Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
FREEDOM251

Freedom251 › Blog › browser security

How to turn on Microsoft Edge’s enhanced security mode

By Freedom251 Team · · 13 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In Microsoft Edge, open Settings and more (the three-dot menu), choose Settings, then Privacy, search, and services > Security. Turn on Enhance your security on the web and select Balanced or Strict.

Balanced is Microsoft’s recommended choice for most people. It adds protection on unfamiliar or infrequently visited sites while aiming to keep normal websites working. Strict applies the extra protections to every site by default, but Microsoft warns that parts of ordinary websites may stop working and that some configuration may be needed.

As an Amazon Associate I earn from qualifying purchases.

Turn on enhanced security in Edge

The setting is built into current consumer versions of Microsoft Edge. You do not need to install an extension or buy hardware. Use this path:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Open Microsoft Edge.
  2. Select Settings and more, the three-dot button at the upper-right of the browser window.
  3. Select Settings.
  4. In the left navigation, select Privacy, search, and services.
  5. Scroll to the Security section.
  6. Find Enhance your security on the web and switch it on.
  7. Choose Balanced or Strict when the mode choices appear.

Microsoft says enhanced security may already be enabled for some users as the feature continues to be developed and tested. Check the switch and the selected mode instead of assuming the default is off.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

If you are changing the setting on a shared computer, make the choice in the Edge profile that you actually use. A setting or exception in one profile may not represent another profile. After changing the mode, close and reopen a page that was already open so you test the new behavior rather than a previously loaded document.

Which mode should you choose?

The choice is mainly between broader protection and easier compatibility. Both modes use Edge’s enhanced-security mechanisms; they differ in when Edge applies them automatically.

Mode Sites protected by default Compatibility expectation Best fit
Balanced Unfamiliar or infrequently visited sites. Frequently visited sites are generally left out. Microsoft says most sites should work as expected. Most people, especially if you want extra protection without routinely adjusting site settings.
Strict All sites you visit by default. Parts of sites may not work as expected, so exceptions or other configuration can be necessary. People who prioritize maximum coverage and are willing to troubleshoot individual sites.

Think of Balanced as an adaptive default and Strict as an explicit all-sites policy. Neither mode is a website reputation service, and neither guarantees that a page is safe. The practical question is how often you are willing to trade compatibility for additional browser hardening.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Balanced: the practical default

Balanced is Microsoft’s recommended setting. Edge uses signals such as whether a site is unfamiliar or visited infrequently to decide where to apply the added protections. Sites you use regularly are normally excluded from the extra treatment, which reduces the chance that work, banking, media, or other daily tasks will be interrupted.

Balanced is not an allow-list that you create manually. Edge adapts as your browsing habits change. A site that is new today may be treated differently after you visit it repeatedly, while a rarely used site can receive the stronger protections when you return to it.

This adaptive behavior means the result can differ between two people visiting the same domain, or between a site you use daily and a specialist portal you open once a month. If a familiar site suddenly shows an Added security indicator, use that indicator and the Security settings to see which treatment is active rather than assuming the browser has malfunctioned.

Strict: coverage on every site

Strict applies enhanced security to all visited sites by default. That gives the setting its broadest coverage, but the same browser changes can expose compatibility problems on sites that depend on particular JavaScript behavior or other assumptions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft states that Strict is not recommended for most users because completing daily tasks may require some configuration. Choose it when the broader protection is more important to you than a hands-off browsing experience, and expect to maintain exceptions for sites that need them.

Strict can be appropriate for a test profile, a security-focused workflow, or a user who is comfortable checking site behavior and maintaining a short exception list. It is less convenient when you rely on many business portals, legacy applications, or complex sign-in and checkout flows and cannot test them in advance.

What enhanced security changes

Microsoft describes enhanced security as a defense against memory-related vulnerabilities in the browser. It changes how Edge handles certain code and activates additional operating-system protections.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
  • Just-in-time (JIT) JavaScript compilation is disabled. JIT compilation can make scripts run faster by compiling them while you browse. Disabling it removes a class of runtime behavior that an exploit might try to abuse.
  • Hardware-enforced Stack Protection is enabled where supported. This operating-system protection is designed to help detect or block certain attempts to corrupt control-flow data held on a thread’s stack.
  • Arbitrary Code Guard (ACG) is enabled. ACG restricts how executable code can be created or modified in protected processes, making some code-injection techniques harder.

These controls are intended to make exploitation more difficult; they are not a malware scanner and do not replace updates, account security, or safe browsing habits. A page can still contain phishing content, malicious downloads, or an ordinary coding error while enhanced security is enabled.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Edge combines these protections with its site-based behavior. In Balanced mode, the browser automatically uses stricter settings on unfamiliar sites and adjusts over time based on your browsing patterns. The feature is therefore a browser security control, not a promise that every page is harmless or that every exploit is prevented.

Before choosing Strict, check your important sites

Strict is easiest to adopt when you inventory the sites that matter most. Make a short list of services used for work, school, banking, healthcare, travel, file storage, video meetings, payments, and administration. Open each one after selecting Strict and test the tasks you actually perform, not just whether the home page appears.

