Set up a PIN, fingerprint, or face sign-in on a local Windows account, and Windows Hello works exactly the same as it does with a Microsoft account. No email address required. The only thing you lose is one online recovery option, and there’s an easy workaround for that too.
What Is Windows Hello?
Windows Hello is the sign-in system built into Windows 10 and Windows 11. It replaces your typed password with a short PIN, a fingerprint scan, or a face scan. It’s a feature already sitting inside Settings that talks to the camera, fingerprint reader, or security chip already in your PC.
Before You Begin
Make sure you have:
- A Windows 10 or Windows 11 PC signed in with a local account
- A password already set on that local account (Windows Hello needs an existing sign-in method before it can add a new one)
- Administrator access, or at least the account’s own password, to confirm identity during setup
- A fingerprint reader (built-in or external) if you want fingerprint sign-in
- A Windows Hello–compatible infrared (IR) camera if you want facial recognition; a standard webcam is not enough
| Requirement | Details |
|---|---|
| Device | Any Windows 10 or Windows 11 PC |
| OS version | Windows 10 (any recent build) or Windows 11 |
| PIN hardware | None required, works on virtually every PC |
| Fingerprint hardware | Built-in or external Hello-compatible fingerprint reader |
| Facial recognition hardware | Hello-compatible IR camera (built-in or external) |
Windows Hello does not require a Microsoft account. It works the same way on local, Microsoft, and work/school accounts. The only difference: local accounts lose the online “I forgot my PIN” reset link.
Step-by-Step Guide
Step 1: Open Sign-in options
Press Windows key + I to open Settings, then go to Accounts > Sign-in options.
You’ll see a list under Ways to sign in: Password, PIN (Windows Hello), Facial recognition (Windows Hello), and Fingerprint recognition (Windows Hello), depending on your hardware. This page looks and works identically whether you’re on a local account or a Microsoft account.
Tip: Want to confirm your account type first? Go to Settings > Accounts > Your info. If you see just a local username with no email address underneath, you’re on a local account.
Step 2: Set up a PIN
- On the Sign-in options page, select PIN (Windows Hello).
- Click Set up.
- Enter your current local account password to confirm your identity.
- In the Set up a PIN dialog, type a new PIN in the New PIN field, then repeat it in Confirm PIN.
- Optionally check Include letters and symbols if you want a longer alphanumeric PIN instead of digits only.
- Click OK.
Windows immediately switches your default sign-in tile to the PIN. Lock your PC (Windows key + L) and test it. You should see the PIN entry box instead of the password field.
A four-digit PIN sounds flimsy next to a sixteen-character password. It’s actually the safer bet here. It’s tied to the PC’s hardware (often backed by a TPM chip update) and never travels over a network. A website breach can’t expose it the way a reused password could.
Step 3: Add fingerprint recognition (optional)
Skip this step if your PC doesn’t have a fingerprint reader.
- Back on Sign-in options, select Fingerprint recognition (Windows Hello).
- Click Set up to launch the Windows Hello setup wizard.
- Click Get started.
- Enter your account password or PIN to confirm identity.
- Touch the fingerprint reader repeatedly as prompted. The wizard will ask you to lift and reposition your finger several times to capture a full print.
- Click Close when it confirms your fingerprint is registered.
- Click Add another if you want to enroll a second finger (useful for a bandaged thumb or a shared laptop).
Step 4: Add facial recognition (optional)
Skip this step if your camera isn’t Hello-compatible. Check Device Manager under Cameras; a Hello-compatible IR camera usually lists as something like “IR Camera” rather than just “Webcam” or “Integrated Camera.”
- On Sign-in options, select Facial recognition (Windows Hello).
- Click Set up, then Get started.
- Enter your account password or PIN to confirm identity.
- Look directly at the camera. The wizard scans your face from several angles automatically. You don’t need to click anything during the scan.
- When it finishes, click Close.
- Optionally click Improve recognition to run the scan again in different lighting, or turn on Enable improved sign-in security using enhanced anti-spoofing if your camera supports it.
Step 5: Confirm your default sign-in method
- Return to Sign-in options.
- Under Ways to sign in, check which method appears at the top of the lock screen by default.
- If you set up more than one Hello method, Windows lets you pick with the arrow icon on the lock screen next to the sign-in field.
- Lock your PC and test each method you configured to confirm it works before you rely on it.
Configuration
A few settings on the same page are worth knowing about once the basics work:
- Change PIN: Under PIN (Windows Hello), click Change to update it. You’ll need your current PIN or password first.
- Remove: Deletes a PIN or biometric enrollment entirely, useful before re-enrolling from scratch.
- Improve recognition (facial): Re-scans your face to improve accuracy in different lighting or after a haircut, glasses change, etc.
- Add another finger: Fingerprint recognition supports multiple enrolled fingers under one account.
