Disable Windows Hello PIN Prompt via Registry
This guide explains how to disable Windows Hello PIN credential setup prompts across all user profiles on a Windows machine using the Registry Editor (Regedit). By modifying system-wide registry keys under the Local Machine hive, you can prevent Windows from nagging users to configure a PIN, facial recognition, or fingerprint sign-in after login or during updates.
Step-by-Step Instructions
To apply this policy to all existing and future profiles on the
machine, you must configure two registry values under the
HKEY_LOCAL_MACHINE hive.
Step 1: Open the Registry Editor
- Press
Windows Key + Rto open the Run dialog. - Type
regeditand pressEnter. - Click Yes when prompted by User Account Control (UAC).
Step 2: Disable Passport for Work (Windows Hello)
In the Registry Editor, navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWorkNote: If the
PassportForWorkkey does not exist underMicrosoft, right-click theMicrosoftfolder, select New > Key, and name itPassportForWork.Select the
PassportForWorkkey.In the right pane, right-click on empty space, select New > DWORD (32-bit) Value, and name it
Enabled.Double-click the
EnabledDWORD, set its Value data to0, and click OK.
Step 3: Disable Post-Logon Setup Provisioning
To prevent Windows from showing the full-screen “Use Windows Hello with your account” prompt during logon:
In the Registry Editor, navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SystemNote: If the
Systemkey does not exist underWindows, right-clickWindows, choose New > Key, and name itSystem.Select the
Systemkey.In the right pane, right-click on empty space, select New > DWORD (32-bit) Value, and name it
DisablePostLogonProvisioning.Double-click
DisablePostLogonProvisioning, set its Value data to1, and click OK.
Step 4: Apply Changes
- Close the Registry Editor.
- Restart the computer for the policy changes to take effect across all user profiles.