Share this article
This article is translated in
Improve this guide
Windows 11 Security Settings: 15 Best to Enable or Change
11 min. read
Updated onApril 11, 2024
updated onApril 11, 2024
Share this article
This article is translated in
Improve this guide
Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more
Key notes
Windows 11 has been out for a while, and many wonder about Windows 11 security and safety.
The good news is that the operating system brought some improvements in terms of security that should help users stay safe.
In today’s guide, we will answer all your security-related questions and show you all the security settings you need to change to maximize your protection.
To learn how Windows 11 security compares to its predecessor, read ourWindows 11 vs Windows 10guide.
Does Windows 11 have better security?
The short answer is yes, Windows 11 has better security than its predecessors. To understand the differences, you must know what security features Windows 11 offers.
Trusted Platform Module (TPM)
Windows 11 comes with a new requirement called TPM, and we wrote aboutWindows 11 and TPMin a separate guide.
TPM is a feature that verifies the integrity of your firmware, preventing unauthorized users from accessing your encryption keys or installing rootkits that will run before your operating system boots.
Virtualization-Based Security (VBS)
Next on our list is Virtualization-Based Security, and this feature creates a secure and isolated section in your memory.
By doing so, Windows can use this virtual secure mode to run various security solutions, thus providing better protection for your operating system.
Hypervisor-Protected Code Integrity (HVCI)
This feature is related to the VBS and secures the Windows kernel from malware. Many exploits tend to attack your kernel to access the operating system, and this feature prevents that.
UEFI Secure Boot
This isn’t a new feature, and it’s closely associated with TPM. Using the secure boot ensures that your firmware isn’t tempered, thus preventing malware from running as soon as you boot your PC.
Now that you know about Windows 11 features, let’s answer the most important question.
Is Windows 10 or 11 more secure?
Both operating systems support all of the features above. However, these features aren’t enabled on Windows 10 by default, plus Windows 10 doesn’t force you to use them.
On the other hand, TPM is required for Windows 11, and features such as HVCI can negatively affect performance on older CPUs, so Windows 11 has higher standards.
Overall, Windows 11 is more secure, especially if you’re a less experienced user who doesn’t know how to enable these security features manually.
If you want to avoid Windows 11 security issues, you need to make a few adjustments to your settings.
How can I improve security in Windows 11?
1. Keep your system up to date
If any updates are available, they’ll start downloading. In most cases, Windows automatically checks for updates, so you won’t have to do this manually.
To keep your PC safe, it’s crucial to download Windows 11 security updates regularly.
2. Protect your account with a password
Adding an account password gives you basic protection from unauthorized access. This can be helpful if you’re sharing your PC with others or if somebody tries to access your device without your knowledge.
3. Add fingerprint or facial recognition
This is a more convenient protection method, since only you will be able to unlock your device, so you don’t have to worry about someone knowing your password.
4. Make sure Windows Defender is running
Windows 11 comes with Windows Defender pre-installed, but sometimesWindows Defender is turned off, and that can make your PC vulnerable.
A few users reported thatWindows Defender isn’t installedon their PCs, which can be a major security concern.
You should never turn off Windows 11 security because it’s the only defense against malware. Therefore, checking if the application is enabled and properly running on your PC is important.
5. Use third-party antivirus
While Windows Defender is a great security solution, it’s not as advanced as other malware protection software, so many users are choosing third-party antivirus solutions instead.
We already did a comparison betweenWindows Defender and Avast, so you should check it out for more information.
If you’re having security concerns about Windows 11, be sure to visit ourbest antivirus for Windows 11guide and pick the right protection for your PC.
Suppose you want to stay protected on all fronts and be able to run your antivirus in the background without it affecting your PC’s performance. In that case, we suggest you useESET HOME Security Essential.
6. Use a Standard account
By using the Standard account instead of the Administrator, you’ll have to enter your administrator password every time you want to make a system change.
