registry Editor:
- Press
Windows key + R, typeregedit, and pressEnter.
- Press
- Go to this folder:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Facial Features - If the FacialFeatures folder does not exist, create it by right-clicking Biometrics > New > Key, and name it FacialFeatures.
- Right-click inside FacialFeatures, select New > DWORD (32-bit) Value, and name it EnhancedAntiSpoofing.
- Double-click EnhancedAntiSpoofing and set its value to:
1to turn on anti-spoofing0to turn it off
- Click OK and close the Registry Editor.
- Restart your PC to apply the changes.
Summary
- Better Security: Anti-spoofing helps protect your Windows Hello face sign-in from fake attempts.
- Multiple Ways to Change: You can turn it on or off using Settings, Group Policy Editor, or Registry Editor.
- Possible Sign-in Issues: Turning it on may cause occasional sign-in problems on some devices.
- Be Careful: Always back up your system or registry before making big changes.
- Check Compatibility: Make sure your device supports enhanced anti-spoofing to use it well.
Windows Hello anti-spoofing blocks fake login attempts relying on photos or masks. Managing this setting happens through the Settings app, the Group Policy Editor, or the Registry Editor. Enabling anti-spoofing sometimes makes signing in slightly less reliable on unsupported hardware.
Explore these guides for more Windows Hello tips:
How to Sign in with Your Face in Windows 11
How to Use Fingerprint Sign-in
How do you enable anti-spoofing?
Navigate to Anti-Spam > Anti-Spam Filters > Anti-Spoofing. Select Enable Anti-Spoofing to activate the Anti-Spoofing filter.
How do I ensure configure enhanced anti-spoofing is set to enabled?
Enable Enhanced Anti-Spoofing for Windows Hello by navigating to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures within the Registry Editor. Select Edit > New > DWORD (32-Bit) Value, name the new DWORD value EnhancedAntiSpoofing, and set its value to 1.
Does Faceit work on 🪟 Windows 11?
Windows 11 becomes mandatory for playing on FACEIT starting October 14, 2026.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!