To access your sign-in options, go to Start> Settings > Accounts> Sign-in options.
Or just select this button:
Go to Sign-in options
Change or manage your password or PIN
To change your password or PIN, go toStart> Settings> Accounts> Sign-in options.
-
Select PIN (Windows Hello), and then select Change PIN.
-
Select Passwordthen select Change.
Windows Hello
Windows Hello lets you sign in to your devices, apps, online services, and networks using your face, iris, fingerprint, or a PIN. Even if your Windows device can use Windows Hello biometrics, you don’t have to. If it’s the right choice for you, you can rest assured that the info that identifies your face, iris, or fingerprint never leaves your device. Windows does not storepictures of your face, iris, or fingerprint on your device or anywhere else.
When you set up Windows Hello biometrics, it takes the data from the face camera, iris sensor, or fingerprint reader and creates a data representation—or graph—that is then encrypted before it’s stored on your device.
To help us keep things working properly, to help detect and prevent fraud, and to continue improving Windows Hello, we collect diagnostic data about how people use Windows Hello. For example, data about whether people sign in with their face, iris, fingerprint, or PIN; the number of times they use it; and whether it works or not is all valuable information that helps us build a better product. The data is pseudonymized, does not include biometric information, and is encrypted before it's transmitted to Microsoft. You can choose to stop sending diagnostic data to Microsoft at any time. Learn more about diagnostic data in Windows
To turn on Windows Hello
-
Go to Start> Settings> Accounts> Sign-in options
-
Select the Windows Hello method that you want to set up,
-
Select Set up.
If you don't see Windows Hello in Sign-in options, then it may not be available for your device.Windows Hello does require a compatible cameraor fingerprint reader.
To remove Windows Hello and any associated biometric identification data from the device
-
Go to Start> Settings > Accounts> Sign-in options.
-
Select the Windows Hello method you want to remove.
-
Select Remove.
Your biometric data will remain on your device until you remove it. However, after a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric data. You can go to Settings and remove Windows Hello, and any associated biometric identification data, at any time. If you enrolled using an external device, such as a USB fingerprint reader, please connect the device first.
For more information, seeLearn about Windows Hello and set it up.
Using a security key
A security key is a hardware device - usually in the form of a little USB key -that you can use instead of your username and password to sign in on the web. Since it's used in addition to a fingerprint or PIN, even if someone has your security key, they won't be able to sign in without the PIN or fingerprint that you create.
Security keys are usually available for purchase from retailers that sell computer accessories. Learn more about security keys
To set up a security key
-
Go toStart> Settings > Accounts> Sign-in options,
-
Select Security Key.
-
Select Manage and follow the instructions.
Lock your device
If you're stepping away from your device for a few minutes it's a good idea to lock it so that others can't see what's on your screen, or access anything on it. Press the Windows logo key + Lto immediately lock in. When you return you'll just need to authenticate and you'll be right where you left off.
Dynamic lock
Windows can use devices that are paired with your PC to help detect when you’re away, and lock your PC shortly after your paired device is out of Bluetooth range. This makes it more difficult for someone to gain access to your device if you step away from your PC and forget to lock it.
-
On your Windows 11PC, select Start > Settings > Accounts> Sign-in options.
-
Under Dynamic lock, select the Allow Windows to automatically lock your device when you’re away check box.
-
Use Bluetooth to pair your phone with your PC. Learn how to pair devices using Bluetooth
Once they’re paired, take your phone with you when you walk away, and your PC will automatically lock a minute or so after you’re out of Bluetooth range.
Other sign-in options
Manage when you're required to sign in
Go toStart> Settings > Accounts> Sign-in options. Next to If you've been away, when should Windows require you to sign in again?select an option for when Windows should require you to sign in again.
To show your account details on the sign-in screen
Go toStart> Settings> Accounts> Sign-in options. Turnon Show account details such as my email address on the sign-in screen.
To automatically finish setup after an update
Go toStart > Settings> Accounts> Sign-in options. Turn on Use my sign-in info to automatically finish setting up after an updateif you want to use your sign-in info to automatically finish setting up your device after an update or restart.
Advanced Debugging
Organizational requirements for enabling Windows Hello for Business
Organizational administrators may configure requirements that devices must satisfy before enabling Windows Hello for Businessfor use with organizational accounts. If these requirements are not met, you may get an error message when attempting to enable Windows Hello for Businessthat states "This device doesn't meet your organization's requirements for Windows Hello".
To get more detailed information
Go to Start > Event Viewer. In the navigation tree on the left, go to Applications and Services Logs> Microsoft> Windows> User Device Registration> Admin. Select the most recent event presented; the information in this log event may clarify why you are receiving this error message.
Common Hardware Issues
One way that machines may fall into this case is if the machine has a TPM with some sort of issue, such as out-of-date firmware. To check this, you can use TpmTool:
TpmTool GetDeviceInformation
If it reports that "TPM Has Vulnerable Firmware: True", please get in touch with your IT provider to install an updated firmware.Learn more about TpmTool
To access your sign-in options, go to Start > Settings > Accounts > Sign-in options.
