Windows 10: Windows Hello MFA PIN + Password

TRAN Mathieu · May 23, 2024

Hello everyone,We are trying to set up Windows Hello and MFA at Windows login.Our users are not ready at the moment to use biometrics method like fingerprint, face recognization or pairing personnal device. I know its not optimal...In IT Team we have already setup fingerprint or face recongization, but its for end users who are less openminded about this..I use settings catalog in Intune.Group A{D6886603-9D2F-4EB2-B667-1971041FA96B}Group B{60b78e88-ead8-445c-9cfd-0b87f74ea6cd}Sadly, if user login with password it bypass windows hello second stepIf i select manually PIN, it ask for password f

:)

Anne Ros · May 23, 2024

Login with PIN and Hello

Hi Jean,

Windows 10 includes multiple options to sign-in to your account, including the ability to sign-in using a PIN and Windows Hello, which uses facial recognition. For us to provide a solution suited to your concern, we need additional information. Can
you answer the questions below?

How are you setting the PIN and Hello?

Which build version of Windows is your PC running on?

Were there any error codes or messages?

In the meantime, we suggest that you follow the steps below on how to set up PIN.

Open Settings.

Select Accounts.

Click Sign-in options.

Click the Add button for the PIN and set your PIN.

Do the same for the Windows Hello.

Looking forward to your response.

Guillaume . · May 23, 2024

Forgotten PIN and expired password

Hi Dyari,

Thanks for your answer.

I tried steps of both links:

#1: reset PIN code

I see no link "reset your PIN"on login page --> I can't reset it

#2: change or reset windows password

My Windows account is not displayed at all on login page.

I am using a local account

If you have any other suggestion, I would be more than happy to try.

Regards,

Guillaume

Brink · May 23, 2024

Your password does not matter - Multi-Factor Authentication (MFA) does

Your pa$$word doesn’t matter—Multi-Factor Authentication (MFA) is the best step you can take to protect your accounts. Using anything beyond passwords significantly increases the costs for attackers, which is why the rate of compromise of accounts using any MFA is less than 0.1 percent of the general population.

All authenticators are vulnerable

There is a broad range of mechanisms to break authenticators. That doesn’t make all authenticators equally vulnerable. Costs vary massively by attack type, and attacks that preserve anonymity and don’t require proximity to the target are much easier to achieve. Channel-Jacking and Real-Time Phishing are the most dominant ways we see non-password authenticators compromised.

Channel independent, verifier impersonation-resistant authenticator types—such as smartcards, Windows Hello, and FIDO—are incredibly hard to crack. Given an overall strong authentication rate of only about 10 percent, doing any form of MFA takes you out of reach of most attacks. Turn on MFA now and start building a long-term authenticator strategy that relies on “phish proof” authenticators, such as Windows Hello and FIDO.

To learn more, read All your creds are belong to us!
Click to expand...

Read more:

Your password doesn’t matter—but MFA does!

Your Pa$$word doesn't matter

All your creds are belong to us!

Windows 10: Windows Hello MFA PIN + Password

Windows Hello MFA PIN + Password

Windows Hello MFA PIN + Password

Windows Hello MFA PIN + Password

Windows Hello MFA PIN + Password - Similar Threads - Hello MFA PIN

On-Premises MFA Support for Windows Hello

On-Premises MFA Support for Windows Hello

On-Premises MFA Support for Windows Hello

Windows Hello MFA PIN + Password

Windows Hello MFA PIN + Password

Windows hello password fingerprint 2FA and PIN????

Windows hello password fingerprint 2FA and PIN????

REMOVE Password and Hello Pin

Windows 10 HELLO PIN MFA Prompt??