Related topics
×
Sign in with Microsoft
Sign in or create an account.
Hello,
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

To access your sign-in options, go to Start > Settings > Accounts > Sign-in options.

Or just select this button:

Go to Sign-in options

Change or manage your password or PIN

To change your password or PIN, go to Start > Settings > Accounts > Sign-in options.

  • Select PIN (Windows Hello), and then select Change PIN.

  • Select Password then select Change.

Windows Hello

Windows Hello lets you sign in to your devices, apps, online services, and networks using your face, iris, fingerprint, or a PIN. Even if your Windows device can use Windows Hello biometrics, you don’t have to. If it’s the right choice for you, you can rest assured that the info that identifies your face, iris, or fingerprint never leaves your device. Windows does not store pictures of your face, iris, or fingerprint on your device or anywhere else.

When you set up Windows Hello biometrics, it takes the data from the face camera, iris sensor, or fingerprint reader and creates a data representation—or graph—that is then encrypted before it’s stored on your device.

To help us keep things working properly, to help detect and prevent fraud, and to continue improving Windows Hello, we collect diagnostic data about how people use Windows Hello. For example, data about whether people sign in with their face, iris, fingerprint, or PIN; the number of times they use it; and whether it works or not is all valuable information that helps us build a better product. The data is pseudonymized, does not include biometric information, and is encrypted before it's transmitted to Microsoft. You can choose to stop sending diagnostic data to Microsoft at any time. Learn more about diagnostic data in Windows

To turn on Windows Hello

  1. Go to Start > Settings > Accounts > Sign-in options

  2. Select the Windows Hello method that you want to set up,

  3. Select Set up.

If you don't see Windows Hello in Sign-in options, then it may not be available for your device. Windows Hello does require a compatible camera or fingerprint reader. 

To remove Windows Hello and any associated biometric identification data from the device

  1. Go to Start > Settings > Accounts > Sign-in options.

  2. Select the Windows Hello method you want to remove.

  3. Select Remove.

Your biometric data will remain on your device until you remove it. However, after a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric data.  You can go to Settings and remove Windows Hello, and any associated biometric identification data, at any time. If you enrolled using an external device, such as a USB fingerprint reader, please connect the device first.

For more information, see Learn about Windows Hello and set it up.

Using a security key

A security key is a hardware device - usually in the form of a little USB key - that you can use instead of your username and password to sign in on the web. Since it's used in addition to a fingerprint or PIN, even if someone has your security key, they won't be able to sign in without the PIN or fingerprint that you create.

Security keys are usually available for purchase from retailers that sell computer accessories. Learn more about security keys

To set up a security key

  1. Go to Start > Settings > Accounts > Sign-in options,

  2. Select Security Key.

  3. Select Manage and follow the instructions.

Lock your device

If you're stepping away from your device for a few minutes it's a good idea to lock it so that others can't see what's on your screen, or access anything on it. Press the Windows logo key + to immediately lock in. When you return you'll just need to authenticate and you'll be right where you left off.

Dynamic lock

Windows can use devices that are paired with your PC to help detect when you’re away, and lock your PC shortly after your paired device is out of Bluetooth range. This makes it more difficult for someone to gain access to your device if you step away from your PC and forget to lock it.

  1. On your Windows 11 PC, select Start > Settings > Accounts > Sign-in options.

  2. Under Dynamic lock, select the Allow Windows to automatically lock your device when you’re away check box.

  3. Use Bluetooth to pair your phone with your PC. Learn how to pair devices using Bluetooth

Once they’re paired, take your phone with you when you walk away, and your PC will automatically lock a minute or so after you’re out of Bluetooth range. 

Other sign-in options

Manage when you're required to sign in

Go to Start > Settings > Accounts > Sign-in options. Next to If you've been away, when should Windows require you to sign in again? select an option for when Windows should require you to sign in again.

To show your account details on the sign-in screen

Go to Start > Settings > Accounts > Sign-in options. Turn on Show account details such as my email address on the sign-in screen.

To automatically finish setup after an update

Go to Start > Settings > Accounts > Sign-in options. Turn on Use my sign-in info to automatically finish setting up after an update if you want to use your sign-in info to automatically finish setting up your device after an update or restart.

Advanced Debugging

Organizational requirements for enabling Windows Hello for Business

Organizational administrators may configure requirements that devices must satisfy before enabling Windows Hello for Business for use with organizational accounts. If these requirements are not met, you may get an error message when attempting to enable Windows Hello for Business that states "This device doesn't meet your organization's requirements for Windows Hello".

To get more detailed information

Go to Start > Event Viewer. In the navigation tree on the left, go to Applications and Services Logs > Microsoft > Windows > User Device Registration > Admin. Select the most recent event presented; the information in this log event may clarify why you are receiving this error message.

Common Hardware Issues

One way that machines may fall into this case is if the machine has a TPM with some sort of issue, such as out-of-date firmware. To check this, you can use TpmTool:

TpmTool GetDeviceInformation

If it reports that "TPM Has Vulnerable Firmware: True", please get in touch with your IT provider to install an updated firmware. Learn more about TpmTool

To access your sign-in options, go to Start  > Settings > Accounts  > Sign-in options.

