Windows Hello keeps disconnecting when the fault sits in one of four buckets: service, policy, TPM, or profile. Identify the bucket first, then apply the matching fix. Skip that step, and you can waste time on the wrong settings or lock users out of sign-in. This guide shows how to classify the break and match it to the right repair path.

What Windows Hello disconnecting means

On Windows 10 and Windows 11, Hello can fail in several ways: the option may disappear, face sign-in may stop after sleep, or PIN sign-in may break after an update. When facial recognition is struggling to recognize you, you get the error message Couldn't recognize you. The fastest first move is to sign in with a password or PIN if one still works, then check whether the problem happens in Settings, at the lock screen, or only after resume.

Windows Hello includes facial recognition, fingerprint recognition, and PIN sign-in. Those parts depend on camera or reader input plus sign-in settings, so one layer can fail while the others still work. That split matters. (Microsoft Support)

Likely causes

  • Most often: a service or driver problem breaks biometrics only.
  • Often: a policy setting removes PIN or biometric availability on managed devices.
  • Sometimes: TPM or Intel PTT state breaks PIN registration.
  • Less commonly: a face template or fingerprint profile needs to be rebuilt.

Say your face sign-in works in the morning, then fails after the laptop sleeps. That pattern points less toward a dead camera and more toward a service, driver, or resume-state issue. If the PIN option disappears after a restart but fingerprint still appears, that often points toward policy or PIN storage rather than a full Hello outage.

Windows Hello decision table

Use the symptom first, not the guess. This table separates service, policy, TPM, and device or driver issues so you can avoid clearing the wrong thing or redoing enrollment that was never the real problem.

Observed behavior Most likely layer Fastest safe test Next action
Options disappear after restart Policy or TPM Open Settings > Accounts > Sign-in options and check whether PIN or biometrics are missing Check Group Policy, then inspect TPM or Intel PTT state
Face works until sleep Service or device/driver Wake the PC and try face sign-in twice Restart Windows Biometric Service and update camera drivers
PIN vanishes TPM or policy Check whether PIN (Windows Hello) still appears in Sign-in options Confirm policy, then review TPM or Intel PTT
Both biometrics and PIN fail Policy, TPM, or profile Try password sign-in and open Sign-in options Check policy first, then TPM, then rebuild Hello data

Why does Windows Hello keep disconnecting on my PC?

Windows Hello usually drops out because one layer blocks another: the biometric service can stop, a policy can hide sign-in methods, TPM can stop holding PIN data, or a device driver can fail after sleep or update. Face, fingerprint, and PIN do not share the same failure path, so the symptom matters.

Service-level failures

  1. Press Win + R, type services.msc, and open it.
  2. Find Windows Biometric Service. (Microsoft Learn)
  3. Right-click it and choose Restart.
  4. Open Settings > Accounts > Sign-in options and try the affected method again.
  5. If it still fails, open Windows Update, install any pending updates, then reboot.

Device or driver problems

  1. Open Device Manager.
  2. Expand Cameras for face sign-in or Biometric devices for fingerprint readers.
  3. Choose Update driver for the camera or fingerprint reader that is failing.
  4. If the issue began after a recent change, use Roll Back Driver where available.
  5. Restart and test sign-in again.

Can policy or admin settings turn Hello off?

Group Policy can block PIN or biometric sign-in, especially on managed devices such as domain-joined or Intune-managed systems. If the options disappear only on a work or school PC, policy rises to the top of the list before you touch TPM or reinstall anything.

Check Group Policy or gpedit.msc

  1. Press Win + R, type gpedit.msc, and open it.
  2. Go to Computer Configuration > Administrative Templates > Windows Components > Windows Hello for Business.
  3. Check whether PIN or biometrics are disabled.
  4. Also review Computer Configuration > Administrative Templates > Windows Components > Biometrics.
  5. Confirm the setting is configured to allow the sign-in method you need, then sign out and back in.

Check managed-device restrictions

  1. Open Settings > Accounts > Access work or school.
  2. Confirm whether the device is connected to a work or school tenant.
  3. If it is, ask IT whether Windows Hello for Business, anti-spoofing, or biometric use is restricted.
  4. After any policy sync or admin change, try signing in again.

Fix TPM and PIN failures

Fix TPM and PIN failures
A Windows 11 error dialog appears behind bold red text banners

PIN problems often trace back to TPM or Intel PTT because the chip stores PIN-related material. If the PIN disappeared after a security update or system change, that is a stronger clue than a face-reader problem. Microsoft also notes that PIN failures may happen after security updates or system changes, and the PIN may need to be reset.

