KB5055523 Breaks Windows Hello on Windows 11

Microsoft released KB5055523 on April 8, 2025, as a security update for Windows 11 version 24H2. The update included security improvements to Windows Hello, including a change requiring compatible facial-recognition cameras to see a visible face during sign-in. Microsoft also documented a separate Windows Hello issue affecting a specific configuration involving System Guard Secure Launch or Dynamic Root of Trust for Measurement (DRTM).

Because these are two different situations, it is important to identify which Windows Hello problem you are experiencing before attempting to remove the update or change security settings. The documented issue does not affect every Windows 11 computer that installs KB5055523.

Method 1: Check Whether KB5055523 Is Installed

The first step is to determine whether your computer has KB5055523 installed.

1. Press Windows + I.
2. Select Windows Update.
3. Select Update history.
4. Review the list of installed updates.
5. Look under Quality Updates.
6. Search for KB5055523.

You can also check your Windows build by pressing Windows + R, entering:

winver

and pressing Enter.

KB5055523 corresponds to Windows 11 version 24H2 build 26100.3775 when it was released. Microsoft notes that devices that already have later updates installed may no longer show that exact build because later updates include the earlier fixes and changes.

If KB5055523 is not installed, the Windows Hello problem may have another cause.

Method 2: Check Which Windows Hello Problem You Have

Not every Windows Hello problem following KB5055523 is the same.

Microsoft documented a specific issue affecting systems where System Guard Secure Launch or DRTM was enabled after installing the update. If the affected computer subsequently undergoes a Push-button reset or Reset this PC using Keep my files and Local install, Windows Hello PIN or facial recognition may stop working.

Affected users may see messages such as:

Something happened and your PIN isn't available.
Click to set up your PIN again.

Facial recognition setup may also display an error indicating that something went wrong.

This documented issue was addressed by a later update, so uninstalling KB5055523 is not necessarily the appropriate solution for every Windows Hello problem.

Method 3: Check Windows Hello After the Security Change

KB5055523 also introduced a security-related change to Windows Hello facial recognition.

After installing the update, Microsoft says facial recognition requires a color camera to see a visible face when signing in. If the camera is covered or the environment is too dark, facial recognition may fail. Microsoft specifically describes this behavior as a security design change rather than the separate documented Windows Hello issue.

If Windows Hello Face stopped working after the update:

1. Remove anything covering the camera.
2. Move to a reasonably well-lit location.
3. Make sure your face is clearly visible.
4. Try Windows Hello again.
5. Check whether the camera is working in another application.

If Windows Hello works normally when the camera has adequate light and an unobstructed view, the problem may be related to the security change rather than a damaged Windows Hello installation.

Method 4: Install the Later Windows Update That Addresses the Issue

If your computer matches the documented Windows Hello failure, check Windows Update for newer updates.

1. Press Windows + I.
2. Select Windows Update.
3. Select Check for updates.
4. Install available updates.
5. Restart the computer.

Microsoft documented that the specific Windows Hello issue introduced with the affected configuration was addressed in KB5055627.

A later cumulative update may also contain the relevant correction because Windows cumulative updates generally include earlier fixes.

For this reason, keeping Windows updated is preferable to permanently remaining on an older security update.

Method 5: Reconfigure Windows Hello PIN

If Windows Hello reports that your PIN is unavailable, Windows may allow you to create the PIN again.

At the Windows sign-in screen, select:

I forgot my PIN

if that option is available.

Follow the Microsoft account verification process and create a new PIN.

You can also manage Windows Hello from Windows Settings when you can sign in using another available authentication method.

1. Open Settings.
2. Select Accounts.
3. Select Sign-in options.
4. Select PIN (Windows Hello).
5. Follow the available setup or reset options.

If Windows Hello remains unavailable after installing the appropriate update, continue with the other troubleshooting methods.

Method 6: Reconfigure Windows Hello Face

If PIN sign-in works but facial recognition does not, remove and configure Windows Hello Face again.

1. Open Settings.
2. Select Accounts.
3. Select Sign-in options.
4. Select Facial recognition (Windows Hello).
5. Select the available option to remove or improve recognition.
6. Restart the computer if necessary.
7. Return to the same section.
8. Select Set up.
9. Follow the instructions.

Make sure the camera has a clear view of your face and that the room has adequate lighting.

If the camera itself is not detected, the problem may be related to the camera driver or hardware rather than KB5055523.

Method 7: Uninstall KB5055523 if the Problem Started Immediately After the Update

If you have confirmed that the problem began after KB5055523 and the available Windows recovery options require removing the update, you can check whether Windows allows you to uninstall it.