- Dynamic lock: A separate but related setting (Settings > Accounts > Sign-in options > Dynamic lock) that locks your PC automatically when a paired Bluetooth phone moves out of range. It’s not part of Hello itself, but people often set it up around the same time.
Tips and Troubleshooting
Windows Hello setup option is greyed out or missing
Why it happens: The most common cause: the local account doesn’t have a password set yet. Hello needs an existing sign-in method before it can add a new one. Group Policy or MDM restrictions (common on managed work PCs) and disabled biometric hardware are the other two culprits.
Fix:
- Confirm the account has a password: Settings > Accounts > Sign-in options > Password > Add (or Change if one already exists).
- Check for a policy notice directly on the Sign-in options page; Windows displays a message there if an administrator has blocked Hello.
- Open Device Manager, expand Biometric devices or Cameras, and confirm your fingerprint reader or IR camera is listed and enabled (right-click > Enable device if it’s greyed out).
- Update the driver for that device from Device Manager > right-click the device > Update driver.
- If you’re on a personal, non-work PC and Hello is still blocked, run
gpedit.mscand check Computer Configuration > Administrative Templates > System > Logon for any “Turn on convenience PIN sign-in” or biometric policy set to Disabled, and switch it to Not Configured.
“Couldn’t recognize you” during facial recognition
Why it happens: Poor lighting, an obstructed camera, or a security change in recent Windows updates that requires a clearly visible, well-lit face in addition to the IR scan.
Fix: Sign in with your PIN or password, then go to Sign-in options > Facial recognition (Windows Hello) > Improve recognition and re-enroll in brighter, more even lighting.
Fingerprint isn’t recognized
Why it happens: A dirty or damaged sensor, inconsistent finger placement, or an outdated enrollment.
Fix: Wipe the sensor with a dry, lint-free cloth, sign in with PIN or password, then go to Sign-in options > Fingerprint recognition (Windows Hello) and re-register the finger.
PIN creation fails or stops working after an update
Why it happens: Certain Windows security updates or system resets can corrupt the local Hello container that stores your PIN.
Fix: Sign out and back in, then try creating the PIN again. Run Windows Update to install the latest patches. If it still fails, remove the existing PIN entirely under Sign-in options and set up a fresh one.
“I forgot my PIN” doesn’t appear
This is expected on a local account. See the trade-offs below.
Local Account vs. Microsoft Account: What You Actually Lose
Windows Hello’s day-to-day behavior, unlocking with a PIN, fingerprint, or face, is identical on both account types. The gap only shows up in recovery:
- No online PIN reset. With a Microsoft account, forgetting your PIN gives you an “I forgot my PIN” link that verifies your identity online and lets you set a new one remotely. Local accounts don’t get this link.
- What you do instead: If you remember your account password, sign in with it and set the PIN again from Sign-in options. If you’ve forgotten both the PIN and the password, recovery gets much harder. You’re limited to a password reset disk (if you made one in advance) or a full account reset, which can wipe local files tied to that profile.
- Everything else stays the same: PIN, fingerprint, and face data are stored only on your device (tied to the TPM where available) regardless of account type. Microsoft never sees or stores your biometric data on its servers either way.
If losing the online PIN reset worries you, create a password reset disk now, before you need it: Control Panel > User Accounts > Create a password reset disk (still available in Windows 11 via Control Panel).
Wrapping Up
The PIN is the fix that works for basically everyone: a minute to set up, and it runs on every Windows PC regardless of account type. Fingerprint and facial recognition are worth the extra few minutes if your hardware supports them, but check Device Manager first if the option’s greyed out. A disabled sensor is the usual snag on local accounts, not a real hardware problem.
The one trade-off worth remembering: no Microsoft account means no online PIN reset. Make a password reset disk now, while you can still think clearly, rather than after you’ve locked yourself out.
| Step | Action | Applies To |
|---|---|---|
| 1 | Open Settings > Accounts > Sign-in options | All accounts |
| 2 | Set up a PIN with your account password | Local & Microsoft accounts |
| 3 | Enroll fingerprint (if reader present) | Hardware-dependent |
| 4 | Enroll facial recognition (if IR camera present) | Hardware-dependent |
| 5 | Fix greyed-out option via password, Device Manager, or Group Policy | Local accounts (common issue) |
| 6 | Create a password reset disk as a recovery backup | Local accounts only |
Resources
- Set up Windows Hello (Microsoft Support)
- Change or reset your PIN in Windows
- Windows Hello common issues and troubleshooting tips
- Sign-in options in Windows
- Learn more about clearing the TPM chip for a fresh start.
- For more on Windows security, visit Microsoft Support for detailed guides.
- Consider disabling Windows 11 lock screen ads for a cleaner experience.
- If you’re experiencing issues with your Wi-Fi, check out our guide on fixing Wi-Fi issues in Windows 11.