When the PIN vanished

  1. Open Settings > Accounts > Sign-in options.
  2. Check whether PIN (Windows Hello) is missing or only failing.
  3. If it is missing, confirm Group Policy is not blocking it.
  4. Open Windows Security > Device security and look for TPM status details if available.
  5. If policy is clear, review TPM or Intel PTT in UEFI firmware settings.

When the PIN still appears but will not work

  1. Choose a password sign-in first.
  2. Open Settings > Accounts > Sign-in options.
  3. Reboot and test again before touching TPM.
  4. If the PIN still fails after a clean recreation, move to TPM checks in firmware.

Windows Hello face and fingerprint fixes

Face and fingerprint failures are usually the easiest to narrow down. Face sign-in needs a clear view of your face, and harsh or bright side lighting can make recognition harder. Glasses changes, makeup, and facial hair changes can also force a new scan. Fingerprint sign-in needs a clean, dry reader, and Microsoft advises registering more than one fingerprint.

Fix face sign-in

  1. Sign in with a PIN or password first.
  2. Open Settings > Accounts > Sign-in options.
  3. Choose Facial recognition (Windows Hello) and run Improve recognition.
  4. If the problem started after a change in glasses, makeup, or facial hair, remove the face data and scan again.
  5. Make sure the camera is clean and unobstructed.
  6. Check your lighting.

Fix fingerprint sign-in

  1. Clean and dry the fingerprint reader.
  2. Open Settings > Accounts > Sign-in options.
  3. Remove the fingerprint data and add it again.
  4. Register more than one finger.
  5. Update the fingerprint reader driver in Device Manager if it still fails.

Still not working?

Still not working?
Windows settings sign-in options with Windows Hello highlighted

If service checks, policy checks, and re-enrollment do not fix it, move up the ladder. The next step is usually TPM or firmware work, because a broken PIN store can survive normal Windows troubleshooting. If the device is managed, hand the case to IT before clearing security state.

If that did not work, try this next

  1. Run Windows Update and install every pending update, then reboot.
  2. Check whether the issue appears only after sleep, restart, or update.
  3. If biometrics fail only after resume, restart Windows Biometric Service again and update the camera or fingerprint driver.
  4. If both PIN and biometrics are gone, review policy first, then TPM or Intel PTT in firmware.
  5. Only clear TPM after confirming the device is not blocked by policy and the user has a password sign-in path.
  6. If the device is work-managed, escalate to IT or the vendor before clearing security settings.

Prevention: after a major Windows update, open Settings > Accounts > Sign-in options and confirm PIN, face, and fingerprint entries still exist before users rely on them for daily sign-in.

Keep reading

Frequently asked questions

How do I stop Windows Hello from turning off after restart?

Check whether the sign-in method disappears in Settings > Accounts > Sign-in options after reboot. If it does, inspect Group Policy in gpedit.msc and then review TPM or Intel PTT state. If the method is still present, recreate the affected Hello credential.

Can I fix Windows Hello without removing my PIN?

Yes, if the issue is only with face or fingerprint. Sign in with your PIN, then use Improve recognition for face or re-register the fingerprint in Settings > Accounts > Sign-in options. Only reset the PIN if it is the method that fails or disappears.

Why do Windows Hello face and PIN options disappear?

That pattern points more toward policy or TPM than a camera problem. Check gpedit.msc for Hello, biometric, or logon restrictions, then verify whether TPM or Intel PTT settings changed after an update or firmware change. Managed devices can lose options after policy sync.

Does Windows Hello stop working after sleep or update?

It can. Face sign-in may fail after sleep if the camera driver or biometric service is out of sync, while PIN problems may follow updates or system changes. Install pending Windows Update items, restart the PC, and then retry from Settings > Accounts > Sign-in options.

Is this a Windows Hello for Business or group policy issue?

It may be. On work or school devices, policy can hide or block PIN and biometric methods even when the hardware is fine. Open gpedit.msc if it is a local policy device, or ask IT whether Windows Hello for Business, anti-spoofing, or biometric use is restricted by tenant policy.

Why does my bluetooth keep disconnecting windows 10?

If Bluetooth keeps disconnecting, check the Bluetooth adapter in Device Manager, update its driver, and review its power settings separately. That is a different sign-in issue from Windows Hello, so the fix path is not the same.