Windows 10: Is a Windows PIN + TPM more secure than a standard password if you don't plan on signing in...

Right now I use a long and complex password to sign into my local account. I've never signed into Windows using my Microsoft account and don't plan to. I've been considering switching over to a Windows Hello PIN + TPM for convenience, but want to make sure this is actually more secure or at least as secure as my current setup. All the arguments I've seen in favor of a Hello PIN assume the user is signing in with a Microsoft account - in which case it's obvious why a locally-stored PIN tied to your TPM chip would be more secure than a password ultimately kept in the cloud. This isn't the case

:)

 

Remove sign in pin

Hi Joel,

Thank you for contacting Microsoft Community. Your interest in Windows 10 is much appreciated.

I suggest you to follow the below steps to remove the sign in pin/password options.

• In the search box type sign-in-option.
• Click on the sign-in-option.
• Then you can find password/pin/picture password.
• There you can remove the option and check.

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

 

Sign in security-pin and password

I currently have no password or pin required to sign into windows 10. I would like to establish a pin. Trouble is windows asks for my password in order to setup the pin. If I leave the password space blank it rejects it as the wrong password, if I put
in my microsoft account password it rejects it also. How do I get past the password required step? Thanks.

 

Bitlocker...TPM + PIN vs Password?

Using TPM is undoubtable more secure. Some advantages are (compared to using USB and PIN):

You can't copy it - the TPM key is unique.
Like you say you can configure timeout.
Can check boot files for tampering.

Trusted Platform Module Technology Overview (Windows 10)

Using a PIN as a logon to your account (nothing to do with bitlocker PIN) can also be more secure than using a password incidentally. Why a PIN is better than a password (Windows 10)

No it doesn't. It asks you if you want to. In fact it asks you if you want to print it, save it (to another disk), save it to your MS account. or your AD. Depending what your group policy allows you can do some, all or none of these. BitLocker Group Policy settings (Windows 10)