Overview
Learn how to use passwordless authentication—specifically, Apple's Face ID and Touch ID and Windows Hello for Business.
What is passwordless authentication?
- Passwordless authentication means logging in to a device without a typed password.
- For example, you could use your fingerprint, facial recognition, or a USB FIDO2 key.
Please Note: Passwordless authentication is not multi-factor authentication. You'll still need to use Duo where applicable.
What forms of passwordless authentication does UO Support?
We support the following options on UO-owned devices managed by Information Services:
Apple Face ID
- Face ID is an Apple technology that iPhones can use to recognize the user's face and unlock the device.
- When logging in to your phone from an off or restart state, you'll still need to enter your passcode. That's an Apple restriction and cannot be adjusted.
Select the title of each accordion panel to see its contents.
- To configure Face ID on your phone, go to Settings then Face ID & Passcode. You will be prompted for your Passcode on the phone, then have the option to enable Face ID.
- Open Settings.
- Go to Face ID & Passcode.
- Choose Reset Face ID.
- If Stolen Device Protection is enabled, you may need to turn it off before doing the reset.
Apple Touch ID
- Touch ID is an Apple technology that some iPads and Mac computers can use to recognize the user's fingerprint(s) and unlock the device.
- When logging in to your phone from an off or restart state, you'll still need to enter your passcode. That's an Apple restriction and cannot be adjusted.
Select the title of each accordion panel to see its contents.
- To configure Touch ID on your Mac, go into System Settings, then Touch ID & Password and select Add Fingerprint.
- To use Touch ID on a Mac desktop computer, or a laptop with a dock, you must use an Apple Touch ID-enabled Keyboard. (These are included with iMacs, and can be purchased separately via CDW-G.)
- Apple doesn't. provide a way to tie into Touch ID with third-party hardware.
- Open Settings.
- Go to Touch ID & Password.
- Under Touch ID, remove the finger(s) you no longer wish to use.
- After removing all fingers registered with the machine, Touch ID will be disabled.
Windows Hello
- Windows Hello for Business is a Microsoft technology that Windows computers can use to recognize the user's face or fingerprint and unlock the device.
- That biometric information is stored locally on the device. It doesn't sync to any other location.
Select the title of each accordion panel to see its contents.
The easiest way to see if your computer supports Windows Hello for Business is to go through the setup process:
- After logging in to your device, go to Start → Settings → Accounts → Sign-in options.
- Pick Set up for either biometric option to be guided through the setup process:
- Facial recognition (Windows Hello)
- Fingerprint recognition (Windows Hello)
- You must then set a PIN (Windows Hello)—a short, device-specific password.
- After setting up Fingerprint recognition, you may Add Finger.
If the setup process doesn't work, please submit a ticket at Desktop & Mobile Device Support. You may need compatible hardware.
Please Note: If a browser prompts you for enabling Passkeys, it may enable Windows Hello on that computer. That may change certain behaviors in the browser, such as suddenly asking for PIN to unlock saved Passwords/Passkeys. This is a security function of Windows, and not a behavior specific to UO-owned devices.
Desktop computers can also use Windows Hello for Business if they have a compatible webcam and/or fingerprint reader. Information Services staff know the following devices work.
Webcams
Fingerprint Readers
- Go to Start → Settings → Accounts → Sign-in options.
- Remove the piece you'd like to disable.
- If you remove all pieces, including the PIN, then Windows Hello for Business will revert to using your account password to unlock saved credentials, such as Passwords/Passkeys saved in your browser.
Note: To completely disable Windows Hello for Business, please submit a ticket at
Desktop & Mobile Device Support. Completely disabling Windows Hello for Business may result in saved passwords being lost.
- Open Settings.
- Go to Accounts.
- Select Sign-in options.
- Click PIN (Windows Hello).
- Choose I forgot my PIN.
- Enter Microsoft or local account password.
Need help?
To request help or ask questions, please see Desktop & Mobile Device Support or select Create a Ticket from this page.