This is incredibly helpful if you’re sharing your PC with someone or using a business computer and don’t want users to have unrestricted access to the PC.
7. Make sure User Account Control is running
This feature works great if you have a Standard and Administrator account since it will ensure that users won’t be able to change system settings on their own.
8. Use Dynamic Lock
After enabling this feature, as soon as you step away from your PC for more than 30 seconds, it will automatically become locked.
9. Check if your firewall is enabled
Modifying the firewall settings is an advanced procedure, so be sure to double-check the suspicious application before you prevent it from accessing the Internet.
10. Encrypt your drives
After your device is encrypted, nobody will be able to see your data without a password, which is great protection if your device gets stolen for example.
11. Make sure TPM and Secure Boot are enabled
For more information, we have a separate guide that focuses on how toenable TPM 2.0 in different versions of BIOS, so be sure to read it.
12. Scan your PC frequently
We suggest using a Full scan to scan all files on your PC, but this might take several hours to complete, so keep that in mind.
In most cases, your security software will detect the threats automatically, but it’s not a bad idea to manually scan your PC once in a while.
13. Enable Find my device feature
After doing this, you can track if your device gets stolen or lost via your Microsoft account.
14. Use a password manager
To ensure that you’re safe online, always usepassword manager software. By doing so, you’ll generate unique and strong passwords for every website that you log into.
This will prevent hackers from accessing your online accounts, plus you won’t have to remember your passwords anymore since the software will do that for you.
15. Use a VPN
VPN is extremely useful if you’re concerned about your privacy or if you tend to use a lot of open and insecure networks during the day.
VPN software will encrypt and hide all your traffic from third parties and your ISP, allowing you to browse the web privately.
If you want a good VPN with access to thousands of servers worldwide and that’s equipped with all the security features you need, we recommend Private Internet Access.
It’s compatible with all major platforms, including Windows 11, with an easy-to-use application. It’s able to circumvent geo-blocks and has dedicated servers for streaming.
⇒Get Private Internet Access
How do I protect my privacy on Windows 11?
After adjusting these Windows 11 privacy settings, you’ll disable all features that are collecting personal information.
Does Windows 11 Defender protect against malware?
Yes, Windows Defender protects against malware, ransomware, and other types of malware. The software is effective in dealing with the latest malware types out of the box.
However, some users prefer using third-party solutions since they offer more advanced features. Windows Defender lacks a reliable scheduling feature, and this is the main drawback for many.
The firewall configuration is powerful, but it feels unintuitive to use. Defender also lacks features such as Game Mode, webcam and microphone protection, banking protection, and vulnerability evaluation.
Does Windows 11 automatically encrypt?
No, Windows 11 doesn’t automatically encrypt your drives, and to encrypt them, you need to set up BitLocker protection.
Alternatively, you can usefile encryption softwareto protect your data from unauthorized access.
Windows 11 brought some changes, and while it’s similar to its predecessor, it still has improved security with the TPM requirement.
Most security features are now enabled by default, thus providing additional protection to the users. Speaking of security, we also wrote a great guide on whetherWindows 11 needs an antivirus, so be sure to check. And if you are going with the built-in antivirus, check thebest Windows Defender settings!
You can enhance your security even further bycreating a USB security keyfor additional protection.
What are your thoughts on Windows 11 security? Let us know in the comments section below.
More about the topics:Windows 11
Vlad Turiceanu
Windows Editor
Passionate about technology,Windows, and everything that has a power button, he spent most of his time developing new skills and learning more about the tech world.
Coming from a solid background in PC building and software development, with a complete expertise in touch-based devices, he is constantly keeping an eye out for the latest and greatest!
User forum
0 messages
Sort by:LatestOldestMost Votes
Comment*
Name*
Email*
Commenting as.Not you?
Save information for future comments
Comment
Δ
Vlad Turiceanu
Windows Editor
Coming from a solid background in PC building and software development, he’s a Windows 11 Privacy & Security expert.