  • Sign in and complete any multi-factor authentication prompt.
  • Move through the pages or records you use regularly.
  • Submit a form and confirm that validation and confirmation messages appear.
  • Upload and download a small test file where that is part of the normal workflow.
  • Check video, audio, printing, pop-up dialogs, and payment or checkout steps when relevant.

Keep a note of the exact domain when a task fails. A service may use separate domains for login, content, payment, or file delivery, so an exception for the visible home page may not cover the address that actually fails. Add the smallest necessary exception only after confirming the domain is the legitimate one.

Fix a site that behaves differently

If a page stops loading correctly, a button no longer works, a sign-in flow loops, or another function changes after you enable enhanced security, first determine whether the problem is limited to that site. Microsoft provides a per-site switch so you can keep enhanced security for the rest of your browsing.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Change the setting from the address bar

  1. Open the affected site in Edge.
  2. Look beside the address bar for the Added security indicator.
  3. Select the indicator to open the site information panel.
  4. Find Use enhanced security for this site.
  5. Switch the option off if you need to restore compatibility for that site, or switch it on to force enhanced security there.

Turning enhanced security off for a site adds that site to an exception list. The exception affects that site rather than changing the mode for every other domain. If you later want the stronger protection again, use the same panel and turn the option back on.

After changing the per-site switch, reload the page and repeat the failed action. A tab that was already running code may not reflect the change until it is reloaded. If the site uses several domains, check the address bar while the failure occurs and make the exception for the domain Edge is actually protecting.

Decide whether the exception is justified

  • Confirm that the failure appeared only after enabling enhanced security and is limited to the affected domain.
  • Use the smallest exception possible: disable the feature only for the site that needs it, not globally.
  • Prefer the site’s normal, trusted address. A similarly named domain or an unexpected redirect is not a reason to weaken browser protections.
  • Recheck the site after an update. A site may become compatible later, allowing you to remove the exception.

An exception restores the site’s previous security treatment; it does not repair broken website code or certify the site as safe. Keep other Edge protections enabled and follow the site owner’s normal update and security guidance.

Do not use an exception as a workaround for a suspicious warning, an unfamiliar domain, or a download you did not request. If the address changes unexpectedly during sign-in or payment, stop and verify the service through a known bookmark or the organization’s published address.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Manage all enhanced-security exceptions

For a central list of sites, open Settings and more > Settings > Privacy, search, and services > Security, then select Site preferences for enhanced security.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

The exception controls let you specify sites where enhanced security should always apply or never apply. Use the list when you need to review several exceptions, remove an old entry, or make a deliberate policy for a site instead of waiting until the site is open.

Review this list after changing modes. A site that is set to Always apply enhanced security remains protected even when Balanced would otherwise treat it as familiar. A site in Never apply enhanced security can remain excluded after you switch from Strict to Balanced, so an old entry may explain why its behavior differs from other sites.

Always apply versus never apply

  • Always apply enhanced security: Use this for a site that you want protected even when your general mode is Balanced and Edge would otherwise treat the site as familiar.
  • Never apply enhanced security: Use this only for a site that cannot complete a necessary task while the feature is active. This is the higher-risk choice because that domain loses the added protections.

Keep the list short and understandable. Record why a site was placed in the never-apply list, particularly on a shared or managed computer, and remove entries that are no longer needed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If several people use the computer, explain that a never-apply entry weakens enhanced security for that domain for the profile where it is configured. On a managed device, follow the organization’s process for documenting or requesting an exception instead of creating an untracked local change.

Enhanced security is separate from other Edge protections

Turning on Enhance your security on the web does not replace Edge’s other security and privacy controls.

Tracking prevention

Tracking prevention controls trackers and the data they can collect as you move between sites. Its purpose is privacy and cross-site tracking reduction. Enhanced security instead changes browser execution and operating-system defenses to reduce exposure to memory-related attacks. You can use both settings.

Microsoft Defender SmartScreen

SmartScreen helps identify malicious downloads and sites. Enhanced security does not take over that job, and SmartScreen does not provide the same JIT, Stack Protection, or ACG changes. Treat them as separate layers rather than alternatives.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keeping these layers enabled is generally more useful than trying to make one setting do every job: enhanced security hardens browser execution, tracking prevention limits cross-site tracking, and SmartScreen helps identify known malicious sites or downloads. None of them eliminates the need to install Edge and operating-system updates or to check addresses before entering credentials.

What to check after enabling the feature

A short verification pass helps you catch a mode or exception mistake before it affects an important task.

  1. Return to Settings > Privacy, search, and services > Security and confirm that Enhance your security on the web is on.
  2. Confirm the selected mode is the one you intended: Balanced or Strict.
  3. Open a few sites you use for essential work and verify sign-in, navigation, forms, file uploads, video, and payments.
  4. If one site fails, use its Added security indicator rather than turning the feature off everywhere.
  5. Review Site preferences for enhanced security to make sure an old exception is not forcing the wrong behavior.

