How to use Windows Hello fingerprint when signed in but still require master pin for account sign in.

Question

How can I use Windows Hello fingerprint for validation when already signed in, but still require the master pin for initial account sign-in?

Answer 1

Dear Dave,

It is not possible to directly configure Windows Hello to mandate a PIN for the initial account sign-in while exclusively using the fingerprint for authentication after you are already logged in. Windows Hello is designed to offer a choice of your configured secure sign-in methods—be it a PIN, fingerprint, or facial recognition—at the login screen. The PIN serves as the foundational "master key" for Windows Hello; your fingerprint and other biometric data are essentially linked to this PIN.

Setting Up Your PIN and Fingerprint:

• Navigate to Settings > Accounts > Sign-in options.
• If you haven't already, you will be prompted to set up a PIN (Windows Hello). This is a mandatory step before you can enroll a fingerprint. Click on "Set up" and follow the on-screen instructions.
• Once your PIN is established, you can then configure Fingerprint recognition (Windows Hello). Click on "Set up" and follow the prompts to register your fingerprint.

With both the PIN and fingerprint configured, you will have the option to use either to sign in to your account from the lock screen. For in-session actions that require authentication, such as User Account Control (UAC) prompts or logging into supported applications, you will also be presented with the choice to use your fingerprint or PIN. Your workflow would then be to consciously select the PIN for the initial login and use the fingerprint for subsequent authentications.

Best Regards

---