How to Disable Windows Hello and Biometric Data Storage

What Causes This?

Windows Hello stores biometric templates and sign-in settings so it can recognize your face, fingerprint, or PIN faster during login. This data is usually created when you set up facial recognition, fingerprint sign-in, or a device PIN in Settings > Accounts > Sign-in options. In managed work or school environments, Group Policy or Microsoft account security settings can also re-enable Windows Hello features even after you turn them off. On some PCs, built-in fingerprint readers or IR cameras keep the biometric service active unless you disable the hardware or service as well.

Common Symptoms

• Face recognition, fingerprint sign-in, or PIN remains available on the sign-in screen
• Windows keeps prompting you to set up Windows Hello
• Biometric sign-in still works after you thought you disabled it
• Fingerprint reader or facial recognition camera stays enabled in Windows
• You want to reduce stored sign-in data but cannot find all related settings

How to Fix It Manually

1. Remove Windows Hello sign-in methods

   • Press Windows + I to open Settings.
   • Go to Accounts > Sign-in options.
   • Under Ways to sign in, select each enabled option such as Facial recognition (Windows Hello), Fingerprint recognition (Windows Hello), and PIN (Windows Hello).
   • Click Remove for each one and confirm.
   • If Windows asks for your password, enter your Microsoft account or local account password.

2. Delete biometric data from Windows

   • In Settings > Accounts > Sign-in options, look for any biometric options still showing as configured.
   • If available, use Remove or Set up then cancel/reset to clear saved enrollment.
   • Restart your PC after removing all Windows Hello methods so Windows refreshes the sign-in configuration.

3. Turn off biometric use in Local Group Policy
   If you have Windows Pro, Enterprise, or Education:

   • Press Windows + R, type gpedit.msc, and press Enter.
   • Go to Computer Configuration > Administrative Templates > Windows Components > Biometrics.
   • Open Allow the use of biometrics and set it to Disabled.
   • Open Allow users to log on using biometrics and set it to Disabled.
   • Click Apply, then OK.

4. Disable Windows Hello for Business if it keeps returning

   • In Local Group Policy Editor, go to Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business.
   • Open Use Windows Hello for Business.
   • Set it to Disabled, then click Apply and OK.
   • Restart the PC.

5. Disable biometric hardware in Device Manager

   • Right-click the Start button and choose Device Manager.
   • Expand Biometric devices.
   • Right-click your fingerprint reader and choose Disable device.
   • If your PC uses an IR camera for face sign-in, expand Cameras, find the IR camera, and choose Disable device if you do not need it.
   • Restart your PC.

6. Stop the Windows Biometric Service

   • Press Windows + R, type services.msc, and press Enter.
   • Find Windows Biometric Service.
   • Double-click it, click Stop, then set Startup type to Disabled.
   • Click Apply and OK.

7. Check your work or school account policies

   • Open Settings > Accounts > Access work or school.
   • If the PC is managed by an employer or school, their policies may force Windows Hello back on.
   • Disconnect the account only if the device is personal and you no longer need that management connection.

Fix It Automatically with Kudu

Kudu can scan your Windows sign-in, privacy, and biometric-related settings and flag options that keep Windows Hello or biometric storage active. Instead of hunting through Settings, Group Policy, Services, and Device Manager one by one, Kudu helps you review safer configurations and apply fixes faster.

Download Kudu Free →