Fix Sign-In Options Missing on Windows 11 Lock Screen

Quick fix: On the lock screen, click Sign-in options (small link below the password field). If link is missing: only password is configured. Add other methods via Settings → Accounts → Sign-in options. Set up PIN, Windows Hello (face/fingerprint), or security key. Each enabled method appears in lock screen options. For corporate accounts: Group Policy may restrict; contact IT.

Windows 11 lock screen normally shows multiple sign-in options (PIN, face, fingerprint, password) below the credential entry. If options missing: only password is configured, or Group Policy restricts, or Windows Hello broken.

What causes this

Lock screen shows the configured sign-in methods. Common reasons for missing options:

• Only password configured; no PIN/Hello set up yet.
• Windows Hello camera/fingerprint stopped working (driver issue).
• Group Policy restricting sign-in methods.
• Local account vs Microsoft account differences.
• Sign-in options requirement (just-after-sign-out).

Method 1: Set up additional sign-in methods

The standard route.

1. Open Settings → Accounts → Sign-in options.
2. You see methods available:
   • Facial recognition (Windows Hello).
   • Fingerprint recognition (Windows Hello).
   • PIN (Windows Hello).
   • Security key.
   • Password.
   • Picture password.
3. Click each to set up. PIN is mandatory for Windows Hello methods.
4. For PIN: PIN (Windows Hello) → Set up. Enter Microsoft account password → create 4-digit PIN (or more).
5. For Face: Facial recognition → Set up. Requires Windows Hello camera (most modern laptops, USB IR cameras).
6. For Fingerprint: Fingerprint recognition → Set up. Place finger on sensor.
7. Each method enabled appears in lock screen options. Sign out and verify.

This is the standard setup.

Method 2: Re-configure Windows Hello if broken

For Hello camera/fingerprint malfunction.

1. Open Settings → Accounts → Sign-in options.
2. Click Facial recognition (or Fingerprint).
3. Click Remove. Removes current setup.
4. Update camera/fingerprint driver: Device Manager → expand Cameras → right-click IR camera → Update driver.
5. Or expand Biometric devices → fingerprint sensor → Update driver.
6. Reboot.
7. Back to Sign-in options. Click Set up. Walk through setup again.
8. Face: camera scans your face from different angles.
9. Fingerprint: lift and replace finger several times.
10. Save. Lock screen now shows the option.
11. For Hello not appearing as available: hardware may not support. Check Settings → Accounts → Sign-in options → Facial recognition. Shows: “This option is currently unavailable” if no compatible camera.

This is the Hello-specific fix.

Method 3: Check Group Policy and registry restrictions

For policy-blocked options.

1. Open Group Policy Editor (Pro/Enterprise): gpedit.msc.
2. Navigate: Computer Configuration → Administrative Templates → System → Logon.
3. Look for policies that restrict sign-in:
   • Turn off picture password sign-in
   • Turn on convenience PIN sign-in
4. If Enabled (restricting): set to Not Configured or Disabled to allow.
5. For Windows Hello specifically: Computer Configuration → Administrative Templates → Windows Components → Windows Hello for Business. Check for restrictions.
6. For Home edition (no gpedit): registry equivalents:

   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
   DWORD: BlockDomainPicturePassword = 0

7. For corporate-managed PCs: policies enforced via Intune/AD. Contact IT.
8. For Microsoft account vs Local account differences: local accounts can’t use Windows Hello in some configurations. Microsoft account recommended for full feature.
9. For BitLocker locked drive: only password / recovery key shown until drive unlocks.

This is the policy check.

How to verify the fix worked

• Lock screen shows Sign-in options link.
• Clicking shows multiple icons (PIN, Face, Fingerprint, Password).
• Each method can sign you in successfully.
• Settings → Accounts → Sign-in options shows all set-up methods.

If none of these work

If options still missing: Restart Windows Biometric service: services.msc → Windows Biometric Service → Restart. For corrupted Hello data: delete C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\NgcSvc folder (as Admin). Reboot. Re-setup PIN. For BitLocker / Secure Boot conflicts: Hello requires TPM. Verify TPM Ready in tpm.msc. For Insider builds: rare regressions; rollback if needed. For Hyper-V virtual machines: VMs typically can’t use Hello (no camera/sensor). For external Hello cameras: ensure plugged into USB 3.0 port. For chronic Hello issues: sfc /scannow + dism /online /cleanup-image /restorehealth. For corporate-managed PCs: Group Policy may force specific sign-in methods only. IT must change.

Bottom line: Set up multiple sign-in methods via Settings → Accounts → Sign-in options. PIN is required for Windows Hello methods. Reconfigure Hello if camera/fingerprint hardware works but option missing.