Test both a frequently visited site and an unfamiliar or infrequently visited site if you are using Balanced. That gives you a practical sense of how Edge is applying the adaptive behavior. On Strict, test at least one complex site because broad coverage is also where compatibility differences are most likely to appear.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting common problems

The switch is already on

That is not an error. Microsoft says some Edge installations may have enhanced security enabled already as the feature is developed and tested. Check the mode selection and the exception list; you may only need to change Balanced to Strict, or vice versa.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A site works in Balanced but not Strict

This is an expected trade-off. Strict protects all sites by default and can affect site functionality. Keep Strict and add a targeted exception only if the site is important and trusted, or switch to Balanced if repeatedly managing exceptions is not worthwhile.

A site still fails after you turn enhanced security off for it

Verify that the exception was saved for the exact site address and that the browser is not being redirected to a different domain during sign-in or checkout. Check the central site-preferences list for a conflicting entry. If the problem persists, it may be unrelated to enhanced security; test the site’s own supported browser requirements and its current status.

The option or labels are missing

Edge labels can change as updates roll out, and organizations can control security settings through policy. Make sure you are looking under Privacy, search, and services > Security. On a work or school device, a missing control or a setting that immediately reverts may be managed by your organization; contact the administrator rather than repeatedly changing it.

You are unsure which mode is active

Do not infer the mode from a single site’s behavior. Open the Security section and read the selected option. Balanced and Strict can produce different results depending on whether Edge considers a site familiar, so the address-bar indicator and the exception list are the reliable checks for a particular domain.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The site fails only during one workflow

Record the exact step that fails, such as opening a report, uploading an attachment, or completing payment. A page that loads successfully can still rely on a script or component later in the workflow. Test the same step after reloading and after checking the address-bar indicator. If an exception fixes only that workflow, keep it limited to the verified domain and remove it when the service no longer needs it.

A sensible setup for most people

For a personal computer, start with Balanced, leave the feature enabled, and use per-site exceptions only when a trusted site has a concrete compatibility problem. This follows Microsoft’s recommendation while still protecting unfamiliar sites more aggressively.

Consider Strict when you understand that every site will receive the added protections and you are prepared to handle occasional breakage. Before selecting it on a computer used for work, confirm that critical business services support Edge’s enhanced-security behavior and that you can change exceptions without violating an organizational policy.

Whichever mode you choose, revisit the decision after major browser or site changes. A site that needed a never-apply exception can become compatible after its code is updated, while a newly adopted service may deserve an always-apply exception in Balanced. A short, current exception list is easier to audit and safer than disabling the feature globally.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Important limitations and version considerations

The settings path and labels above reflect Microsoft’s current consumer instructions. Microsoft’s support material does not specify one Edge version number or a platform-by-platform compatibility matrix for this feature. Edge updates, operating-system support, and organization policies can change the exact wording or availability.

If the screen in your installation differs, first look for the same concepts—Privacy, search, and services, Security, Enhance your security on the web, and Site preferences for enhanced security. On a managed device, policy may determine whether the feature can be changed. Avoid assuming that a different label means the protection is absent; verify the current switch and mode in Edge’s Security settings.

Because Microsoft does not provide one universal platform matrix for this control, do not assume that behavior observed on one computer will be identical on another. Compare the Edge settings, operating-system support, profile, and organization policy on the device where the issue occurs.

Frequently Asked Questions

Where is Edge’s enhanced security setting?

Open Settings and more > Settings > Privacy, search, and services > Security. Turn on Enhance your security on the web, then choose Balanced or Strict.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which mode does Microsoft recommend?

Balanced is Microsoft’s recommended choice for most users. It adds protection to unfamiliar or infrequently visited sites while aiming to keep most sites working normally.

What is the difference between Balanced and Strict?

Balanced applies enhanced security selectively and usually leaves frequently visited sites out. Strict applies it to all sites by default, which increases coverage but can cause parts of websites to stop working.

How do I fix one site after enabling enhanced security?

Open the site, select the Added security indicator beside the address bar, and switch Use enhanced security for this site off. That creates a site-specific exception without disabling the feature everywhere.

Where can I review or remove exceptions?

Go to Settings and more > Settings > Privacy, search, and services > Security > Site preferences for enhanced security. Review the Always apply and Never apply lists.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does enhanced security replace SmartScreen or tracking prevention?

No. Enhanced security hardens browser execution against memory-related vulnerabilities. SmartScreen helps identify malicious sites and downloads, while tracking prevention limits trackers. They are separate controls.

Why is the setting already enabled?

Microsoft says some Edge installations may have enhanced security turned on as the feature is developed and tested. Check the selected mode and exceptions rather than assuming anything is wrong.

Should I use Strict on a work computer?

Only if your organization allows it and you can test critical services. Strict may require site-specific configuration, so managed-device policies and business application requirements should guide the choice.

The Bottom Line

Open Settings and more > Settings > Privacy, search, and services > Security, turn on Enhance your security on the web, and start with Balanced unless you have a reason to accept more compatibility work. Use Strict for all-site coverage, and handle any breakage with a narrowly scoped Added security exception instead of switching protection off globally.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

browser securityEnhanced SecurityMicrosoft Edgeprivacy settingsTroubleshooting

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.