Windows Hello instead of a username/password

Question

I had a question regarding Hello.

As I understand from here (https://answers.microsoft.com/en-us/windows/forum/all/is-it-possible-to-disable-password-sign-in-but/e200a2bd-7ca7-48ce-8197-8d0d56c6f74c)

We can enable hello with a single/two-factor requirement, but after all is said and done, any user can login with the username/password alone.

So as I see it, Hello is really meant to be a nice-to-have and user friendly method to sign in, but as long as the user has a week password (which I can't enforce for whatever reason) Hello isn't adding any security.

Am I right?

Answer 1

Welcome to Microsoft Q&A Platform.
Yes, your understanding is correct.
Windows Hello just provides us more login options to make login easier and more convenient, doesn’t make login safer. All other login options such as fingerprint, PIN or facial recognition are based on password.
As long as user use a weak security password, even though he set other login option, his account is still under risk. Use password can skip all other options.