Is it possible to setup Windows Hello with a fingerprint enabled security key but without a PIN?

Hi @N_Z_L, thank you for this question!

Per Goldfinger's post, this has to do with how Windows Hello is designed. Microsoft's docs indicate:

Windows Hello enables biometric sign-in for Windows 10: fingerprint, iris, or facial recognition. When you set up Windows Hello, you're asked to create a PIN first. This PIN enables you to sign in using the PIN when you can't use your preferred biometric because of an injury or because the sensor is unavailable or not working properly.

If you only had a biometric sign-in configured and, for any reason, were unable to use that method to sign in, you would have to sign in using your account and password, which doesn't provide you the same level of protection as Hello.

From our position at 1Password, what we can provide is an "integration" with Hello - in other words, we can provide a way to interface with Hello and use it to extend the capabilities of 1Password, but we can't fundamentally alter how Hello works (or perhaps more specifically, what it requires to work).

Ultimately, if you're uncomfortable with using a PIN to unlock 1Password on that device, I'd recommend sticking to the classic combination of account password and Secret Key.

For what it's worth, we are always thinking about how to make sign-in to 1Password more easy while keeping things secure, so we appreciate your feedback on this and the points you've raised here. Thanks for taking the time to do so.