Windows Hello

Windows Hello is a strong two-factor authentication on Windows PCs and mobile devices that can replace the need for passwords. This authenication consist of a new type of credential that is tied to a device and uses a biometric or PIN. The following devices are supported with Windows Hello:

  • Fingerprint reader
  • PIN
  • IR Camera
  • Security Key

As outlined by Microsoft, Windows Hello addresses the following problems with passwords:

  • Strong passwords can be difficult to remember, and users often reuse passwords on multiple sites.
  • Server breaches can expose symmetric network credentials (passwords).
  • Passwords are subject to replay attacks.
  • Users can inadvertently expose their passwords due to phishing attacks.

Why a PIN is better than a password

  • PIN is tied to the device
  • PIN is local to the device
  • PIN is backed by hardware

To learn more, please visit the following page: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-why-pin-is-better-than-password

Setup Windows Hello

To enable the use of a PIN, Security Key or biometric authentication device such as a fingerprint reader or IR Camera, please follow the steps below.

Please note that your biometric hardware must be supported by Windows Hello to be used for login. You will also need a mobile device such as a cell phone to setup multi-factor authentication for your Gustavus Microsoft account. At this time, DUO is not supported with Windows Hello.

  1. Contact Gustavus Technology Services to have Windows Hello enabled on your device.
  2. Once Windows Hello is enabled on your device, you will see a prompt on your device the next time you log in.
  3. Please follow the prompts to setup your required PIN.

Setup your sign in options

To setup a biometric device such as a fingerprint reader or IR camera, please follow the directions below.

  1. Click the start menu button and start typing Sign-in options.
  2. Select Sign-in options from the results.
  3. Select the type of device you would like to setup.
  4. Click Set up.
  5. Follow the onscreen prompts to setup the device.

Reset your PIN

Your PIN is unique to your device and must be reset on your device.

  1. Login to your machine using the password option.
  2. Click the start menu button and start typing Sign-in options.
  3. Select Sign-in options from the results.
  4. Select Windows Hello PIN.
  5. Select I forgot my PIN.
  6. Follow the prompts to reset your PIN.