Skip to main content

Enabling Windows Hello sign in features

Windows Hello is an authentication feature  that allows users to securely sign in to their devices using facial recognition, fingerprint, or a PIN code, instead of a traditional password. It offers a more convenient and secure way to access your computer, and helps protect against unauthorized access.

Note: This is only for BCIT issued Windows devices.

Important Notice: MFA Required

In order to enable the Windows Hello sign in features, you will be required to setup Multi Factor Authentication (MFA) for your Microsoft Account. You will need a mobile device in order to set up MFA using either the DUO Mobile app or by installing the Microsoft Authenticator app.

  1. Launch the Company Portal. For more information on using the Company Portal please refer to the Installing BCIT software on BCIT computers Knowledge Base article.
  2. Enter Windows Hello in the Search field.
  3. Find the Windows Hello application tile in the Apps menu, then click Install.
  4. After the installation is complete, a prompt will appear on your taskbar confirming the successful installation of Windows Hello.
  5. On your desktop, click the Start button, and then click on the Settings icon.
  6. On the right-hand menu, click on Accounts.
  7. Click on Sign-in options.
  8. Select one of the Windows Hello sign in features. For this example, we will be setting up Fingerprint recognition.
  9. Expand the Fingerprint recognition (Windows Hello) menu and click on the Set up button.
  10. A Windows Hello setup page will appear. Click the Get started button.
  11. Follow the prompts to scan your finger print. Once your fingerprint has been scanned, you will be notified that you must set up a PIN.  Click on Set up PIN to begin this process.
  12. A Microsoft Account screen will appear. Click OK to begin setting up your PIN.
  13. You will be redirected to a BCIT login menu to begin MFA setup for your BCIT issued Microsoft Account. Click Next.
  14. Enter your BCIT password and click Sign in.
  15. At this point in the process, you will be prompted to setup MFA for your Microsoft account (this is different than your DUO MFA). Microsoft’s recommended MFA setup suggests that you download the Microsoft Authenticator App for MFA. In this example, we will use your existing DUO MFA App for this setup.  Click on the ‘I want to use a different authenticator app’ link.
  16. Click Next.
  17. You will be presented with a QR code to scan with your mobile device.
    Note: Do not click on Next just yet.
  18. On your Mobile Device, open the DUO MFA app and tap the Add button.
  19. Tap on Use QR code.
  20. Scan the QR code from the Microsoft Account setup screen.
  21. Feel free to edit the Account name field as desired, then tap Save.
  22. You should now see a new Account titled Microsoft – Third–Party in your DUO app.
  23. On your computer, click the Next button.
  24. You will be prompted to enter a 6 digit code from your new Microsoft – Third–Party account in your Duo Mobile app.
  25. In the DUO Mobile App on your mobile device, tap on the Microsoft – Third–Party account to reveal a 6-digit passcode.

    Please note that the passcode expires after 30 seconds, as indicated by the countdown timer below the 6-digit code. Ensure the passcode has ample time remaining before proceeding to the next step.
  26. Enter the 6-digit code shown in the DUO Mobile App in the text field and click the Next button.
  27. Upon successfully setting up the Authentication method, you should see the screen as shown below. Click the Done button.
  28. Repeat step 25 to generate a new 6-digit passcode. Enter the new passcode in the text field, then click Verify.
  29. You will now be prompted to setup a PIN for your Microsoft Account. Enter the PIN number in the two text fields and click OK.

    Note: The PIN must be a minimum of 6 digits.
  30. Upon successfully setting up your PIN, you should see the screen as shown below.  Click the OK button.

    You have now successfully set up MFA on your Microsoft Account and enabled a PIN and fingerprint as additional Windows Hello sign in methods.

More information about Accounts, Passwords & Access