The potential threat because of this issue is that someone with your photo could unlock your device by using their mobile. To overcome this difficulty, the anti-spoofing technology comes into action, and once you have enabled the anti-spoofing for Windows Hello Face Authentication, a photo of the authentic user cannot be used to login to the PC.
Enable Enhanced Anti-Spoofing for Hello Face Authentication
Enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices and you must be signed in as an administrator to enable or disable enhanced anti-spoofing. To do this: Open the Local Group Policy Editor and on the left pane of Local Group Policy Editor, navigate to the following location:
On the right pane of Facial Features in Local Group Policy Editor, double-click Configure enhanced anti-spoofing policy to edit it.
If you enable this setting, Windows requires all users on managed devices to use enhanced anti-spoofing for Windows Hello face authentication. This disables Windows Hello face authentication on devices that do not support enhanced anti-spoofing. If you disable or don’t configure this setting, Windows doesn’t require enhanced anti-spoofing for Windows Hello face authentication. Note that enhanced anti-spoofing for Windows Hello face authentication is not required on unmanaged devices. As indicated in the screenshot above, do the following; To Disable Enhanced Anti-Spoofing for Windows Hello Face Authentication
Click the radio button for Not Configured or Disabled, click OK.
To Enable Enhanced Anti-Spoofing for Windows Hello Face Authentification
Click the radio button Enabled, click OK.
You can now exit Group Policy Editor and restart your system. The procedure described above won’t work on Windows 10 Home Edition because Group Policy Editor is not built into Home edition. However, to carry out the same procedure on Home edition, install PolicyPlus. Once you have added the utility, you can now follow the same steps as described above to enable Enhanced Anti-Spoofing for Windows 10 Home.