Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
Redmond desk4 min

Put Windows Boot Manager First: Set Boot Order Without Weakening Security

Set Windows Boot Manager first for a typical Windows UEFI setup. Learn the firmware route, what boot order changes do—and why it is separate from Secure Boot.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a typical Windows PC installed in UEFI mode, set Windows Boot Manager as the first firmware boot entry. This tells the firmware which operating-system loader to try first; it does not by itself make startup measurably faster or improve Secure Boot protection. Change only the intended boot entry, keep security settings enabled unless compatibility requires otherwise, and follow your PC maker’s instructions for its firmware menus.

What boot order controls

Boot order is the firmware’s preference for startup targets, such as an operating-system loader, a USB device, or another operating system. With UEFI, the firmware uses boot variables to choose an EFI application to launch. For a standard Windows UEFI installation, Windows Boot Manager points to \EFI\Microsoft\Boot\Bootmgfw.efi. Microsoft recommends that Windows Boot Manager be first in the UEFI firmware display order: Microsoft Learn: BCD System Store Settings for UEFI.

As an Amazon Associate I earn from qualifying purchases.

Should Windows Boot Manager be first in boot order?

Usually, yes, if Windows is the operating system you want to start by default and the PC uses UEFI. Making it first avoids trying other listed targets before the usual Windows loader. It does not mean removing other entries: a USB installer, recovery device, or second operating system can remain available for when you deliberately need it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If the PC has multiple operating systems, decide which one should start automatically and retain the corresponding loader entry. Check the selected default before saving changes. UEFI and legacy/CSM entries may both appear on systems that support both modes; choose the entry that matches the intended installation rather than changing modes as part of an ordinary boot-order adjustment.

#1 Best Overall
SANDISK 128GB Ultra Flair, USB-A Flash Drive, Up to 150MB/s Read Speeds
  • High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
  • Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
  • Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
  • Sleek, durable metal casing
  • Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]

How do I change the boot order in BIOS or UEFI?

Firmware screens and labels differ by manufacturer and model, so there is no universal key sequence or menu path. Use the device maker’s instructions for entering firmware and changing boot priority. On supported devices, Windows also provides a route into firmware settings:

  1. Save your work and open Windows recovery options by holding Shift while selecting Restart.
  2. Choose Troubleshoot, then Advanced options, then UEFI Firmware Settings, and select Restart. The option is available only on supported devices.
  3. In firmware setup, open the boot or startup settings. Note the current order, then move Windows Boot Manager to the first position without changing unrelated options.
  4. Save and exit using the firmware’s on-screen instructions, then let the PC restart.

Microsoft documents the Windows recovery route and advises consulting the manufacturer for model-specific Secure Boot procedures: Microsoft Learn: Disabling Secure Boot.

Microsoft also documents a BCD command for setting Windows Boot Manager first: bcdedit /set {fwbootmgr} displayorder {bootmgr} /addfirst. That is technical deployment guidance, not the simplest method for most home users; use the firmware interface and the PC maker’s instructions unless you have a specific reason to manage boot entries through BCD.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does changing boot order make my PC start faster?

It can prevent the firmware from trying an unintended target before the operating system you normally use, but Microsoft’s boot-order guidance does not publish a measured startup-time improvement. The actual effect depends on the PC and its configuration, so there is no supported universal seconds-or-percentage gain to promise. Boot order selects what the firmware tries; it is not a general Windows performance setting.

Rank #2
CORRSQ 30-in-1 Bootable USB Drive
  • 1. COMPATIBLE WITH WINDOWS 11, 10, 8.1 & 7 Designed for compatible 64-bit PCs and laptops that support USB booting. Works with Windows 11, Windows 10, Windows 8.1 and Windows 7 installation and recovery options.
  • 2. INSTALL, REINSTALL & REPAIR Provides access to installation and recovery options for startup failures, boot errors, system crashes, failed updates, system repair and reinstallation. Results depend on the condition of the computer and the cause of the problem.
  • 3. READY-TO-USE BOOTABLE USB Reusable installation and recovery media that helps eliminate the need to download large system files or create bootable media yourself. Insert the USB drive, open the computer’s boot menu and select the appropriate installation or recovery option.
  • 4. HELP KEEP OLDER PCS USEFUL Refresh, reinstall or maintain a compatible older computer before deciding whether replacement is necessary. Suitable for home computers, office workstations, PC enthusiasts and technicians who regularly work with supported systems.
  • 5. IMPORTANT COMPATIBILITY & LICENSE INFORMATION Supports compatible 64-bit computers with UEFI or Legacy BIOS USB booting. No Windows license, activation key or product key is included. Activation may require an existing digital license or a separately purchased valid product key. Back up important files before installation or repair.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Should Secure Boot be enabled?

For a Windows installation that supports it, leave Secure Boot enabled unless you have a specific compatibility need. Secure Boot checks signatures of boot software before it is trusted. Windows Trusted Boot continues integrity checks as Windows starts. These are protections, not consequences of placing Windows Boot Manager first: changing boot order alone does not turn them on or off. Microsoft describes the UEFI-to-Windows protection chain in Secure Boot and Trusted Boot.

Some hardware or operating systems may not work with Secure Boot enabled. If you encounter a genuine compatibility problem, check the manufacturer’s guidance and consider whether disabling the setting is necessary before changing it. Changing the boot target and disabling Secure Boot are separate actions; do not alter both simply because they appear near each other in firmware setup.

What if the PC starts the wrong device or will not boot?

  • If Windows starts another operating system or enters a recovery environment, return to firmware setup and check which boot entry is first. Restore the intended loader as the default while preserving entries you still need.
  • If you changed an entry and Windows no longer starts, return to firmware and restore the original order you noted. Avoid changing several boot or security settings at once, so you can identify which change caused the problem.
  • If a USB installer or recovery device is meant to start once, use the PC maker’s documented one-time boot menu if available rather than leaving removable media permanently ahead of the everyday operating system.
  • If you cannot reach firmware setup or cannot identify the correct entry, consult the PC manufacturer’s instructions for your exact model.

Secure Boot certificate transition: what Windows users need to know

Microsoft’s OEM guidance said that older 2011 Secure Boot certificates would begin expiring in June 2026. That date has passed. The guidance concerns certificate deployment and management, not a universal instruction for every PC owner to change boot order or disable Secure Boot. For current status and any action that applies to a specific device, consult Microsoft’s Windows Secure Boot Key Creation and Management Guidance and the PC manufacturer’s support information. The applicable process can depend on the device and Windows configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 1
SANDISK 128GB Ultra Flair, USB-A Flash Drive, Up to 150MB/s Read Speeds
SANDISK 128GB Ultra Flair, USB-A Flash Drive, Up to 150MB/s Read Speeds
Transfer to drive up to 15 times faster than standard USB 2.0 drives(1); Sleek, durable metal casing
$25.96
Bestseller No. 2

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.