Windows Hello provides passwordless authentication via biometrics (face, fingerprint) or PIN tied to a specific device. Backed by TPM and FIDO2 standards.
Windows Hello credentials are device-bound — can't be stolen like passwords. Face recognition uses IR cameras to prevent photo spoofing. Hello for Business extends to enterprise with AD/AAD integration. Replaces password for local authentication.