How to Turn On Windows Hello Anti-Spoofing in Windows 11

Windows Hello lets you sign into your computer using your face, a PIN, or your fingerprint. One cool security feature is called anti-spoofing. This helps stop fake faces or photos from unlocking your PC.

This guide will show you simple steps to turn on or off the anti-spoofing feature for Windows Hello face sign-in on Windows 11.

What Is Anti-Spoofing?

Anti-spoofing is a security tool that makes facial recognition smarter. It helps your computer tell if someone is trying to trick it with a photo or mask instead of your real face.

Note: Turning on enhanced anti-spoofing can sometimes make it harder to sign in if your device does not support it well.

How to Turn On or Off Anti-Spoofing Using Windows Settings

1. Open the Settings app:
   • Click the Start menu and select Settings, or
   • Press Windows key + I on your keyboard.
2. Click Accounts on the left side menu.
3. Click Sign-in options on the right.
4. Find Facial recognition (Windows Hello) and click to expand it.
5. Check or uncheck the box next to “Enhanced facial recognition protection” to turn anti-spoofing on or off.
6. Click Restart now if your PC asks you to restart.

How to Turn On or Off Anti-Spoofing Using Group Policy Editor (For Advanced Users)

This method is for users comfortable with system settings:

1. Open the Local Group Policy Editor:
   • Type “Edit group policy” in the Start menu search and open it.
2. Navigate to this folder path: Computer Configuration > Administrative Templates > Windows Components > Biometrics > Facial Features
3. On the right, double-click Configure enhanced anti-spoofing.
4. Select:
   • Enabled – to turn on anti-spoofing.
   • Disabled – to turn it off.
   • Not Configured – default, same as off.
5. Click OK to save.

How to Turn On or Off Anti-Spoofing Using Registry Editor (Advanced Users Only)

Warning: Changing the registry can cause problems if not done correctly. Make sure to back up your registry or create a system restore point first.

1. Open the Registry Editor:
   • Press Windows key + R, type regedit, and press Enter.
2. Go to this folder: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\Facial Features
3. If the FacialFeatures folder does not exist, create it by right-clicking Biometrics > New > Key, and name it FacialFeatures.
4. Right-click inside FacialFeatures, select New > DWORD (32-bit) Value, and name it EnhancedAntiSpoofing.
5. Double-click EnhancedAntiSpoofing and set its value to:
   • 1 to turn on anti-spoofing
   • 0 to turn it off
6. Click OK and close the Registry Editor.
7. Restart your PC to apply the changes.

Summary

• Better Security: Anti-spoofing helps protect your Windows Hello face sign-in from fake attempts.
• Multiple Ways to Change: You can turn it on or off using Settings, Group Policy Editor, or Registry Editor.
• Possible Sign-in Issues: Turning it on may cause occasional sign-in problems on some devices.
• Be Careful: Always back up your system or registry before making big changes.
• Check Compatibility: Make sure your device supports enhanced anti-spoofing to use it well.

If you follow these steps, you can set your facial recognition security to a level that works best for you!

For more tips on Windows Hello, check out:

How to Sign in with Your Face in Windows 11

How to Use a PIN to Sign in

How to Use Fingerprint Sign-in