Disable caching of the Windows Hello for Business credential after sign-in

This policy is not available in 25H2. Last published: 24H2

Removed on: 2025-09-29 · Last confirmed version: 24H2 · Removed policies list

Policy ID
WHFB_DisablePostLogonCredentialCaching
Scope
Computer Configuration
Supported on
At least Windows 10
Source
Administrative Templates (.admx) for Windows 11 2024 Update (24H2) (version 1.0)
Category
Windows Components › Windows Hello for Business

Description

The Windows Hello for Business credential is cached after sign-in to allow certain security related applications to use the credential silently to not disrupt the user experience. Enable this policy to turn this off, removing the cache so user input is explicitly necessary.

Registry

ComputerHKEY_LOCAL_MACHINE
  • DisablePostLogonCredentialCachingREG_DWORD