How to Fix Windows Hello (Face/Fingerprint) Not Working

•
My Technician
Windows 11SecurityFixHardware

The Problem

Windows Hello will not set up your face or fingerprint, or it worked before and now only PIN works. Laptops with IR cameras and fingerprint readers are picky about drivers, BIOS, and privacy toggles—not just "turn Hello on."

Requirements Checklist

  • Microsoft account or work/school account on the device (some domains block Hello).
  • TPM 2.0 enabled—enable TPM and Secure Boot if BIOS turned them off.
  • Camera or fingerprint not disabled in BIOS (common on refurbished business laptops).
  • For face: infrared (IR) camera or Windows Hello-certified FHD+ IR module—not every webcam qualifies.

The Fix: Step-by-Step

Step 1: Update Biometric and Camera Drivers

  1. Settings → Windows Update → install all optional driver updates.
  2. Device Manager → expand Biometric devices and Cameras → update driver from the PC manufacturer (Dell, HP, Lenovo support page), not generic Windows only.
  3. Reboot and open Settings → Accounts → Sign-in options.

Step 2: Remove and Re-Add Hello

  1. Sign-in options → Fingerprint recognition or Facial recognition → Remove.
  2. Set up again in good light (face) or with a dry, clean finger (fingerprint).
  3. For face: look at the IR camera, not the screen edge.

Step 3: PIN First

Hello often requires a PIN backup. PIN (Windows Hello) → Set up if missing, then enroll face/fingerprint.

Step 4: Camera Privacy

Settings → Privacy & security → Camera:

  • Camera access → On.
  • Let apps access your camera → On (Hello uses the camera stack).
  • Ensure Windows Hello or Desktop app access is not blocked.

Corporate policy can override this—check with IT on work laptops.

Step 5: Reset Hello Packages (PowerShell Admin)

Get-AppxPackage Microsoft.AccountsControl | Reset-AppxPackage

Reboot. If enrollment still fails, remove fingerprint in BIOS security menu (some ThinkPads) and re-enroll in Windows.

Step 6: Group Policy and Domain

Joined to Azure AD / domain? Hello may be disabled by policy. Personal PC: leave domain or use local account test. gpedit.msc → Computer Configuration → Administrative Templates → Windows Components → Biometrics — allow use if you manage the PC.

Step 7: IR Camera Hardware

  • Glasses glare: re-run setup without strong backlight behind you.
  • Screen protector over IR zone on convertible lids—remove or replace.
  • External monitor only, lid closed on laptop—IR camera is on the lid; open lid for setup.

Fingerprint: re-enroll after screen repair (new palm rest) or when the reader area is cracked.

Error Messages

| Message | What to try | |---------|-------------| | Couldn't turn on the camera | Privacy + camera driver | | This option is unavailable | TPM off, domain policy, or no hardware | | Something went wrong | Remove Hello, reboot, vendor driver |

Related Fixes

Security Note

Do not disable TPM to "fix" Hello—you weaken BitLocker and sign-in. Fix drivers and enrollment instead.

Related guides