OVERVIEW
Target audience: Eligible McGill community members using McGill-managed Windows computers.
Windows Hello for Business allows sign-in using a PIN and, on compatible computers, fingerprint or facial recognition. This article answers common questions about setup, sign-in options, security and privacy.
This article is divided into the following sections:
General questions:
- What is Windows Hello for Business, and why is McGill introducing it?
- Do I need to request Windows Hello for Business?
- Do I have to create a Windows Hello PIN?
- What’s the difference between Windows Hello and Windows Hello for Business?
Sign-in and biometric questions:
- Do I have to use fingerprint or facial recognition?
- What do I need to use fingerprint or facial recognition?
- Can I still sign in using my McGill password?
- Will I still need an authenticator app?
- What happens if I forget my Windows Hello PIN?
Security and privacy questions:
General questions
What is Windows Hello for Business, and why is McGill introducing it?
Windows Hello for Business provides a faster and more convenient way to sign in to your McGill-managed Windows computer without entering your McGill password each time. It allows you to sign in using a PIN or, on compatible computers, fingerprint or facial recognition. It also provides strong authentication.
Do I need to request Windows Hello for Business?
No. Windows Hello for Business is being introduced gradually on eligible McGill-managed Windows computers. Once enabled, Windows will prompt you to complete setup when you sign in, which may occur after restarting your computer. See Set up and sign in with Windows Hello for Business.
Do I have to create a Windows Hello PIN?
A Windows Hello PIN is required to complete initial setup. Even if you choose fingerprint or facial recognition, you still need to create a PIN.
PIN requirements:
- Must be at least 6 characters long
- Can't be longer than 127 characters
- May include uppercase letters
- May include lowercase letters
- May include numbers
- May include special characters
- Can't be a number pattern (such as 123456 or 1111)
What’s the difference between Windows Hello and Windows Hello for Business?
Windows Hello lets you sign in to your personal computer using a face scan, fingerprint, or PIN. Windows Hello for Business uses those same sign-in methods to provide a more secure way for McGill staff to access their McGill-managed Windows computer.
Sign-in and biometric questions
Do I have to use fingerprint or facial recognition?
No. These options are optional. You can select Skip for now and configure them later using the instructions in Manage Windows Hello for Business sign-in options.
What do I need to use fingerprint or facial recognition?
Fingerprint recognition requires a compatible fingerprint reader. Facial recognition requires a Windows Hello-compatible camera. You can still use your PIN without either option.
Can I still sign in using my McGill password?
Your McGill password will always be available as a sign-in method. Select the key icon under Sign-in options on the Windows sign-in screen. See Manage Windows Hello for Business sign-in options.
Will I still need an authenticator app?
Yes. You will still need Microsoft Authenticator or another two-factor authentication (2FA) method set up for your McGill account. Windows Hello for Business can reduce additional authentication prompts on your McGill-managed computer, but does not replace your other 2FA methods.
What happens if I forget my Windows Hello PIN?
If I forgot my PIN appears on the Windows sign-in screen, select it and follow the prompts. Otherwise, use another available sign-in method. See Manage Windows Hello for Business sign-in options for detailed instructions.
Security and privacy questions
Why is a Windows Hello PIN secure even though it may be shorter than my password?
The PIN only works on the specific computer on which it was created. It cannot be used by you or anyone else to sign in from another computer. It also cannot be used to sign into a McGill website or service.
Windows Hello also protects against repeated attempts to guess your PIN. Keep it private, never reuse PINs, and choose a unique PIN for each device.
Is my fingerprint or facial recognition information sent to McGill or Microsoft?
No. Windows Hello stores a protected, mathematical representation of biometric information locally on your computer. Even McGill’s IT team cannot view your fingerprint or face data, and this data is not sent to Microsoft, McGill, or stored in a database somewhere.
For more information, see Where is Windows Hello biometrics data stored? in Microsoft's Windows Hello for Business FAQ.
Is my face being used for tracking?
No. Windows Hello does not continuously monitor or track you. It only checks your biometric information, if set up, when you intentionally try to sign in or unlock your device.
ADDITIONAL REFERENCES:
- Set up and sign in with Windows Hello for Business – Instructions for completing the initial setup, creating your Windows Hello PIN, setting up optional biometrics and signing in.
- Manage Windows Hello for Business sign-in options – Instructions on changing or resetting your PIN, setting up fingerprint or facial recognition later, adding fingerprints, improving facial recognition, and using other sign-in methods.