1

On a Windows 11 system, is there a way to change default login methods if you have enabled WHFB?
At login, I opted to sign-in with my password but then at the next login it defaulted to PIN.

8 Spice ups
2

I thought it defaulted to the last-used method, but maybe that’s not true?? Strange…

2 Spice ups
3

We’re using either PIN or biometric, so it generally defaults to biometric & if that fails it prompts for PIN.

3 Spice ups
4

I’ve logged out and, in a few times, and it will keep defaulting to PIN. The only way I have found to default to password is to remove the PIN. :joy:

1 Spice up
5

…so, you’re not sticking a PIN in this one :wink:

2 Spice ups
6

Is this GPO/Domain or Entra/Intune managed?

Others have reported this, and one suggestion is to keep using a password, windows will eventually learn you want to default to this.

Other workarounds depend on how this is managed.

2 Spice ups
7

Entra/Intune.

1 Spice up
8

Microsoft Intune Admin Center → Devices → Configuration profiles

Check for WHfB policies to see if PIN is set to enforced

This doesn’t make you use it, it just means you must create one, however It becomes the default sign-in method, especially on Entra ID-joined or Intune-managed devices.

On Entra ID/Intune managed devices, you have limited options with regards to changing the default.

Windows will typically default to the last successful method used, so if you sign in with your password a few times, it may start defaulting to that — but this is not guaranteed.

The only way I know to make it work for a different default, is a different policy for you/your chosen users.

2 Spice ups