Microsoft is expanding one of the least understood security features in Windows 11. Beginning with the August 2026 update, Enhanced Sign-in Security (ESS) now supports compatible external fingerprint readers, extending the company's most secure Windows Hello experience to devices without built-in biometric hardware.
The timing couldn't be better because Enhanced Sign-in Security has confused users ever since Microsoft introduced it. Some users assume it's simply a newer version of Windows Hello, while others think it's reserved for businesses or Copilot+ PCs.