Windows Hello on Windows 10 — fingerprint, face, or PIN sign-in — tends to break in one of two ways: it vanishes after an update (“Windows Hello isn’t available on this device”), or enrollment fails with a cryptic error. Both are fixable, and the culprit is usually the biometric driver or corrupted credential data rather than the hardware itself.
One note before starting: Windows 10 reached end of support in October 2025. These fixes work fine, but if your laptop supports it, planning a Windows 11 upgrade is smart for security reasons — not required for Hello, just good hygiene.
Why this happens
- Update replaced the OEM biometric driver: Windows Update swaps manufacturer drivers for generics that lack Hello support.
- Biometric device disabled: The fingerprint reader or IR camera got disabled in Device Manager.
- Corrupted Hello credential store: Damaged PIN or biometric templates.
- TPM malfunction: Hello PIN is TPM-backed; TPM errors break enrollment.
- Camera access disabled: Privacy settings blocking the camera break face setup.
- Windows Biometric Service stopped: The background service Hello depends on isn’t running.
How to fix it
Work through these in order — hardware check, drivers, credentials, TPM.
Fix 1: Confirm the biometric device is present and enabled
Start with Device Manager, not guesswork.
- Press Win + X > Device Manager.
- Expand Biometric devices — your fingerprint reader should be listed without warnings. Check Imaging devices for the camera/IR camera.
- Yellow icon? Right-click > Update driver. Down arrow (disabled)? Right-click > Enable device.
- Missing entirely? Check View > Show hidden devices — a greyed-out entry means Windows sees the hardware but can’t start it (driver problem, Fix 2).
- Truly absent on a laptop that never had a reader? Then Hello biometrics were never available — PIN is your option.
Fix 2: Reinstall the manufacturer’s biometric driver
The single most effective fix for post-update Hello breakage.
- Identify your laptop’s exact model (Win + R >
msinfo32> System Model). - Download the fingerprint reader and camera drivers from your manufacturer’s official support site — Dell , HP , or Lenovo . Use only the manufacturer’s site.
- In Device Manager, uninstall the biometric device, checking Delete the driver software for this device.
- Install the downloaded driver and restart.
- Check Settings > Accounts > Sign-in options — the Hello options should be available again.
- Prevent Windows Update from swapping it back with the Show or hide updates troubleshooter.
Fix 3: Remove and re-add PIN and biometrics
Corrupted credential data is fixed by starting over.
- Go to Settings > Accounts > Sign-in options.
- Under Windows Hello PIN, click Remove, then set up a new PIN.
- Remove Windows Hello Fingerprint / Face entries, then re-enroll.
- Enroll fingerprints twice at different angles; for face, ensure even lighting without glare.
- If you see error
0x80090016or similar during PIN setup, that’s a TPM/container issue — continue to Fix 6. - Microsoft’s Hello troubleshooting is documented on the Windows support hub .
Fix 4: Check camera privacy settings
Face recognition needs camera access at the OS level.
- Settings > Privacy > Camera — ensure Allow apps to access your camera is on.
- On Windows 10, also check Settings > Privacy > Camera > Allow desktop apps to access your camera.
- If your laptop has a physical camera shutter or Fn key camera kill-switch, verify it’s open — on many models the IR camera shares the shutter.
- Test the regular webcam in the Camera app — if it doesn’t work either, it’s a camera driver problem, not Hello-specific.
Fix 5: Restart the Windows Biometric Service
A stuck service silently disables all biometrics.
- Win + R >
services.msc> find Windows Biometric Service. - Set Startup type to Automatic, and click Start if it’s stopped. If running, Restart it.
- Also verify Credential Manager is running.
- Retry Hello enrollment.
- If the service crashes on start, run
sfc /scannowfrom an elevated prompt — corrupted system files are the usual cause.
Fix 6: Fix TPM issues
Hello PIN requires a healthy TPM.
- Win + R >
tpm.msc— it should say “The TPM is ready for use.” - If not, enter BIOS and enable TPM (Intel PTT / AMD fTPM).
- For persistent TPM errors, back up BitLocker recovery keys first, then Clear TPM in
tpm.mscand re-enroll Hello. - After TPM is healthy, redo Fix 3 — old credentials enrolled against a broken TPM won’t work.
- Some older laptops need a BIOS update for TPM 2.0 reliability — check the manufacturer’s site.
Fix 7: Reset Hello via registry (advanced)
When the UI options are greyed out and nothing else works, stale policy/registry state may be blocking Hello.
- Win + R >
regedit. Navigate toHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System. - If
AllowDomainPINLogonexists and is 0, set it to 1 (relevant mainly on domain-joined PCs). - Check
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUIfor corruption — don’t delete keys blindly; export the branch first as backup. - Alternatively, run an in-place upgrade: mount a Windows 10 ISO (from Microsoft’s official software download site) and run setup keeping files and apps. This refreshes the entire Hello stack.
- Related guides: Windows Hello on Acer laptops and booting into Safe Mode for driver work.
- If Hello broke immediately after a specific Windows update, you can also uninstall that update (Settings > Update & Security > Windows Update > View update history > Uninstall updates) and pause updates while you install the manufacturer’s driver — this stops Windows from re-breaking Hello before you’ve fixed the driver side.
Closing
Windows Hello on Windows 10 breaks for mundane reasons — a swapped driver, corrupted credentials, a grumpy TPM — and each has a direct fix. Verify the hardware, reinstall the manufacturer’s driver, re-enroll from scratch, and check the TPM. It’s a 20-minute job in most cases, and you’ll be back to one-touch sign-in without typing a password ever again.
