If turned on, you disable Enhanced Sign-in Security , which is a Windows Hello feature that adds a layer of security to biometric data by using specialized hardware and software components.
When you sign in with Windows Hello, your biometric data is stored securely (see here for more technical information). Malicious users and attackers constantly try to come up with new ways to access your device and access sensitive information.
Windows Hello offers a secure and convenient way to sign in to your device using biometric authentication like facial recognition, fingerprints, or a PIN. This article guides you on how to set up and use Windows Hello with your keyboard and a screen reader.
When you lock your device, anyone trying to access it must enter your password, PIN, or use biometric authentication if you have Windows Hello set up. This is useful if you need to step away from your device but don't want to close everything you're working on.
When App Lock is enabled, you'll be asked to authenticate using your device PIN or biometric every time you open Authenticator. App Lock also helps ensure that you're the only one who can approve notifications by prompting for your PIN or biometric any time you approve a sign-in notification.