● UK tech experts · info@vividrepairs.co.uk
Vivid Repairs
A Windows 11 laptop on a modern desk showing the fingerprint sign-in prompt on the lock screen with a warning indicator
Fix It Yourself · Troubleshooting

Windows Hello Fingerprint Fix: Why It Breaks and How to Sort It

Published 17 October 202612 min read
As an Amazon Associate, we may earn from qualifying purchases. Our ranking is independent.

Fingerprint sign-in is one of those features that works brilliantly until it doesn't. You press your finger to the sensor, the lock screen shakes, and suddenly you're typing a PIN like it's 2018. The good news is that a proper Windows Hello fingerprint fix is almost always a software problem, and most cases clear up within 30 minutes if you work through the right steps in order.

What Actually Causes Windows Hello Fingerprint to Stop Working?

Before jumping into fixes, it helps to understand what's actually going wrong under the hood. Windows Hello fingerprint sign-in isn't a single thing. It's a stack: the physical sensor, a driver that talks to it, the Windows Biometric Service that manages the communication, and then the Hello credential layer that stores your enrolled fingerprint data. Any one of those layers can break independently, and the symptom on screen (a greyed-out option, a failed scan, or a missing sign-in option entirely) doesn't always tell you which layer is the problem.

The most common culprit, by a wide margin, is the driver. Windows Update sometimes pushes a generic biometric driver that doesn't play nicely with your specific OEM sensor. Dell, Lenovo, HP, and others all ship fingerprint readers from different manufacturers (Synaptics, Goodix, ELAN are the big three), and each needs its own driver package. A mismatch here means the sensor shows up in Device Manager but Windows Hello can't actually use it.

The second most common cause is the Windows Biometric Service (wbiosrvc) being stopped or stuck. This service is the bridge between the hardware and Windows Hello. If it's not running, the fingerprint option simply disappears from Sign-in options or shows as unavailable. It can stop after a Windows feature update, after certain driver changes, or occasionally just after a bad shutdown. It's a quick fix once you know where to look.

Corrupted Hello credentials are the third big one. Windows stores your PIN, face data, and fingerprint data in a protected credential store. If this gets corrupted (which can happen after forced shutdowns, failed updates, or even certain third-party security tools), the enrolled fingerprint data becomes unreadable and Hello refuses to use it. The sensor and driver might be perfectly fine. The stored data just doesn't match what Hello expects.

Then there are the edge cases. Power management settings that let Windows turn off the USB or I2C-connected sensor during sleep. Enhanced sign-in security on newer devices requiring virtualisation-based security processes (bioiso.exe and ngciso.exe) that aren't running. Domain or MDM policies on work machines that explicitly disable biometric sign-in. These are less common but they do show up, particularly on corporate laptops.

Hardware faults are real but genuinely rare. A physically cracked sensor, moisture damage, or a sensor that's been repeatedly pressed with dirty or wet fingers can degrade to the point where no software fix helps. But exhaust every software option first, because most of the time the sensor is fine.

Quick routeStart here

Windows Hello Fingerprint Fix: Quick Checks First

Start here. These take under 10 minutes and fix a surprising number of cases, particularly if the issue appeared after a sleep cycle or a Windows Update reboot.

1

Restart, Re-enrol, and Retest Easy

  1. Sign in with PIN or password
    If the fingerprint scan is failing at the lock screen, use your PIN or password to get in. Don't try to fix it from the lock screen.
  2. Do a full restart
    Not sleep, not hibernate. Start, Power, Restart. Many biometric glitches clear completely after a proper reboot because the Biometric Service reinitialises cleanly.
  3. Check Sign-in options
    Go to Settings, Accounts, Sign-in options. Confirm that Fingerprint recognition (Windows Hello) is listed. If it's there but showing a warning, proceed to the next solution. If it's missing entirely, skip ahead to the Intermediate section.
  4. Remove and re-enrol your fingerprint
    Under Fingerprint recognition (Windows Hello), click Remove to delete the existing print. Then click Set up and follow the wizard. Capture the same finger from multiple angles, rotating slightly each time the sensor prompts you. Register 2 to 3 fingers if you can. This one often needs a second reboot before it sticks, so restart again after enrolment.
  5. Lock and test
    Press Windows key + L to lock the PC. The fingerprint prompt should appear on the lock screen. Test it with the newly enrolled finger.
If the fingerprint scan works at the lock screen, you're sorted. Keep a note to re-enrol if it happens again after the next major Windows update.
Make sure the sensor surface is clean. Oily or damp fingers are a legitimate cause of repeated scan failures, and a quick wipe of both the sensor and your fingertip takes five seconds.
Intermediate routeKeep going if needed

Intermediate Windows Hello Fingerprint Fix: Driver and Service Repairs

If the quick checks didn't sort it, the problem is almost certainly in the driver or the Windows Biometric Service. These steps require Device Manager and the Services console, both of which are standard Windows tools with no special software needed.

