Using third-party fingerprint readers and cameras with Windows Hello

You may not be able to sign in using Windows Hello with an external or third-party fingerprint reader or camera if your Windows 11 PC has Enhanced sign-in security enabled.

Some external fingerprint readers labelled as "Windows Hello compatible" do support Enhanced sign-in security, but if not, you will have to disable Enhanced sign-in security to get your camera or fingerprint reader to let you sign in. Enhanced sign-in security is not supported for external camera modules.

To set up your Windows Hello fingerprint reader or camera on Windows 11, version 24H2 or newer, follow the steps below:

  1. Connect your third-party Windows Hello fingerprint reader or camera to your PC, following any manufacturer instructions.
  2. Once installation has completed, open Settings > Accounts > Sign-in options.
  3. If you are using an ESS device, scroll to Additional settings and look for the toggle: "Enhanced sign-in security". Ensure ESS is Pending set up. You may have to go through set up.
  4. If you are using a non-ESS device, scroll to Additional settings and look for the toggle: "Enhanced sign-in security". Turn the Enhanced sign-in security toggle off to enable use of devices that are not Enhanced sign-in security capable. ​​​​​​​On disablement, existing Enhanced sign-in security enrollments and associated credentials, such as passkeys, will be removed. These can be reprovisioned after set up.
  5. Under Sign-in options, set up Fingerprint or Facial recognition (Windows Hello) if not already configured. Screenshot that shows that ESS is OFF and a non-ESS device can be enrolled.

    Note

    If you don’t see the toggle, it may be because your PC doesn’t detect a sensor that is incompatible with Enhanced sign-in security or because your organization has disabled use of non-ESS Windows Hello devices.

    Important

    This feature is rolling out in phases. As a result, not all Windows devices will see it at the same time. If your device doesn’t show this feature yet, there’s nothing you need to do — it will be enabled automatically as rollout continues.

To set up your Windows Hello fingerprint reader or camera on Windows 11, version 23H2, follow the steps below:

  1. Connect your third-party Windows Hello fingerprint reader or camera to your PC, following any manufacturer instructions.
  2. Once installation has completed, open Settings > Accounts > Sign-in options.
  3. Scroll to Additional settings and look for the toggle: "Sign in with an external camera or fingerprint reader".
  4. Turn the Enhanced Sign-in Security toggle off to enable use of external devices. Screenshot of Settings - Disable ESS toggle.

    Note

    If you don’t see the toggle, it may be because your PC doesn’t meet Enhanced Sign-in Security requirements, or because your organization has disabled external Windows Hello devices.

  5. Under Sign-in options, set up Fingerprint recognition (Windows Hello) if not already configured.

See also

Enhanced Sign-in Security in Windows

Need more help?

Microsoft does not support any device or peripheral not sold by Microsoft. If you need assistance setting up your external peripherals, contact https:⁠//answers.microsoft.com/windows/forum.