tpm and device-bound keys

A Windows Hello for Business PIN can be stronger than a conventional enterprise password because it is created for one specific Windows device, remains local to that device, and unlocks a protected cryptographic key rather than acting as a reusable secret sent to a server. That is the central...