2

Restart the Windows Biometric Service Easy

  1. Open Services
    Press Windows key + R, type services.msc, and press Enter.
  2. Find Windows Biometric Service
    Scroll down the list to Windows Biometric Service. Check the Status column. If it says Stopped or is blank, that's your problem.
  3. Set it to Automatic and start it
    Double-click the service. Set Startup type to Automatic. Click Start. Click OK.
  4. Retest sign-in
    Go back to Settings, Accounts, Sign-in options and check whether Fingerprint recognition is now available. Lock the PC and test.
If the service was stopped, this is likely all you needed. The option should reappear in Sign-in options within a few seconds of starting the service.
3

Reinstall the Fingerprint Driver Medium

  1. Open Device Manager
    Right-click Start and choose Device Manager. Expand the Biometric devices section. You should see your fingerprint sensor listed there.
  2. Uninstall the device
    Right-click the fingerprint sensor and choose Uninstall device. If offered the option to delete the driver software, tick that box. Confirm.
  3. Restart Windows
    A restart lets Windows attempt automatic driver reinstallation. After reboot, open Device Manager again and check whether the sensor reappears under Biometric devices.
  4. Install OEM driver if needed
    If the sensor is missing or shows a yellow warning triangle, Windows couldn't find the right driver automatically. Go to your laptop or PC manufacturer's support page (Dell Support, Lenovo Support, HP Support, etc.), search by your model number, and download the fingerprint or biometric driver package. Install it and restart.
  5. Re-enrol fingerprints
    After the driver is back and clean, go to Settings, Accounts, Sign-in options and set up Fingerprint recognition again from scratch.
The sensor should appear cleanly in Device Manager with no warning icons. The fingerprint option in Sign-in options should be available and functional.
4

Fix Power Management for the Sensor Easy

  1. Open Device Manager and find the fingerprint sensor
    Right-click Start, Device Manager, expand Biometric devices.
  2. Open Power Management settings
    Right-click the fingerprint sensor, choose Properties, and click the Power Management tab.
  3. Uncheck the power saving option
    Untick 'Allow the computer to turn off this device to save power'. Click OK.
  4. Test after sleep
    Put the PC to sleep for a few minutes, wake it, and try the fingerprint at the lock screen. If it was only failing after sleep, this is the fix.
Intermittent failures after sleep or idle periods should stop. The sensor will stay powered and responsive when Windows wakes.
Before doing the next steps, confirm you have a working PIN or password. Removing Hello credentials without a backup sign-in method can lock you out. Seriously, check this first.
5

Reset Windows Hello PIN and Fingerprint Credentials Medium

  1. Reset your PIN
    In Settings, Accounts, Sign-in options, under PIN (Windows Hello), click I forgot my PIN. Follow the prompts to reset it using your Microsoft account or local account credentials.
  2. Remove all fingerprints
    Under Fingerprint recognition (Windows Hello), click Remove to delete all enrolled fingerprints.
  3. Restart the PC
    A full restart clears the Hello credential cache properly.
  4. Re-enrol PIN first, then fingerprint
    After reboot, set up the PIN first. Only after the PIN is working, go back and set up Fingerprint recognition. Doing it in this order ensures the Hello credential stack builds correctly.
This clears corrupted Hello data that survives partial resets. If the fingerprint option was greyed out due to a credential conflict, it should now be available and working.

For users on managed or work devices, it's also possible that a Group Policy or MDM policy is blocking biometric sign-in entirely. If you're on a domain-joined machine and none of these fixes make the option available, your IT administrator may have disabled Windows Hello for Business biometrics at the policy level. That's not something you can override locally. Check with your IT team. Microsoft's Windows Hello for Business overview explains which policy settings control biometric availability if you need to point someone in the right direction.

If you're dealing with other sign-in or account access problems alongside this, our Windows account sign-in troubleshooting guide covers PIN failures, Microsoft account sync issues, and lock screen problems that sometimes appear alongside Hello fingerprint faults.

Advanced routeChange one thing at a time

Advanced Windows Hello Fingerprint Fix: Command Line and Deep Resets

These steps are for situations where the standard tools haven't shifted the problem. You'll need to be comfortable running Command Prompt as administrator and, in one case, understanding what virtualisation-based security means on your device. If you're not sure, the remote support option below this section is a good call.

6

Restart Biometric Service via Command Line Medium

  1. Open Command Prompt as administrator
    Search for cmd in Start, right-click Command Prompt, and choose Run as administrator.
  2. Stop and restart the service
    Run: net stop wbiosrvc && net start wbiosrvc. This forces a clean cycle of the Biometric Service, clearing any stuck or inconsistent state that the Services GUI sometimes misses.
  3. Check Sign-in options
    Go back to Settings, Accounts, Sign-in options and verify Fingerprint recognition is now available. Test at the lock screen.
The command-line restart is more reliable than using the Services GUI for clearing stuck service states, particularly after a failed Windows Update.
7

