Add Windows Hello PIN to conclusion and enhance security details in identity protection documentation

This commit is contained in:
Paolo Matarazzo 2024-10-14 11:30:38 -04:00
parent 40d85b7882
commit 0dae5eec87
2 changed files with 5 additions and 0 deletions

View File

@ -33,6 +33,7 @@ Enhanced:
- [Personal data encryption (PDE)](operating-system-security-encryption-and-data-protection.md#personal-data-encryption-pde) - [Personal data encryption (PDE)](operating-system-security-encryption-and-data-protection.md#personal-data-encryption-pde)
- [Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services) - [Server Message Block file services](operating-system-security-network-security.md#server-message-block-file-services)
- [Universal Print](cloud-services-protect-your-work-information.md#universal-print) - [Universal Print](cloud-services-protect-your-work-information.md#universal-print)
- [Windows Hello PIN](identity-protection-passwordless-sign-in.md#windows-hello-pin)
- [Windows Local Administrator Password Solution (LAPS)](cloud-services-protect-your-work-information.md#windows-local-administrator-password-solution-laps) - [Windows Local Administrator Password Solution (LAPS)](cloud-services-protect-your-work-information.md#windows-local-administrator-password-solution-laps)
- [Windows Subsystem for Linux (WSL)](application-security-application-isolation.md#windows-subsystem-for-linux-wsl) - [Windows Subsystem for Linux (WSL)](application-security-application-isolation.md#windows-subsystem-for-linux-wsl)

View File

@ -35,6 +35,10 @@ The Windows Hello PIN, which can only be entered by someone with physical access
The TPM protects against threats including PIN brute-force attacks on lost or stolen devices. After too many incorrect guesses, the device locks. IT admins can set security policies for PINs, such as complexity, length, and expiration requirements. The TPM protects against threats including PIN brute-force attacks on lost or stolen devices. After too many incorrect guesses, the device locks. IT admins can set security policies for PINs, such as complexity, length, and expiration requirements.
[!INCLUDE [new-24h2](includes/new-24h2.md)]
If you're using a device without built-in biometrics, Windows Hello has been further strengthened by default to use Virtualization-based Security (VBS) to isolate credentials. This added layer of protection safeguards against admin-level attacks. Even if you sign in with a PIN, your credentials remain secure thanks to VBS.
### Windows Hello biometric ### Windows Hello biometric
Windows Hello biometric sign-in enhances both security and productivity with a quick and convenient sign-in experience. There's no need to enter your PIN; simply use your biometric data for an easy and delightful sign-in. Windows Hello biometric sign-in enhances both security and productivity with a quick and convenient sign-in experience. There's no need to enter your PIN; simply use your biometric data for an easy and delightful sign-in.