Or just click this button:
Go to Sign-in options
Change or manage your password
To change your password, go toStart > Settings > Accounts > Sign-in options. Select Password, and then select Change.
Note:To change your password if you're using a work or school account, you can press Ctrl+Alt+Del and then select Change a password.
Windows Hello
Windows Hello lets you sign in to your devices, apps, online services, and networks using your face, iris, fingerprint, or a PIN. Even if your Windows device can use Windows Hello biometrics, you don’t have to. If it’s the right choice for you, you can rest assured that the info that identifies your face, iris, or fingerprint never leaves your device. Windows does not storepictures of your face, iris, or fingerprint on your device or anywhere else.
When you set up Windows Hello biometrics, it takes the data from the face camera, iris sensor, or fingerprint reader and creates a data representation—or graph—that is then encrypted before it’s stored on your device.
To help us keep things working properly, to help detect and prevent fraud, and to continue improving Windows Hello, we collect diagnostic data about how people use Windows Hello. For example, data about whether people sign in with their face, iris, fingerprint, or PIN; the number of times they use it; and whether it works or not is all valuable information that helps us build a better product. The data is pseudonymized, does not include biometric information, and is encrypted before it's transmitted to Microsoft. You can choose to stop sending diagnostic data to Microsoft at any time. Learn more about diagnostic data in Windows
To turn on Windows Hello
-
Go to Start > Settings > Accounts > Sign-in options,
-
Select the Windows Hello method that you want to set up
-
Select Set up.
If you don't see Windows Hello in Sign-in options, then it may not be available for your device. Windows Hello does require a compatible cameraor fingerprint reader.
To remove Windows Hello and any associated biometric identification data from the device
-
Go to Start > Settings > Accounts > Sign-in options.
-
Select the Windows Hello method you want to remove, and then select Remove.
Your biometric data will remain on your device until you remove it. However, after a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric data. You can go to Settings and remove Windows Hello, and any associated biometric identification data, at any time. If you enrolled using an external device, such as a USB fingerprint reader, please connect the device first.
For more information seeLearn about Windows Hello and set it up.
Using a security key
A security key is a hardware device - usually in the form of a little USB key -that you can use instead of your username and password to sign in on the web. Since it's used in addition to a fingerprint or PIN, even if someone has your security key, they won't be able to sign in without the PIN or fingerprint that you create.
Security keys are usually available for purchase from retailers that sell computer accessories. Learn more about security keys
To set up a security key,
-
Go toStart > Settings > Accounts > Sign-in options,
-
Select Security Key.
-
Select Manage and follow the instructions.
Lock your device
If you're stepping away from your device for a few minutes it's a good idea to lock it so that others can't see what's on your screen, or access anything on it. Press the Windows logo key + Lto immediately lock in. When you returnyou'll just need to authenticateand you'll be right where you left off.
Dynamic lock
Windows can use devices that are paired with your PC to help detect when you’re awayand lock your PC shortly after your paired device is out of Bluetooth range. This makes it more difficult for someone to gain access to your device if you step away from your PC and forget to lock it.
-
On your Windows 10 PC, select Start > Settings > Accounts > Sign-in options.
-
Under Dynamic lock, select the Allow Windows to automatically lock your device when you’re away check box.
-
Use Bluetooth to pair your phone with your PC. Learn how to pair devices using Bluetooth
Once they’re paired, take your phone with you when you walk away, and your PC will automatically lock a minute or so after you’re out of Bluetooth range.
Other sign-in options
Manage when you're required to sign in
Go toStart > Settings > Accounts > Sign-in options. Under Require sign-in, select an option for when Windows should require you to sign in again.
To show your account details on the sign-in screen
Go toStart > Settings > Accounts > Sign-in options. Under Privacy, turn the first setting On if you want to show your account details on the sign-in screen.
To automatically finish setup after an update
Go toStart > Settings > Accounts > Sign-in options. Under Privacy, turn the second setting On if you want to use your sign-in info to automatically finish setting up your device after an update or restart.
Advanced Debugging
Organizational requirements for enabling Windows Hello for Business
Organizational administrators may configure requirements that devices must satisfy before enabling Windows Hello for Businessfor use with organizational accounts. If these requirements are not met, you may get an error message when attempting to enable Windows Hello for Businessthat states "This device doesn't meet your organization's requirements for Windows Hello".
To get more detailed information
Go to Start > Event Viewer. In the navigation tree on the left, go to Applications and Services Logs> Microsoft> Windows> User Device Registration> Admin. Select the most recent event presented; the information in this log event may clarify why you are receiving this error message.
Common Hardware Issues
One way that machines may fall into this case is if the machine has a TPM with some sort of issue, such as out-of-date firmware. To check this, you can use TpmTool:
TpmTool GetDeviceInformation
If it reports that "TPM Has Vulnerable Firmware: True", please get in touch with your IT provider to install an updated firmware.Learn more about TpmTool
