Allow companion device for secondary authentication
- Policy ID
- MSSecondaryAuthFactor_AllowSecondaryAuthenticationDevice
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Secondary Authentication Factor
Description
This policy allows users to use a companion device, such as a phone, fitness band, or IoT device, to sign on to a desktop computer running Windows 10. The companion device provides a second factor of authentication with Windows Hello.
If you enable or do not configure this policy setting, users can authenticate to Windows Hello using a companion device.
If you disable this policy, users cannot use a companion device to authenticate with Windows Hello.
Registry
ComputerHKEY_LOCAL_MACHINE
- AllowSecondaryAuthenticationDeviceREG_DWORD