Windows Hello for Business

Overview


Windows Hello for Business lets you sign in to your Windows device quickly and securely using a PIN instead of a password. Your Windows Hello PIN is tied to the specific device you set it up on, so it can't be used from any other computer. This makes it a safer and more convenient way to sign in. This article walks you through signing up for (setting up) and using a Windows Hello for Business PIN.

Glossary

  • Windows Hello for Business – A feature that lets you sign in to your work device using a PIN or biometrics (fingerprint or facial recognition) instead of typing your password.
  • PIN – A Personal Identification Number that unlocks your device and signs you in. It works only on the device where you set it up.
  • Multi-Factor Authentication (MFA) – A quick identity check (such as approving a notification in an app or entering a code sent to your phone) used to confirm it's really you during setup.
  • Biometrics – Using your face or fingerprint to sign in as an alternative to your PIN.

Tools and Materials Needed​​​​​​​

  • A Windows 10 or Windows 11 device provided or approved by your organization.
  • Your work or school (organizational) account sign-in details.
  • Access to your verification method (for example, the Microsoft Authenticator app or your phone) to confirm your identity during setup.
  • Optional: a compatible camera or fingerprint reader if you'd like to add face or fingerprint sign-in.

Setup and Usage Steps

Signing Up (Setting Up) Your Windows Hello PIN

  1. Sign in to your Windows device with your work or school account.
  2. Open Settings by pressing the Windows key + I.
  3. Go to Accounts > Sign-in options.
  4. Select PIN (Windows Hello), then click Set up.
  5. Confirm your identity when prompted by completing the verification (MFA) step.
  6. Enter a new PIN in the New PIN field, then re-enter it in the Confirm PIN field.
  7. Click OK to save. Your Windows Hello PIN is now ready to use.

Using Your PIN to Sign In

  1. From the Windows lock screen, make sure your account is selected.
  2. Enter your PIN in the sign-in field.
  3. Press Enter to unlock and access your device.

Changing Your PIN

  1. Open Settings with Windows key + I.
  2. Go to Accounts > Sign-in options > PIN (Windows Hello).
  3. Select Change PIN.
  4. Enter your current PIN, then enter and confirm your new PIN.
  5. Click OK to apply the change.

Resetting a Forgotten PIN

  1. On the lock screen, click I forgot my PIN beneath the PIN entry field (or go to Settings > Accounts > Sign-in options > PIN (Windows Hello) > I forgot my PIN).
  2. Confirm your identity using your verification method when prompted.
  3. Enter and confirm a new PIN.
  4. Click OK to finish the reset.

Adding Face or Fingerprint Sign-In (Optional)

  1. Open Settings > Accounts > Sign-in options.
  2. Select Facial recognition (Windows Hello) or Fingerprint recognition (Windows Hello), depending on your device.
  3. Click Set up and follow the on-screen prompts to scan your face or fingerprint.
  4. Confirm your PIN when prompted to link it to your face or fingerprint.

Troubleshooting

Issue Solution
The "Set up" button for PIN is greyed out or missing Make sure you are signed in with your work or school account. Restart your device and try again. If it's still unavailable, contact the Service Desk.
The verification (MFA) step doesn't appear or fails during setup Make sure your phone has signal and the Microsoft Authenticator app is installed and set up. Try again, or contact your IT Service Desk to re-register your verification method.
You forgot your PIN and can't reset it Use the I forgot my PIN link and complete the verification step. If you can't verify your identity, contact your IT Service Desk.
Your PIN isn't accepted at sign-in Check that Caps Lock or Num Lock isn't affecting your entry, and confirm you're using the PIN for that specific device. Remember, each device has its own PIN.
Face or fingerprint sign-in option isn't available Your device may not have a compatible camera or fingerprint reader. Contact your IT Service Desk if you believe it should be available.

FAQs

Q: Is a Windows Hello PIN more secure than a password? A: Yes. Your PIN works only on the device where you set it up and is never shared online, so it can't be used elsewhere even if someone learns it.

Q: Can I use the same PIN on more than one device? A: No. Your Windows Hello PIN is specific to each device, so you'll set up a separate PIN on every device you use.

Q: What happens if I forget my PIN? A: You can reset it using the I forgot my PIN option and confirming your identity. If that doesn't work, contact your IT Service Desk.

Q: Do I still have a password? A: Yes, your account still has a password, but Windows Hello lets you sign in with your PIN or biometrics on that device instead of typing it.

Q: Can I use my face or fingerprint instead of a PIN? A: Yes, if your device has a compatible camera or fingerprint reader. You'll still set up a PIN as a backup.

Additional Resources

Windows Hello for Business overview – https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/

Contact Information

For further information or assistance, contact the IT Service Desk.