Windows Hello Business

With Windows 10 only, Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN.

Windows Hello addresses the following problems with passwords:

• Strong passwords can be difficult to remember, and users often reuse passwords on multiple sites.
• Server breaches can expose symmetric network credentials (passwords).
• Passwords are subject to replay attacks.
• Users can inadvertently expose their passwords due to phishing attacks.

Windows Hello lets users authenticate to:

• a Microsoft account.
• an Active Directory account.
• a Microsoft Azure Active Directory (Azure AD) account.
• Identity Provider Services or Relying Party Services that support Fast ID Online (FIDO) v2.0 authentication (in progress)