UiBhelp's public knowledge cards

KI 2957 Windows Hello for Business - passwordless Windows sign-in

(updated )
Instructions for enabling Windows Hello For Business on UiB clients
What is Windows Hello for Business?
Windows Hello for Business is Microsoft's passwordless sign-in solution for Windows. Instead of using a password, you sign in using a PIN or facial recognition. The solution uses modern key-based authentication and is designed to be resistant to phishing attacks.

Remember: You can choose whether or not you want to use biometrics (facial recognition).

Benefits
  • Phishing-resistant authentication
  • Faster sign-in
  • Support for facial recognition and PIN
  • Integrated security using the device's TPM chip
Note: Microsoft uses the term PIN to describe what is effectively a passcode, since it can contain characters other than digits.

Getting Started
This applies only to personal Windows devices managed with the UiB configuration.

When Windows Hello for Business has been enabled for your user account, Windows will automatically prompt you to set it up after signing in.

First-time Setup
  1. Sign in to Windows using your regular work account.
  2. Register your face if the device supports facial recognition, or skip this step.
  3. Verify your identity using Multi-Factor Authentication (MFA).
  4. Create a PIN.
  5. Done! You can now use your PIN or biometric sign-in instead of a password.
Microsoft has published a video demonstrating the user experience during first-time enrollment of Windows Hello for Business here.

Important Information
  • Your PIN is tied to the specific device and is never sent to Microsoft or your organization.
  • Biometric data is stored only locally on the device.
  • Even if you change your password later, Windows Hello for Business will continue to work normally.