Questions tagged [windows-hello]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
140 views

Windows Hello convenience PIN - stored on device in plain text?

I have received information that, in the case of using the Windows Hello convenience PIN (not Windows Hello for Business), the PIN is stored on the device in plaintext. However, I haven't found any ...
bbhhjj's user avatar
  • 11
0 votes
3 answers
4k views

How exactly is a fingerprint stored in Windows Hello? Why is it claimed to be more secure than a password?

I can't quite imagine a scenario where fingerprints can be stored in a way that defeats the weaknesses of password storage (i.e. pass the hash attacks or password reuse). Moreover, I couldn't quite ...
Hex_27's user avatar
  • 19
4 votes
1 answer
4k views

How does Windows Hello recognize me with a mask on?

The first time I forgot to take my mask off before using the facial recognition login to my Windows 10 computer, it wouldn't work (which I expected). After a couple times, though, it started logging ...
Benjamin Hollon's user avatar
4 votes
2 answers
785 views

Lateral Movement: What is the benefit of Windows Hello For Business?

I work as a security researcher, tonight I implemented Windows Hello For Business in our environment, because it is marketed as the "passwordless way of the future" and I wanted to see if it holds up ...
Robert R's user avatar
4 votes
2 answers
4k views

How does Window Hello protect against brute forcing?

With my Windows 10 computer, I have the option to set up a PIN with Windows Hello (I believe it's with that program). My normal Outlook password is 15+ characters mixed with upper case and lower case ...
Axel Munoz's user avatar
9 votes
1 answer
5k views

What are the security risks of USB fingerprint scanners in Windows 10?

Hi I have a Lenovo laptop encrypted with Bitlocker, which I also use a fingerprint scanner with. Bear in mind I'm not working with super-secure information, more the level that a developer/manager for ...
user1102550's user avatar
  • 1,011
1 vote
1 answer
150 views

Managing security of a desktop/mobile app

I'm working on an app that stores sensitive data (think of it as a password locker) for the UWP (Universal Windows Platform). The most important requirement is the ability to roam the data between ...
StepTNT's user avatar
  • 111