If the Windows Hello “Remove” button is greyed out, remove the specific Windows Hello method (face or fingerprint) from the Sign-in options page instead of trying to remove Windows Hello globally.
On Windows 10/11:
- Open Start > Settings > Accounts > Sign-in options.
- Under Windows Hello Face or Fingerprint recognition (Windows Hello), select the method that is currently set up.
- Select Remove for that method.
- If prompted, authenticate with your PIN or password.
This unenrolls the device from that Windows Hello biometric method and deletes the associated biometric template data.
If a PIN is configured and must be removed as well:
- In Settings > Accounts > Sign-in options, go to PIN (Windows Hello).
- Choose Remove (or use I forgot my PIN if you need to reset it first).
If the Remove button for a given method is still blocked, ensure at least one other sign-in method (password or another Hello method) is available; Windows requires at least one valid way to sign in before allowing removal.
For managed/enterprise devices using Windows Hello for Business, administrators can also clear the Windows Hello for Business container with:
certutil.exe -deleteHelloContainer
Note: On the latest Windows 11 versions, this also deletes any passkeys stored on the device, so an alternative sign-in method must be prepared first.
References: