Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [windows-hello]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
2 answers
607 views

How is EFS key protected and unprotected when Windows Hello PIN is used?

EFS private key is normally encrypted by users Windows password, but when PIN (and TPM magic) is used to sign user in using Windows Hello, the user's passphrase is not used at all…so how can Windows ...
mmja's user avatar
  • 93
1 vote
1 answer
317 views

Windows Hello convenience PIN - stored on device in plain text?

I have received information that, in the case of using the Windows Hello convenience PIN (not Windows Hello for Business), the PIN is stored on the device in plaintext. However, I haven't found any ...
bbhhjj's user avatar
  • 11
1 vote
3 answers
4k views

How exactly is a fingerprint stored in Windows Hello? Why is it claimed to be more secure than a password?

Microsoft's claim that it is more secure. I can't quite imagine a scenario where fingerprints can be stored in a way that defeats the weaknesses of password storage (i.e. pass the hash attacks or ...
Hex_27's user avatar
  • 29
4 votes
1 answer
4k views

How does Windows Hello recognize me with a mask on?

The first time I forgot to take my mask off before using the facial recognition login to my Windows 10 computer, it wouldn't work (which I expected). After a couple times, though, it started logging ...
Benjamin Hollon's user avatar
4 votes
2 answers
861 views

Lateral Movement: What is the benefit of Windows Hello For Business?

I work as a security researcher, tonight I implemented Windows Hello For Business in our environment, because it is marketed as the "passwordless way of the future" and I wanted to see if it holds up ...
Robert R's user avatar
4 votes
2 answers
5k views

How does Window Hello protect against brute forcing?

With my Windows 10 computer, I have the option to set up a PIN with Windows Hello (I believe it's with that program). My normal Outlook password is 15+ characters mixed with upper case and lower case ...
Axel Munoz's user avatar
9 votes
1 answer
5k views

What are the security risks of USB fingerprint scanners in Windows 10?

Hi I have a Lenovo laptop encrypted with Bitlocker, which I also use a fingerprint scanner with. Bear in mind I'm not working with super-secure information, more the level that a developer/manager for ...
user1102550's user avatar
  • 1,011
1 vote
1 answer
156 views

Managing security of a desktop/mobile app

I'm working on an app that stores sensitive data (think of it as a password locker) for the UWP (Universal Windows Platform). The most important requirement is the ability to roam the data between ...
StepTNT's user avatar
  • 111