Windows Hello Fingerprint Not Working: The Fix Ladder

Windows Hello fingerprint not working is almost always one of four things: a flaky enrollment, a broken biometric driver after a Windows Update, a group-policy lock, or a sensor that has actually failed. The fix is to work through them in order, not to wipe the laptop. We cleared a “this option is currently unavailable” toggle on a Lenovo ThinkPad running Windows 11 25H2 in about ten minutes by reinstalling the Goodix fingerprint driver.

No reset. No recovery media. Below is the exact order we use after hitting this dozens of times on older business laptops.

#Why Did Windows Hello Fingerprint Stop Working After an Update?

The pattern almost everyone hits is the same. You signed in with your finger yesterday, Windows installed a cumulative update overnight, and this morning the reader either does nothing, throws “We couldn’t find a fingerprint reader compatible with Windows Hello,” or the entire Fingerprint recognition section is greyed out.

What’s broken is rarely Windows Hello itself. Cumulative updates occasionally ship a Plug and Play package that supersedes your OEM biometric driver, or the existing driver’s signature gets invalidated and the service refuses to load it.

Your reader hardware is fine. The software path from sign-in to sensor is broken.

There’s a second flavor people confuse with a failure: KB5028763, the “Choose if you want to keep signing in with your face or fingerprint” prompt. According to Microsoft’s KB5028763 advisory, this prompt appears after specific updates and is expected behavior. Click Keep using and your enrollments survive intact.

For everything else, work the ladder.

#Step 1: Remove and Re-Add Your Fingerprint

This is the boring fix, and it works often enough that we always try it first. Go to Settings > Accounts > Sign-in options, expand Fingerprint recognition (Windows Hello), and click Remove. Reboot. Come back to the same screen and click Set up, then enroll the same finger again.

Why this clears so many cases: the local enrollment template can drift out of sync with the Windows Biometric Service after a sleep crash or a forced reboot, and removing the entry resets that handshake. According to Microsoft’s Windows Hello troubleshooting page, Microsoft recommends re-registering fingerprints and capturing different angles of your finger when recognition fails, which is exactly what this step does.

Two practical notes from doing this often. Capture more of the finger than the wizard asks for, since rolling the edges gives you slightly higher recognition rates on dry skin. Add a second finger while you’re in there.

If your hand is wrecked from winter air or hand sanitizer, dab a tiny bit of moisturizer and wait a minute before enrolling. We tested this on a dry-air office in February and re-enrollment failed three times until we hydrated the finger. Hydration matters more than people expect.

#Step 2: Reinstall the Biometric Driver in Device Manager

If re-enrollment didn’t fix it, or the Fingerprint recognition section is greyed out entirely, the driver is the next suspect. This is where ninety percent of the post-update breakages live.

Press Win + X and open Device Manager. Expand Biometric devices. You should see an entry like “Goodix fingerprint device,” “Synaptics WBDI,” “Validity Sensors,” “ELAN WBF Fingerprint Sensor,” or “AuthenTec.” A yellow exclamation mark on the entry confirms the driver is broken.

Right-click the device and choose Uninstall device. Tick Attempt to remove the driver for this device if the box appears, then go to Action > Scan for hardware changes in the menu bar, or just reboot. Windows reinstalls the driver from its driver store on the way back up.

In our testing on a Lenovo ThinkPad T14 running Windows 11 25H2, this single uninstall-and-reboot sequence brought a dead Goodix sensor back to life. The Fingerprint recognition toggle in Sign-in options went from greyed out to fully enabled within thirty seconds of the desktop loading. If you’ve also seen DRIVER_POWER_STATE_FAILURE blue screens on the same machine, the biometric driver is often a co-conspirator and the same uninstall trick helps.

If the generic driver Windows reinstalls is the broken one, you need the OEM package directly.

Go to your laptop maker’s support page, search your exact model, and grab the latest fingerprint or biometric driver. Lenovo lists it under Mouse and Keyboard, Dell calls it Fingerprint Reader, and HP files it under Driver-Keyboard, Mouse and Input Devices. Run the installer, reboot, and re-enroll.

#Step 3: Restart the Windows Biometric Service

Sometimes the driver is fine but the service that talks to it has stalled. This is the fastest single fix to try and it costs nothing.

Press Win + R, type services.msc, and press Enter, then scroll to Windows Biometric Service. If the Status column is blank, right-click and choose Start; if it’s already running, choose Restart. Confirm the Startup type is set to Automatic.

While you’re in services.msc, also restart Windows Hello Setup Service where it appears on your build. On Windows 11 25H2 it shows up intermittently depending on the cumulative update level. If you don’t see it, that’s fine. The main Biometric Service does the heavy lifting.

