Windows Hello

[wpcoe]

I have a new computer with the hardware to support biometric log-in -- both facial recognition and fingerprint reader -- so Windows boots up to a "Windows Hello" screen where it tries to recognize my face or fingerprint.  It is reasonably proficient with both.  The set-up process includes setting a PIN in case the biometrics fail, like someone else tries their face/fingerprint or, Windows being Windows, it doesn't recognize you.

 

However, it seems way more un-secure (and not that much faster) than using a local username and password log-in.  If the biometric log-in fails, it prompts you for the PIN.  However, the PIN is *NUMERIC ONLY* and can be as short as four digits.  A password can include numbers, letters and special characters allowing for WAY more combinations than a mere 10 digits.

 

So, if you were to sit in front of my computer and power it on, Windows Hello will (hopefully!) not recognize you and prompt you for the PIN.  Wouldn't it be FAR more secure to prompt for a PASSWORD?