Or just click this button:

Go to Sign-in options

Change or manage your password

To change your password, go to Start  > Settings > Accounts  > Sign-in options. Select Password, and then select Change.

Note: To change your password if you're using a work or school account, you can press Ctrl+Alt+Del and then select Change a password.

Windows Hello

Windows Hello lets you sign in to your devices, apps, online services, and networks using your face, iris, fingerprint, or a PIN. Even if your Windows device can use Windows Hello biometrics, you don’t have to. If it’s the right choice for you, you can rest assured that the info that identifies your face, iris, or fingerprint never leaves your device. Windows does not store pictures of your face, iris, or fingerprint on your device or anywhere else.

When you set up Windows Hello biometrics, it takes the data from the face camera, iris sensor, or fingerprint reader and creates a data representation—or graph—that is then encrypted before it’s stored on your device.

To help us keep things working properly, to help detect and prevent fraud, and to continue improving Windows Hello, we collect diagnostic data about how people use Windows Hello. For example, data about whether people sign in with their face, iris, fingerprint, or PIN; the number of times they use it; and whether it works or not is all valuable information that helps us build a better product. The data is pseudonymized, does not include biometric information, and is encrypted before it's transmitted to Microsoft. You can choose to stop sending diagnostic data to Microsoft at any time. Learn more about diagnostic data in Windows

To turn on Windows Hello

  1. Go to Start  > Settings > Accounts  > Sign-in options,

  2. Select the Windows Hello method that you want to set up

  3. Select Set up.

If you don't see Windows Hello in Sign-in options, then it may not be available for your device. Windows Hello does require a compatible camera or fingerprint reader. 

To remove Windows Hello and any associated biometric identification data from the device

  1. Go to Start  > Settings > Accounts  > Sign-in options.

  2. Select the Windows Hello method you want to remove, and then select Remove.

Your biometric data will remain on your device until you remove it. However, after a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric data.  You can go to Settings and remove Windows Hello, and any associated biometric identification data, at any time. If you enrolled using an external device, such as a USB fingerprint reader, please connect the device first.

For more information see Learn about Windows Hello and set it up. 

Using a security key

A security key is a hardware device - usually in the form of a little USB key - that you can use instead of your username and password to sign in on the web. Since it's used in addition to a fingerprint or PIN, even if someone has your security key, they won't be able to sign in without the PIN or fingerprint that you create.

Security keys are usually available for purchase from retailers that sell computer accessories. Learn more about security keys

To set up a security key,

  1. Go to Start  > Settings > Accounts  > Sign-in options,

  2. Select Security Key.

  3. Select Manage and follow the instructions.

Lock your device

If you're stepping away from your device for a few minutes it's a good idea to lock it so that others can't see what's on your screen, or access anything on it. Press the Windows logo key + L to immediately lock in. When you return you'll just need to authenticate and you'll be right where you left off.

Dynamic lock

Windows can use devices that are paired with your PC to help detect when you’re away and lock your PC shortly after your paired device is out of Bluetooth range. This makes it more difficult for someone to gain access to your device if you step away from your PC and forget to lock it.

  1. On your Windows 10 PC, select Start > Settings > Accounts  > Sign-in options.

  2. Under Dynamic lock, select the Allow Windows to automatically lock your device when you’re away check box.

  3. Use Bluetooth to pair your phone with your PC. Learn how to pair devices using Bluetooth

Once they’re paired, take your phone with you when you walk away, and your PC will automatically lock a minute or so after you’re out of Bluetooth range. 

Other sign-in options

Manage when you're required to sign in

Go to Start  > Settings > Accounts  > Sign-in options. Under Require sign-in, select an option for when Windows should require you to sign in again.

To show your account details on the sign-in screen

Go to Start > Settings > Accounts  > Sign-in options. Under Privacy, turn the first setting On if you want to show your account details on the sign-in screen.

To automatically finish setup after an update

Go to Start > Settings > Accounts  > Sign-in options. Under Privacy, turn the second setting On if you want to use your sign-in info to automatically finish setting up your device after an update or restart.

Advanced Debugging

Organizational requirements for enabling Windows Hello for Business

Organizational administrators may configure requirements that devices must satisfy before enabling Windows Hello for Business for use with organizational accounts. If these requirements are not met, you may get an error message when attempting to enable Windows Hello for Business that states "This device doesn't meet your organization's requirements for Windows Hello".

To get more detailed information

Go to Start > Event Viewer. In the navigation tree on the left, go to Applications and Services Logs > Microsoft > Windows > User Device Registration > Admin. Select the most recent event presented; the information in this log event may clarify why you are receiving this error message.

Common Hardware Issues

One way that machines may fall into this case is if the machine has a TPM with some sort of issue, such as out-of-date firmware. To check this, you can use TpmTool:

TpmTool GetDeviceInformation

If it reports that "TPM Has Vulnerable Firmware: True", please get in touch with your IT provider to install an updated firmware. Learn more about TpmTool

See also

Change or reset your Windows password

Activate Windows

Sign in to Windows

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!

×