pywinhello 0.2.0

Automate Windows Hello PIN entry via USB HID keyboard (Raspberry Pi Pico)

pywinhello

Automate Windows Hello PIN entry via USB HID keyboard (Raspberry Pi Pico).

Windows Hello's Credential Dialog is protected by UIPI — no software input method (SendInput, pyautogui, pywinauto) can type into it. pywinhello uses a Raspberry Pi Pico as a USB HID keyboard to bypass this restriction and enter PINs automatically.

Features

• Process-aware: identifies which app triggered Windows Hello, enters the correct PIN
• Two-pass detection: handles both PIN mode and fingerprint mode automatically
• Progressive API: from raw HID keyboard to full daemon monitor
• Zero polling: uses WinEvent hooks for instant dialog detection
• Automated Pico setup: flashes CircuitPython, downloads libraries, installs firmware

Install

pip install pywinhello

Hardware

Any Raspberry Pi Pico variant (Pico, Pico W, Pico 2, Pico 2 W) — ~$4.

Automated Setup

# Hold BOOTSEL on Pico, plug in USB, then:
pywinhello setup-pico

This handles everything: flashing CircuitPython, downloading adafruit_hid, and installing the HID bridge firmware.

Verify

pywinhello ping
# PONG from COM8

Quick Start

from pywinhello import enter_pin

# One-shot: enter PIN when dialog appears
event = enter_pin("1234")
print(event.dialog_dismissed)  # True if PIN was accepted

Process-aware daemon

Create config.yaml:

apps:
  - exe: MarketSpeed2.exe
    pin: "1234"
  - exe: chrome.exe
    pin: "5678"

from pywinhello import HelloMonitor, load_config

config = load_config("config.yaml")
monitor = HelloMonitor(config)
monitor.serve(on_event=lambda e: print(e))

CLI

# Run monitor daemon
pywinhello serve -c config.yaml

# Ping Pico
pywinhello ping

# Set up Pico (flash + firmware)
pywinhello setup-pico

Architecture

Host (Python)          Pico (CircuitPython)       Windows
┌──────────┐  serial   ┌──────────┐  USB HID   ┌──────────┐
│ pywinhello│─────────→│ code.py  │───────────→│ Credential│
│           │ TYPE:1234 │ keyboard │ keystrokes  │  Dialog   │
│           │←─────────│          │             │           │
│           │    OK     │          │             │           │
└──────────┘           └──────────┘             └──────────┘

Progressive API

serve()              Daemon — handles all dialogs automatically
  └── handle_next()    One-shot — wait for next dialog
       └── enter_pin()   Immediate — type PIN into current dialog
            └── HIDKeyboard  Raw — serial HID bridge

How it works

1. Dialog detection — SetWinEventHook(EVENT_OBJECT_CREATE) detects Credential Dialog Xaml Host instantly
2. Process identification — GetWindow(GW_OWNER) traces the dialog to the requesting process
3. Focus — AttachThreadInput + SetForegroundWindow brings the dialog to focus
4. Two-pass entry — Types PIN directly; if dialog persists, sends ESCAPE to navigate from fingerprint to PIN mode, then retries
5. HID bypass — Physical keyboard input from the Pico bypasses UIPI restrictions

License

MIT