Windows Hello made its debut in Windows 10 and provides Microsoft's implementation of a passwordless model. Passwordless approaches can make use of biometrics, such as fingerprint scanning or facial recognition. The basic idea behind passwordless is that there is the use of some alternate form of authentication technology to log on to a system without the need for a password. They can often be weak and easily guessable, can fall victim to phishing attacks, and many users will reuse the same password on multiple sites. Tsarfati explained that the challenges of regular passwords are well known. Speaking at the Black Hat US 2021 hybrid event on August 5, Omer Tsarfati, security researcher at CyberArk, outlined a detailed attack chain by which he was able to bypass Windows Hello. While the promise of Windows Hello is to enable a more secure experience than regular passwords, it's an approach that could have potentially been bypassed.

Passwords are often a weak point in security, which is why approaches like Microsoft Hello that provide a passwordless approach to authentication are becoming increasingly popular.

Windows hello passwordless