An external camera may work perfectly in a video call yet be unavailable for Windows Hello. Before replacing it, distinguish ordinary camera operation from its eligibility for biometric sign-in under the computer’s current security settings.

Keep a known working sign-in method available throughout the investigation. Do not remove the current PIN, credentials or sensor enrolment merely to discover whether a replacement is compatible.

Read the security setting in its version context

On Windows 11 version 24H2 or later, open Settings, Accounts, Sign-in options, Additional settings. With relevant sensors, Enhanced sign-in security may offer a toggle. On means ESS is enabled and non-ESS biometric peripherals cannot be used for sign-in; those peripherals can still work in applications.

Microsoft says external camera modules do not support ESS. Compatible external fingerprint scanners can support it on suitable hardware and supported Windows builds. Check the exact sensor and PC combination with their manufacturer.

Older Windows versions use different wording. In version 23H2, the “Sign in with an external camera or fingerprint reader” toggle has the reverse meaning: On disables ESS. Avoid following a screenshot by its switch position alone.

Record the Windows version, setting label and displayed state together. That gives support a meaningful description instead of an ambiguous statement that the switch is on.

Preserve access before any enrolment change

Microsoft warns that an upgrade from a non-ESS configuration can remove existing non-ESS enrolments and associated credentials such as passkeys. Establish alternative account access before accepting such a prompt.

If the setting is Pending set up, the first enrolled sensor determines the ESS state. Pause to confirm the intended sensor and security arrangement before treating that screen as routine setup.

Discuss any proposal to disable ESS with the person responsible for the PC. The choice changes a security boundary; camera replacement and settings changes should follow an understood requirement.

After an agreed, supported change, test sign-in using the intended sensor while the alternate method remains available. Test the meeting camera separately. These are two different functions, and both need to work for a complete result.

Sources: Microsoft Enhanced Sign-in Security.