
Windows Hello checks the device is connected with a trusted network.Windows Hello verifies the first factor.User authenticates with PIN or biomatric gesture as first unlock factor.

As fallback we can use PIN as second factor (if the PIN is not used as first factor) or the user can authenticate using the password. In this blogpost we use PIN or a biomatric gesture as first unlock factor and a trusted network or a phone with Bluetooth as second unlock factor. A trusted signal can be a trusted network for example or a phone connected via Bluetooth. This can be a combination of PIN, Facial recognition, Fingerprint or Trusted Signal. With Multifactor Device Unlock the user unlocks his device by using two credential providers.

A solution for this is requiring a second factor to unlock your device Windows Hello Multifactor Device Unlock. When you are working at a Starbucks where someone watched you entering your PIN and waits for you to leave your laptop unmanaged for a few seconds, it is very easy for that person to unlock your laptop. More and more companies are using Windows Hello to allow their users to login or unlock their Windows 10 devices, because using a PIN or Facial Recognition is more secure than a password.īut there are situations when using a PIN code isn`t that secure as it seems.
