Windows 10: Windows Logon: 2-Factor Biometric Authentication

I have done some reading that Windows10 will incorporate 2-factor authentication.

I was wondering for Windows Logon, does Windows10 support password AND biometric (e.g. fingerprint) authentication? If so, can you provide any feedback on exactly how this is implemented?

Thank you.

:)

 

2 factor authentication question.

Update: as you said, there is no 2 factor authentication options like I described for windows 10 (which is surprising). However, a third party application called Duo does work as I had inquired. Using my normal logon password initially, my system then sends
a authentication approval message to my phone. I can then choose to allow or deny logon, its a pretty nifty app.

Anyway, the original question can be marked as no; however, the third party app mentioned does make 2 factor authentication possible with your smart phone.

 

Windows 10 insecurity.

Hi,

Welcome to Microsoft Community.

I would like to inform you that multi-factor authentication is built into the OS, using the device itself in the form of a hashed signature as the first factor and the PIN or biometric reader as the second factor to authenticate.

Access is only possible through physical access to the device combined with access via the personal identification number (PIN) or biometrics, perhaps a fingerprint. Additional hardware security peripherals will not be necessary to secure the
identity. Being able to use two-factor authentication in this manner should prove to be more convenient and user friendly.

However we apologize to say that you can either use PIN or Fingerprint as an option as it is by design.

Hope this information helps you.

 

Windows 10: Security and Identity Protection for the Modern World

Here is some basic info on Biometrics
Biometrics - Wikipedia

Apparently it will be a preferred method for logging in to windows, as to how the fingerprinting (if that is indeed what you want more info about) will work here is some info

https://support.microsoft.com/kb/899626

 

Thanks for the info Berkey.

Does this information apply to Network based logins or does it apply to Windows10 Home Users as well?

I am asking with respect to a basic home computer user, not with respect to a more sophisticated work environment.

From the reading, it sounds like you will use a combination of 1) a device (e.g. smartphone); and 2) a PIN or fingerprint. But this seems rather cumbersome to force users to have to use a device. Some users may not have a smartphone (e.g. the elderly, children ).

Specifically, will there be the ability to use an old-fashioned password with the option to add a fingerprint as a 2nd level of authentication?

Hope you (or someone will) know.

Thank you.

 

This should be applied to all log in types. I'd imagine using a phone for a second authenticity would be aimed toward the average home user, but finger print scanning is still an option. I will try to find a blog post that came out (can probably find it just by searching) which talked about network 2 factor authentication .

The old style passwords should still work just fine, no second password required, although I'm sure it will be highly recommended, but it's your data, so your should be able to log on how ever you'd like