What M1, M2, M3, and M4 mean on your Windows login screen

When you see M1, M2, M3, or M4 next to a user account on your Windows login screen, those letters mark Microsoft account sign-in options. Each letter represents a different way Microsoft can verify who you are: M1 is a password, M2 is a PIN, M3 is a biometric method like a fingerprint or face recognition, and M4 is a security key. If you want to use only one sign-in method or remove Microsoft account options entirely, you can disable the ones you don't use.

This matters because each enabled method is another way someone could potentially access your account if they had your device. Turning off the sign-in options you don't actually use reduces the surface area for attack and gives you clearer control over how your account works.

Key Takeaways

  • M1, M2, M3, and M4 are four different sign-in methods for your Microsoft account, and you can disable any of them through Settings.
  • Disabling a sign-in method removes it from your login screen but does not delete your password, PIN, or biometric data.
  • You must keep at least one sign-in method active at all times, or you will be locked out of your device.
  • If you want to use only a password, you can disable PIN, biometric, and security key options and keep M1 as your only choice.

How to disable Microsoft account sign-in methods in Windows Settings

Open Settings by pressing the Windows key and typing "Settings", then select the Settings app. Go to Accounts in the left sidebar, then select Sign-in options. You will see a list of all the sign-in methods currently enabled on your account.

For each method you want to turn off, click on it and select Disable or Remove. Windows will ask you to confirm. The method will disappear from your login screen within a few seconds. You do not need to restart your device.

If you are signed in with a Microsoft account and want to disable all Microsoft account methods at once, you can also switch to a local account instead. This removes all M1–M4 options and replaces them with a single password. Go to Settings > Accounts > Your info, select Sign in with a local account instead, and follow the prompts.

Why you might want to disable some sign-in methods

If you use a PIN every day but never use your fingerprint, disabling the fingerprint option means an attacker cannot use your biometric data as a backdoor. The same logic applies to security keys: if you do not own a security key, there is no reason to leave that option enabled.

Disabling unused methods also simplifies your login screen. Instead of cycling through four options to find the one you want, you see only the methods you actually use. This is especially useful on shared devices or in workplaces where multiple people log in to the same machine.

What happens when you disable a sign-in method

Disabling a method removes it from your login screen and prevents you from using it to sign in. It does not erase your password, PIN, fingerprint data, or security key pairing. If you re-enable the method later, all your data is still there and you can use it when ready.

Your Microsoft account itself is not affected. You can still sign in to Outlook, OneDrive, or any other Microsoft service using your password. Disabling a sign-in method only changes how you log in to your Windows device.

If you get locked out after disabling a sign-in method

If you disabled your only active sign-in method by mistake, you can still recover access. Restart your device and hold down the Shift key while clicking the power button on the login screen. Select Restart. Your device will boot into recovery mode, where you can reset your PIN or password.

Alternatively, if you have another device, you can visit account.microsoft.com, sign in, and reset your password from there. The next time you log in to your Windows device, use the new password.

Disabling Microsoft account sign-in on a work or school device

If your device is managed by your employer or school, your IT department may have locked down which sign-in methods you can disable. You might see a message saying "This setting is managed by your organization" when you try to change it. In that case, contact your IT support team to request a change.

Some organizations require biometric or security key sign-in for security reasons, even if you would prefer to use only a password. Understanding your organization's policy before you try to disable methods can save you a support ticket.

Frequently Asked Questions

Can I disable all four sign-in methods at once?

No. Windows requires at least one sign-in method to be active, or you will be locked out of your device. You must keep at least M1 (password), M2 (PIN), M3 (biometric), or M4 (security key) enabled at all times.

If I disable my fingerprint, does Windows delete my fingerprint data?

No. Disabling the fingerprint sign-in method removes it from your login screen but keeps your fingerprint data stored on your device. If you re-enable it later, your fingerprint will work when ready without re-scanning.

Do I need to disable sign-in methods if I switch to a local account?

No. Switching to a local account automatically removes all Microsoft account sign-in methods (M1–M4) and replaces them with a single local password. You do not need to disable them individually.

What is the difference between disabling a sign-in method and removing it?

In Windows Settings, "disable" and "remove" are often used the same way — both take the method off your login screen. The data is preserved, so you can re-enable it later if you change your mind.

Can my employer see which sign-in methods I have disabled?

If your device is managed by your organization, they may be able to see which sign-in methods are active. Check your organization's device policy or ask your IT department what they monitor.