Windows Hello authentication

Privacy Questions
1

Which is the best form of authentication?

I can choose between:

PIN („Windows Hello")

Password (Which I already use because thats what I had to type during installation)

Picture password

I also have a Yubico Security Key (blue one) maybe I could somehow use that if that’s the best option?

There is a recommendation to update TPM chip before enabling Bitlocker. How can I do that on Gigabyte B660M DS3H motherboard?

2

Windows Hello options are saved locally. If you are using personal MS account to login to your PC, you can go passwordless. MS will remove password from your account and you will only login via MS Authenticator or other 2FA methods to your MS account.

As for your local login, I prefer PIN code because picture password can be found out if someone looks at your screen.