Windows PC
Windows Hello for Business
Windows Hello for Business lets you sign in to your work PC — and to Microsoft 365 on it — with a PIN, your face or your fingerprint instead of a password. The credential is created inside your PC and never leaves it, which makes it phishing-resistant.
At a glance
- ✅ Passwordless and phishing-resistant
- ✅ Unlocks with a PIN, face or fingerprint
- ❌ Works on this PC only — you set it up again on a new PC
Setting it up
On a work PC, set-up usually starts by itself the first time you sign in, before you reach the desktop. You'll see these screens:
- Set up face or fingerprint (optional) If your PC has a camera or fingerprint reader that supports Windows Hello, you're asked to set it up. You can skip this and use a PIN instead.
- Use Windows Hello with your work account Select OK when asked whether to use Windows Hello with your organisation account.
- Verify it's you Complete multi-factor authentication — for example, approve the sign-in in Microsoft Authenticator. Set-up waits until this succeeds.
- Create your PIN Choose a PIN and enter it twice. Your organisation may set rules, such as a minimum length.
- You're done From now on, use your PIN, face or fingerprint to unlock the PC and sign in to work apps.
Your PIN is not a password
A Windows Hello PIN only works on this PC. Someone who learns it can't use it from anywhere else, which is why
it's safer than a password even if it's shorter. Changing your account password doesn't change your PIN.
If something goes wrong
- Forgot your PIN? On the sign-in screen select I forgot my PIN, or go to Settings › Accounts › Sign-in options. You'll verify who you are and set a new one, if your organisation has enabled PIN reset.
- Set-up didn't start? Your organisation may not have turned it on for your PC, or set-up couldn't complete. Contact your IT support team.
- New PC? Windows Hello doesn't move between devices. You'll be asked to set it up again on the new one.