{"id":718109,"date":"2022-06-23T16:45:00","date_gmt":"2022-06-23T13:45:00","guid":{"rendered":"https:\/\/windowsreport.com\/?p=718109"},"modified":"2024-04-11T17:01:55","modified_gmt":"2024-04-11T14:01:55","slug":"windows-11-security","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/windows-11-security\/","title":{"rendered":"Windows 11 Security Settings: 15 Best to Enable or Change"},"content":{"rendered":"\n

Windows 11 has been out for a while, and many wonder about Windows 11 security and safety.<\/p>\n\n\n\n

The good news is that the operating system brought some improvements in terms of security that should help users stay safe.<\/p>\n\n\n\n

In today\u2019s guide, we will answer all your security-related questions and show you all the security settings you need to change to maximize your protection.<\/p>\n\n\n\n

To learn how Windows 11 security compares to its predecessor, read our Windows 11 vs Windows 10<\/a> guide.<\/p>\n\n\n\n

Does Windows 11 have better security?<\/h2>\n\n\n\n

The short answer is yes, Windows 11 has better security than its predecessors. To understand the differences, you must know what security features Windows 11 offers.<\/p>\n\n\n\n

Trusted Platform Module (TPM)<\/strong><\/p>\n\n\n

\n
\"\"<\/a>
TPM chart (Source: Microsoft<\/a>)<\/em><\/figcaption><\/figure><\/div>\n\n\n

Windows 11 comes with a new requirement called TPM, and we wrote about Windows 11 and TPM<\/a> in a separate guide.<\/p>\n\n\n\n

TPM is a feature that verifies the integrity of your firmware, preventing unauthorized users from accessing your encryption keys or installing rootkits that will run before your operating system boots.<\/p>\n\n\n\n

Virtualization-Based Security (VBS)<\/strong><\/p>\n\n\n\n

Next on our list is Virtualization-Based Security, and this feature creates a secure and isolated section in your memory.<\/p>\n\n\n\n

By doing so, Windows can use this virtual secure mode to run various security solutions, thus providing better protection for your operating system.<\/p>\n\n\n\n

Hypervisor-Protected Code Integrity (HVCI)<\/strong><\/p>\n\n\n\n

This feature is related to the VBS and secures the Windows kernel from malware. Many exploits tend to attack your kernel to access the operating system, and this feature prevents that.<\/p>\n\n\n\n

UEFI Secure Boot<\/strong><\/p>\n\n\n\n

This isn\u2019t a new feature, and it\u2019s closely associated with TPM. Using the secure boot ensures that your firmware isn\u2019t tempered, thus preventing malware from running as soon as you boot your PC.<\/p>\n\n\n\n

Now that you know about Windows 11 features, let\u2019s answer the most important question.<\/p>\n\n\n\n

Is Windows 10 or 11 more secure?<\/h3>\n\n\n\n

Both operating systems support all of the features above. However, these features aren\u2019t enabled on Windows 10 by default, plus Windows 10 doesn\u2019t force you to use them.<\/p>\n\n\n\n

On the other hand, TPM is required for Windows 11, and features such as HVCI can negatively affect performance on older CPUs, so Windows 11 has higher standards.<\/p>\n\n\n\n

Overall, Windows 11 is more secure, especially if you\u2019re a less experienced user who doesn\u2019t know how to enable these security features manually.<\/p>\n\n\n\n

If you want to avoid Windows 11 security issues, you need to make a few adjustments to your settings.<\/p>\n\n\n\n

How can I improve security in Windows 11?<\/h2>\n\n\n\n

1. Keep your system up to date<\/h3>\n\n\n\n
    \n
  1. Press the Windows<\/kbd> key + I<\/kbd> to open the Settings app.<\/li>\n\n\n\n
  2. Now go to the Windows Update<\/strong> section.
    \"\"<\/a><\/li>\n\n\n\n
  3. Click on Check for updates<\/strong>.
    \"\"<\/a><\/li>\n<\/ol>\n\n\n\n

    If any updates are available, they\u2019ll start downloading. In most cases, Windows automatically checks for updates, so you won\u2019t have to do this manually.<\/p>\n\n\n\n

    To keep your PC safe, it’s crucial to download Windows 11 security updates regularly.<\/p>\n\n\n\n

    2. Protect your account with a password<\/h3>\n\n\n\n
      \n
    1. Open the Settings app<\/em> using the Windows<\/kbd> key + I<\/kbd> shortcut.<\/li>\n\n\n\n
    2. Go to Accounts<\/em> and then select Sign-in options<\/strong>.
      \"\"<\/a><\/li>\n\n\n\n
    3. Expand the Password<\/em> section and click on Add<\/strong>.
      \"\"<\/a><\/li>\n\n\n\n
    4. Now enter the new password.
      \"windows<\/a><\/li>\n<\/ol>\n\n\n\n

      Adding an account password gives you basic protection from unauthorized access. This can be helpful if you\u2019re sharing your PC with others or if somebody tries to access your device without your knowledge.<\/p>\n\n\n\n

      3. Add fingerprint or facial recognition<\/h3>\n\n\n\n
        \n
      1. Press Windows<\/kbd> key + S<\/kbd> and enter sign-in options<\/em>. Select the Sign-in options<\/strong> from the list of results.
        \"windows<\/a><\/li>\n\n\n\n
      2. Select Facial recognition<\/em> or Fingerprint recognition<\/em> and click on Set up<\/strong>.
        \"windows<\/a><\/li>\n\n\n\n
      3. Follow the instructions on the screen to complete the process.<\/li>\n<\/ol>\n\n\n\n