Enhanced Sign-in Security Diagnostics Hard

  1. Check if Enhanced sign-in security is active
    Open System Information by pressing Windows key + R and typing msinfo32. Look for Virtualization-based Security in the System Summary. It should say Running.
  2. Check for required processes
    In System Information, expand Software Environment and click Running Tasks. Look for bioiso.exe and ngciso.exe in the list. Both need to be present for Enhanced sign-in security to work.
  3. If processes are missing
    This means the virtualisation-based security environment isn't initialising correctly. This can happen after BIOS updates, Secure Boot changes, or certain third-party security tools. You may need to disable Enhanced sign-in security in Settings, Accounts, Sign-in options (if the toggle is available) to fall back to standard Hello operation.
  4. Manual OEM driver management
    Download the latest fingerprint and chipset drivers directly from your OEM support page. In Device Manager, uninstall the biometric device and delete the driver software. Install the OEM package manually and restart. Some OEMs (particularly Lenovo with their Fingerprint Manager Pro) require bundled credential software to be installed alongside the driver.
Adjusting Enhanced sign-in security or platform security settings can affect other security features on the device. Only do this if you understand the implications, or ask your IT administrator.

Microsoft's documentation on Windows Hello sign-in options covers the supported hardware requirements and configuration steps if you want to verify your device meets the spec. And HowToGeek has a solid Windows Hello setup walkthrough that's useful for confirming you've got the enrolment process right.

If you've also been having driver problems more broadly, not just with the fingerprint reader, our Windows driver troubleshooting guide covers Device Manager errors, failed driver installs, and how to roll back problematic driver updates.

Preventing Windows Hello Fingerprint Problems

Most of these issues are avoidable. Here's what actually makes a difference, in order of importance.

Keep OEM drivers current. Windows Update installs generic biometric drivers that sometimes break OEM sensors. Check your manufacturer's support page every few months, especially after a major Windows feature update. Set a reminder if you have to.

Enrol multiple fingers. Register 2 to 3 fingers and capture each one from several angles during setup. A single finger enrolled at one angle is the fastest route to repeated scan failures, especially if that finger gets a cut or callus.

Don't force-shut down. Holding the power button to force off a Windows PC can corrupt Hello credential data. Always use Start, Power, Shut down when possible. If a forced shutdown is unavoidable, go into Sign-in options afterwards and verify the fingerprint option is still working.

Check power management after updates. Windows feature updates occasionally reset device power management settings. After any major update, open Device Manager, check the fingerprint sensor's Power Management tab, and confirm the 'turn off to save power' option is still unticked.

Clean the sensor. A sensor covered in skin oil reads poorly. A quick wipe with a dry cloth every week or two keeps scan accuracy high. Avoid pressing the sensor with wet fingers.

After major feature updates, verify the Biometric Service. Open services.msc and confirm Windows Biometric Service is still set to Automatic and is running. Feature updates have a habit of resetting service startup types on some configurations.

Windows Hello Fingerprint Fix: What to Do If Nothing Works

If you've been through every tier above and the fingerprint reader still isn't working, the honest answer is that the sensor itself is probably the problem. Physical damage, moisture ingress, or a sensor that's simply worn out won't respond to any software fix. At that point, your PIN and password continue to work normally, and you'll need to contact your device manufacturer or a repair service to assess the hardware.

That said, before concluding it's hardware, make sure you've genuinely done the full Hello reset (remove PIN, remove fingerprints, restart, re-enrol in order), reinstalled the OEM driver from the manufacturer's site rather than Windows Update, and confirmed the Windows Biometric Service is running. Those three steps together clear the vast majority of stubborn Windows Hello fingerprint fix cases. The hardware fault scenario is real but it's the last resort, not the first assumption.

A working Windows Hello fingerprint fix usually comes down to one of five things: a driver mismatch, a stopped Biometric Service, corrupted Hello credentials, a power management setting killing the sensor after sleep, or (on newer devices) Enhanced sign-in security processes not running. Work through the tiers in order, keep your PIN active throughout, and you'll almost certainly have it sorted before you reach the advanced steps.

Frequently Asked Questions

This usually means Windows Hello is not properly configured, the biometric driver is missing, or an organisational policy or Enhanced sign-in security requirement is blocking it. Check Sign-in options in Settings, update drivers, and confirm the Windows Biometric Service is running in services.msc.

Intermittent failures, especially after sleep, are almost always caused by power management. Open Device Manager, find your fingerprint device under Biometric devices, open Properties, go to the Power Management tab, and uncheck 'Allow the computer to turn off this device to save power'.

The Windows Biometric Service (wbiosrvc) is the background service that lets Windows communicate with fingerprint hardware. If it is stopped or disabled, fingerprint sign-in fails completely. Set it to Automatic in services.msc and start it, or restart it via an elevated Command Prompt with: net stop wbiosrvc && net start wbiosrvc.

No. Removing and re-enrolling fingerprints or resetting your PIN only affects Windows Hello sign-in data. Your user account and all files remain completely intact. Always confirm you have a working PIN or password before making any changes to Hello credentials.

Persistent failures after driver reinstalls, service resets, and full Hello credential resets may indicate a hardware fault or a physically damaged sensor. Contact your device manufacturer for a repair assessment. In the meantime, your PIN or password will continue to work normally.