Open:

Settings > Windows Update > Update history > Uninstall updates

Find KB5055523 if it is available.

Select it and choose Uninstall.

Follow the instructions and restart the computer.

However, uninstalling a security update removes the security protections included in that update. Microsoft has documented that the Windows Hello issue has a later fix, so installing the appropriate later update is generally preferable when it is available.

Do not uninstall a security update simply because Windows Hello is behaving differently in low light; that behavior can be part of the intended security change.

Method 8: Use Windows Recovery When You Cannot Sign In

If Windows Hello is the only available sign-in method and you cannot access Windows normally, use the recovery environment.

From the Windows sign-in screen:

1. Select the Power button.
2. Hold Shift.
3. Select Restart.
4. Continue holding Shift until the recovery environment appears.
5. Select Troubleshoot.
6. Select Advanced options.

Depending on your situation, available recovery tools may include:

• Startup Repair
• Uninstall Updates
• System Restore
• Command Prompt
• UEFI Firmware Settings

If the problem started immediately after a Windows update, Uninstall Updates may be useful.

If the computer has another working sign-in method, use that first and install the applicable Windows updates rather than making unnecessary recovery changes.

What Exactly Was Wrong With KB5055523?

The title of this article can make it sound as though KB5055523 universally broke Windows Hello, but Microsoft’s documentation describes a more limited situation.

The documented issue affected certain devices with System Guard Secure Launch or DRTM enabled after the update, followed by a specific reset operation using Reset this PC with Keep my files and Local install. On those systems, Windows Hello PIN or facial recognition could stop working.

There was also a separate security-related change affecting facial recognition in low-light conditions or when the camera lens was covered. Microsoft explicitly distinguishes that behavior from the documented Windows Hello issue.

Should You Remove KB5055523?

Removing KB5055523 is not automatically necessary just because Windows Hello behaves differently after the update.

First determine whether the symptoms match Microsoft’s documented issue.

If the computer is affected by the specific Windows Hello problem, installing a later update containing the fix is the more appropriate long-term approach. Microsoft documented KB5055627 as addressing the known issue.

If facial recognition only fails when the camera is covered or lighting is insufficient, this may instead be the security change introduced by the update.

Does KB5055523 Affect All Windows 11 Versions?

KB5055523 is specifically documented for Windows 11 version 24H2, all editions. It was released on April 8, 2025 as OS Build 26100.3775.

Other Windows 11 versions received different April 2025 updates. Therefore, do not assume that a Windows Hello problem on another Windows 11 release is caused by KB5055523.

Check your Windows version with:

winver

Then compare the installed update with the update applicable to your Windows version.

Conclusion

KB5055523 was an April 2025 security update for Windows 11 version 24H2 that included important Windows Hello security changes. Microsoft also documented a specific Windows Hello issue affecting certain systems with System Guard Secure Launch or DRTM enabled after the update, followed by a particular Reset this PC configuration.

The update therefore did not universally break Windows Hello on every Windows 11 computer. If facial recognition stopped working in low light or when the camera is covered, that can be the result of the security change rather than the documented failure.

If your PIN or facial recognition stopped working after the specific reset scenario, check Windows Update for later fixes. Microsoft states that KB5055627 addressed the documented Windows Hello issue.

If necessary, you can investigate the installed update through Update History and use Windows Recovery or the uninstall-update option. However, removing a security update should not be the first response when a later corrected update is available.

FAQs

1. Did KB5055523 break Windows Hello for everyone?

No. Microsoft documented a specific Windows Hello issue affecting certain configurations. The update also introduced a security-related change requiring a visible face for facial recognition, particularly affecting low-light or covered-camera situations.

2. What Windows version does KB5055523 apply to?

KB5055523 is the April 8, 2025 security update for Windows 11 version 24H2. It corresponds to OS Build 26100.3775 at release.

3. How can I check if KB5055523 is installed?

Open Settings > Windows Update > Update history and look through the installed quality updates for KB5055523.

4. Should I uninstall KB5055523 if Windows Hello stops working?

First determine which Windows Hello issue you have and check for later Windows updates. Microsoft documented a later fix for the specific known issue, so updating Windows is preferable when the applicable fix is available.

Quick Summary

• KB5055523 was released for Windows 11 24H2 in April 2025.
• Microsoft documented a specific Windows Hello issue affecting certain security configurations and reset scenarios.
• The update also introduced a security change requiring Windows Hello Face to see a visible face.
• Check for later Windows updates before considering removal of the security update.