Windows has long been criticized for its security shortcomings, and that criticism is largely based on the sheer number of malware that targets it. Part of that is the global ubiquity of Windows PCs, making them prime targets for cyberattacks. Given this landscape, it’s more important than ever to prioritize the security of your Windows PC.
Fortunately, protecting your computer doesn’t have to be a complicated or costly endeavor. You can significantly increase your computer’s security by simply using the built-in tools and settings found on your machine. There’s no need to purchase any additional software to get started. What’s more, if you want to further enhance your security and privacy, a number of high-quality, free Windows applications can provide additional layers of protection.
This guide will review the essential Windows 11 security settings that everyone should be aware of. Using these settings, you can significantly improve your PC’s security profile with minimal effort. We’ll walk you through the process so you can safely secure your system and reduce potential threats. Let’s take a look at the steps you need to take to effectively fortify your Windows PC (via).
Enable Windows Defender and Security Options (Anti-Virus)
Since Windows is the most popular operating system worldwide, it is a big target for hackers. This means that you need to have strong virus protection on your computer. To set this up, start by opening the Windows Security app from the search bar. Click on “Virus & threat protection” in the menu. Here, you will see information about your antivirus application. You should be using Microsoft Defender or a good third-party antivirus application. If there are any issues, follow the on-screen instructions to fix them.
No matter which antivirus app you choose, it's wise to set up regular virus scans. That way, you can catch any threats quickly. Each app has different steps for scheduling scans, so check your specific app's instructions to keep your computer safe.
Enable Account Protection
In the Windows Security app, go to “Account protection” in the sidebar. Under Windows Hello, click “Manage sign-in options.” If your computer has a webcam or fingerprint reader, turn on Face recognition or Fingerprint recognition. These methods provide much stronger security than using just a password.
Next, go back to “Account protection” and select “Dynamic lock” under the Dynamic lock heading. Check the box on the next screen to enable this feature. When your paired phone goes out of Bluetooth range, it automatically locks your computer, assuming you've walked away. This helps keep your computer and your private information safe from anyone who might try to access it while you're away.
Fire Up the Firewall
It is important to have a strong firewall to keep your computer and data safe online. Here is how to check and set it up:
1. Open the Windows Security app by searching for it in the Windows search bar.
2. Click “Firewall & network protection” in the sidebar.
3. Make sure that the text “Firewall is on” appears under each section (Domain network, Private network, and Public network). If not, select the section and follow the prompts to turn on the firewall.
Next, scroll down and click “Allow an app through firewall.” Review the list to make sure only the apps that need access are allowed. If you see an app that shouldn't be granted access, click “Change settings,” uncheck the box next to its name, and then click “OK.”
Gizchina News of the Week
Set Security Flags in Your Apps and Browsers
In the Windows Security application, “Application and browser controlIn the sidebar, select ” and select “Reputation-based protection.” Make sure all the toggles are on. Next, go back to the “App & browser control” page, select “Exploit protection > Exploit protection settings > System settings” and make sure all the settings are enabled.
Under “Intelligent Application Control” on the same page, this feature helps block harmful and untrusted applications. Note that it requires sending optional diagnostic information to Microsoft. If you opted out of this when setting up Windows, you will need to reinstall Windows to enable Intelligent Application Control. If you do not prefer to share this information for privacy reasons, Intelligent Application Control will not be available.
Secure Boot and Driver Protection
In the Windows Security app, go to “Device security” in the sidebar. At the top, you’ll find the “Safe Boot” section. This feature helps prevent malware from loading when you start your PC and is required for Windows 11. If you’re using Windows 11, you should see a green checkmark next to “Safe boot.” If it’s missing, follow the on-screen instructions to fix it.
Below that, check the “Data encryption” section. Here, you can enable encryption to protect your files from unauthorized access. If you don’t see this option, look for “Manage BitLocker drive encryption” and select it to turn on BitLocker encryption instead.
Review Permissions
Over time, you may grant Windows and various apps broad access to your data. To review or change these permissions, open the Settings app and tapPrivacy and Security” in the sidebar. Next, scroll down to the “Windows permissions” section.
See what Windows can access by checking each category, such as Speech and Search permissions. If you want to revoke access, simply turn off the toggle next to each setting.
Under “Windows permissions,” you'll find “App permissions.” Here, you can manage which apps can access your location, microphone, webcam, and more. Review these settings to make sure no app can access data you don't want it to.
Enable Find My Device
Make sure to enable and use the Find My Device Option! This is another feature that will increase security and protect you from loss. If you have a Windows device, enabling Find My Device can help you track it. Here's how:
1. Open the Settings app and go to the “Privacy and security” section.
2. Select the “Find my device” option at the top of the page and turn on the toggle next to it.
Once the installation is complete, open a web browser and visit Microsoft's device location website. Sign in with your Microsoft account to see a list of your devices. Select the one you want to find, then click “Locate” to view a map showing the current location of your device. You can also remotely lock your device to prevent others from using it. If you find your device, click “Lock” and then “Next.” You can also reset your password from this page for extra security.
Remember, Find My Device requires location settings to be turned on. If they aren’t, you’ll see a notification on the Find My Device page. Click the “Location settings” button to adjust these settings.
Keep Windows Updated
The last tip isn’t a setting, but it’s crucial for improving your computer’s security: keep it up to date. Regular updates ensure you have the latest security patches to protect against viruses and malware.
To update Windows, open the Settings app, click Windows Update in the sidebar, and select Check for updates. Your PC will search for updates, and you'll need to follow the prompts to install them. A restart may be required to complete the process.
Consider using a tool like Patch My PC to update your apps. This free program checks for updates to all your installed apps and installs them automatically, making it easy to keep everything secure and up to date.