This step takes about thirty seconds. Try the fingerprint reader immediately, no reboot required.

#Step 4: Is “Fingerprint Recognition” Greyed Out?

This is the single most-asked subset of the question, so it gets its own section. Almost every time we see Fingerprint recognition (Windows Hello) showing “This option is currently unavailable” or appearing dim, the cause is one of three things, in this order:

1. The biometric driver is missing or broken. Run Step 2. This catches about 90 percent.
2. A group policy disabled biometrics. On managed corporate laptops, IT can disable Windows Hello biometrics via the Allow the use of biometrics policy. Press Win + R, type gpedit.msc, and go to Computer Configuration > Administrative Templates > Windows Components > Biometrics. If “Allow the use of biometrics” is set to Disabled, that’s your answer, and you need to talk to IT, not fight Windows.
3. TPM is off or the Windows Biometric Service is disabled. Re-enable both per Step 3, then check the TPM status by running tpm.msc and confirming “The TPM is ready for use.”

The trap people fall into here is assuming greyed-out means policy and giving up. On any personal Windows 11 install, policy is almost never the cause. It’s the driver. Reinstall it first.

Symptom	Most likely cause	Where to fix
Toggle greyed out, says “currently unavailable”	Broken or missing biometric driver	Device Manager > Biometric devices > Uninstall + reboot
Reader works but says “fingerprint not recognized”	Stale enrollment or skin condition	Settings > Accounts > Sign-in options > Remove and re-add
”We couldn’t find a fingerprint reader compatible with Windows Hello”	Driver loaded but service stopped	services.msc > Windows Biometric Service > Restart
No biometric device listed at all in Device Manager	Sensor hardware failure or BIOS disabled	Check BIOS settings, then call the OEM
Works after sleep, fails after restart	TPM not loading early enough	Update BIOS/firmware via OEM utility

Common Windows Hello fingerprint symptoms and where each one gets resolved.

#Step 5: Roll Back the Driver or Recent Update

If everything above fails and you know an update flipped the switch, you have two cleanish ways out: a driver rollback or uninstalling the offending update. Try the driver rollback first since it’s reversible.

For the driver rollback, open Device Manager, right-click the biometric device, choose Properties, go to the Driver tab, and click Roll Back Driver if the button is enabled. It’s only enabled when Windows has a previous version cached, which is most often the case right after an update. That puts you back on the driver that worked yesterday.

For the update rollback, go to Settings > Windows Update > Update history > Uninstall updates and remove the most recent quality update, then reboot. Microsoft will try to reinstall it within a few days, so this is a stopgap. Use the window to install a current OEM biometric driver before the update comes back. If you keep seeing the same broken update reapply, our guide on deleting Windows Update files can help clean the cache before you retry.

One quick clarification on KB5028763. The prompt asking whether you want to keep signing in with your face or fingerprint isn’t a failure, it’s a policy-driven re-confirmation Microsoft added for accounts with phone sign-in enabled. Click Keep using. Dismissing it doesn’t break Windows Hello.

#Step 6: When the Hardware Has Actually Failed

If steps one through five all fail, the sensor itself is the suspect.

You’re in this zone if Biometric devices still doesn’t show in Device Manager, or it throws Code 10, 19, or 43 on a clean install.

Check BIOS first. Reboot, tap the key that opens setup for your machine (F1 for Lenovo ThinkPad, F2 for Dell, F10 for HP, Esc then F10 on most others), and look under Security or I/O Port Access for a Fingerprint Sensor entry. If it’s set to Disabled, that’s a five-second fix.

If it’s enabled and Windows still can’t see the device, you have a hardware fault. Most fingerprint sensors are soldered to the daughterboard or palm rest and aren’t user-replaceable on modern laptops. The repair tends to cost more than it’s worth on machines older than three years.

Your PIN still works, so the laptop isn’t bricked. You’ve just lost the convenience.

Set a slightly longer PIN if security feels thinner without the fingerprint, and consider a USB security key for higher-stakes logins. If you’ve forgotten the PIN itself, our forgotten laptop password recovery guide covers the supported reset paths.

#Bottom Line

Try re-enrollment first, because it costs nothing and clears half of these cases. If the toggle is greyed out, go straight to Device Manager and reinstall the biometric driver, no exceptions. Skip the policy hunt unless you’re on a corporate-managed laptop. And if Biometric devices is empty even after a driver reinstall, the sensor has died, your PIN still works, and a reformat won’t bring it back.

If your Windows machine is showing other post-update weirdness, our 100% disk usage triage guide and the Windows 11 dark mode walkthrough cover the next two issues we most often see on the same batch of laptops.

#Frequently Asked Questions