---
title: Pairing your Windows Hello device
description: "To set up Windows Hello authentication on your Windows machine for secure authentication with PingID, you need to register or 'pair' your Windows Hello device with your account."
component: pingid-user-guide
page_id: pingid-user-guide:secure_authentication_with_pingid:pid_ug_setting_up_windows_hello_auth
canonical_url: https://docs.pingidentity.com/pingid-user-guide/secure_authentication_with_pingid/pid_ug_setting_up_windows_hello_auth.html
revdate: March 8, 2026
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
  result: Result:
  result-2: Result:
  result-3: Result
---

# Pairing your Windows Hello device

To set up Windows Hello authentication on your Windows machine for secure authentication with PingID, you need to register or 'pair' your Windows Hello device with your account.

## Before you begin

Ensure your Windows Hello device supports FIDO2 biometrics and that you're using:

* Windows 10, OS Build 1809 or later.

* A browser that supports the use of FIDO2 biometrics, such as Windows Edge v44.17763 or later.

* Set up Windows Hello biometrics sign in on your machine, such as registering your fingerprints or face. Follow the manufacturer's guidelines to do so.

## About this task

|   |                                                                                                                                                                                                                                                                                                               |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | After registering, use your Windows Hello device to authenticate with PingID for both second factor or passwordless authentication flows depending on your organization's configuration. Learn more in [Authenticating with PingID using Windows Hello](pid_ug_authenticating_using_windows_hello_auth.html). |

![An image showing the process to setup a Windows Hello authentication with PingID.](_images/cig1564021312494.gif)

## Steps

1. From your Windows Hello machine, sign on to your account or app and from the registration window, click **Start**.

   ![A screen capture of the Registration window showing the Start button.](_images/gak1668088907565.png)

   The **Add a New Device** window displays, showing the Windows Hello icon.

   ![A screen capture of the Add a New Device window displaying the pairing code for the PingID mobile application.](_images/exi1590308389751.png)

2. In the **Add a New Device** window, click **Windows Hello**.

   |   |                                                                                                                                                                                                                                                                                 |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | Learn more about what to do if the **Authenticate using Windows Hello** option doesn't appear in the list, in [Troubleshooting](pid_ug_troubleshoot_title.html#i-registered-my-windows-hello-device-but-is-does-not-appear-as-an-option-when-trying-to-log-in-or-authenticate). |

   ### Result:

   Your application prompts you to authenticate.

3. Use your Windows Hello device to validate your identity, for example, using your fingerprint.

   |   |                                                                                                                                                                                                                                                                                         |
   | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | Ensure the **Alternative Authentication** browser window is the active window\.If a message displays asking if you permit your device to communicate with the biometrics device, select **Allow** or **Yes** to continue. The message can differ depending on the browser you're using. |

   ### Result:

   A green checkmark displays with an **Authenticated** message, indicating authentication is successful. You're automatically signed on to your account or app.

## Result

To sign on to your account or application, authentication requests prompt you to use your biometrics device. Learn more in [Authenticating with PingID using Windows Hello](pid_ug_authenticating_using_windows_hello_auth.html).

Learn more about troubleshooting in [Troubleshooting FIDO2 biometrics](pid_ug_troubleshooting_fido2_biometrics_for_mac.html).