        This is a more convenient protection method, since only you will be able to unlock your device, so you don\u2019t have to worry about someone knowing your password.<\/p>\n\n\n\n

        4. Make sure Windows Defender is running<\/h3>\n\n\n\n
          \n
        1. Open the Search by pressing the Windows<\/kbd> key + S<\/kbd>. Enter windows security<\/em> and select Windows Security<\/strong>.
          \"windows<\/a><\/li>\n\n\n\n
        2. Select Virus & threat protection<\/em> and then go to Manage settings<\/strong>.
          \"windows<\/a><\/li>\n\n\n\n
        3. Enable all options.
          \"windows<\/a><\/li>\n<\/ol>\n\n\n\n

          Windows 11 comes with Windows Defender pre-installed, but sometimes Windows Defender is turned off<\/a>, and that can make your PC vulnerable.<\/p>\n\n\n\n

          A few users reported that Windows Defender isn\u2019t installed<\/a> on their PCs, which can be a major security concern. <\/p>\n\n\n\n

          You should never turn off Windows 11 security because it’s the only defense against malware. Therefore, checking if the application is enabled and properly running on your PC is important.<\/p>\n\n\n\n

          5. Use third-party antivirus<\/h3>\n\n\n\n

          While Windows Defender is a great security solution, it\u2019s not as advanced as other malware protection software, so many users are choosing third-party antivirus solutions instead.<\/p>\n\n\n\n

          We already did a comparison between Windows Defender and Avast<\/a>, so you should check it out for more information.<\/p>\n\n\n\n

          If you\u2019re having security concerns about Windows 11, be sure to visit our best antivirus for Windows 11<\/a> guide and pick the right protection for your PC.<\/p>\n\n\n\n

          Suppose you want to stay protected on all fronts and be able to run your antivirus in the background without it affecting your PC’s performance. In that case, we suggest you use ESET HOME Security Essential<\/a><\/strong>.<\/p>\n\n\n\n

          6. Use a Standard account<\/h3>\n\n\n\n
            \n
          1. Press the Windows<\/kbd> key + I<\/kbd> to open the Settings app.<\/li>\n\n\n\n
          2. Go to Accounts<\/em> and select Other users<\/strong>.
            \"\"<\/a><\/li>\n\n\n\n
          3. Click on Add account<\/strong>.
            \"\"<\/a><\/li>\n\n\n\n
          4. Pick I don\u2019t have this person\u2019s sign-in information<\/strong>.
            \"\"<\/a> <\/li>\n\n\n\n
          5. Now select Add a user without a Microsoft account<\/strong>.
            \"\"<\/a><\/li>\n\n\n\n
          6. Enter the username and password for the new account.
            \"\"<\/a><\/li>\n<\/ol>\n\n\n\n

            By using the Standard account instead of the Administrator, you\u2019ll have to enter your administrator password every time you want to make a system change.<\/p>\n\n\n\n

            This is incredibly helpful if you\u2019re sharing your PC with someone or using a business computer and don\u2019t want users to have unrestricted access to the PC.<\/p>\n\n\n\n

            7. Make sure User Account Control is running<\/h3>\n\n\n\n
              \n
            1. Click the Search button and enter user account control<\/em>. Select User Account Control Settings<\/strong> from the results.
              \"\"<\/a><\/li>\n\n\n\n
            2. Make sure that User Account Control is set to a recommended value or the one above.
              \"\"<\/a><\/li>\n\n\n\n
            3. Click on OK<\/strong> to save changes.<\/li>\n<\/ol>\n\n\n\n

              This feature works great if you have a Standard and Administrator account since it will ensure that users won\u2019t be able to change system settings on their own.<\/p>\n\n\n\n

              8. Use Dynamic Lock<\/h3>\n\n\n\n
                \n
              1. Press the Windows<\/kbd> key + I<\/kbd> to open the Settings app.<\/li>\n\n\n\n
              2. Go to the Bluetooth<\/em> section and click on Add a device<\/strong>.
                \"\"<\/a><\/li>\n\n\n\n
              3. Follow the instructions on the screen to connect your Bluetooth device to your PC.<\/li>\n\n\n\n
              4. Once your device is connected go to Accounts<\/em> and select Sign-in options<\/strong>.
                \"\"<\/a><\/li>\n\n\n\n
              5. In the Dynamic lock<\/em> section, enable Allow Windows to automatically lock your device when you\u2019re away<\/strong>.
                \"\"<\/a><\/li>\n<\/ol>\n\n\n\n

                After enabling this feature, as soon as you step away from your PC for more than 30 seconds, it will automatically become locked.<\/p>\n\n\n\n

                9. Check if your firewall is enabled<\/h3>\n\n\n\n
                  \n
                1. Click the Search icon and type windows security<\/em>. Select Windows Security<\/strong>.
                  \"\"<\/a><\/li>\n\n\n\n
                2. Select Firewall & network protection<\/strong> and make sure that firewall is enabled for all types of connections.
                  \"\"<\/a><\/li>\n\n\n\n
                3. To change your firewall settings, click on Allow an app through firewall<\/strong>.
                  \"\"<\/a><\/li>\n\n\n\n
                4. Now you can choose which applications have access to the Internet.
                  \"\"<\/a><\/li>\n<\/ol>\n\n\n\n

                  Modifying the firewall settings is an advanced procedure, so be sure to double-check the suspicious application before you prevent it from accessing the Internet.<\/p>\n\n\n

                  \n\tRead more about this topic<\/strong>\n\t
                  \n\t\t