On a Windows 11 home PC, leave Microsoft Defender Antivirus, reputation-based protection, and Microsoft Defender Firewall enabled; keep Windows and apps updated; and back up important files. These settings reduce exposure to common threats, but they cannot guarantee a device will stay malware-free. Windows 10 users should also note that standard support ended on October 14, 2025: changing security settings does not replace missing security fixes.
How do I change Windows Security settings?
Open the Windows Security app from the Start menu. Its protection areas are grouped by task, so you can check the main settings without installing another security app. The labels below are for Windows 11; some Windows 10 screens may differ.
As an Amazon Associate I earn from qualifying purchases.
- Open Start, type Windows Security, and open the app.
- Select the protection area named in the relevant section below.
- Review the setting and leave recommended protections enabled unless you have a specific, informed reason to change them.
Which Windows security settings should I leave on?
Microsoft Defender Antivirus
Go to Virus & threat protection > Manage settings. Keep Real-time protection, Cloud-delivered protection, and Tamper protection on. Microsoft says real-time protection continuously monitors the device for threats, while tamper protection helps prevent malicious apps from changing critical security settings. See Microsoft’s Windows Security guidance.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Security intelligence updates
Defender security intelligence is downloaded through Windows Update. To check manually, go to Virus & threat protection > Protection updates > Check for updates. Current intelligence helps Defender recognize newly identified threats; it complements rather than replaces Windows and app updates. Microsoft’s Windows Security guidance describes the update path.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Do not add Defender exclusions casually
An exclusion tells Defender not to check a selected file, folder, file type, or process during real-time scanning. That can leave the excluded item outside a key layer of protection. Avoid exclusions as a routine way to address slowdowns or warnings; use one only when you understand the risk and trust the item. Microsoft explains how exclusions affect scanning.
How do I protect against unsafe apps and downloads?
Keep reputation-based protection enabled
In Windows Security, open App & browser control and review Reputation-based protection. Leave SmartScreen and potentially unwanted app blocking enabled. These controls help check apps, websites, files, and downloads for unsafe or unwanted behavior. They are an additional layer, not a reason to ignore warnings or download software from unfamiliar sources. See Microsoft’s App & browser control guidance and its guidance on potentially unwanted apps.
Smart App Control availability is limited
Smart App Control is a Windows 11 feature, not a Windows 10 setting. It also is not available to turn on in every Windows 11 installation: Microsoft says it can be enabled only on qualifying new installs. A device that received Smart App Control through an update may need a Windows reset or reinstall before the feature can be turned on. Check Microsoft’s Smart App Control requirements rather than assuming the option will appear.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Leave exploit protection at its defaults
Microsoft says Windows is already running exploit protection settings it considers best for most people. Most home users should not change advanced, program-specific mitigations without a concrete need; an unsuitable change can affect how an app runs. Details are in Microsoft’s App & browser control documentation.
How should I set the firewall and network profile?
Open Firewall & network protection in Windows Security and keep Microsoft Defender Firewall on for the network profiles you use. Microsoft describes its role this way: “Windows Firewall helps protect your device by filtering network traffic and blocking unauthorized access.” See Firewall and network protection in the Windows Security app.
Choose a profile based on the network, not simply the location of the PC:
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
- Private: Use for a trusted home network where you recognize and trust the other devices.
- Public: Use for untrusted networks, such as public Wi-Fi. Devices on a public profile are less discoverable to other devices on that network.
For a network connection, you can review its profile in Settings > Network & internet > Wi-Fi (select the connected network) or Ethernet (select the connected network), then set Network profile type. Available labels can vary by connection and Windows version.
How do I turn on ransomware protection in Windows?
In Windows Security, go to Virus & threat protection > Manage ransomware protection. The Controlled folder access option can stop untrusted apps from changing files in protected folders, including common folders such as Documents, Pictures, Videos, Music, and Desktop. Microsoft’s overview is Protect your PC from ransomware.
This protection can also block a legitimate app that needs to save files. If that happens, verify that the app is genuine and that you need it to write to a protected folder before allowing it. An allowed app can access protected files, so do not approve an app merely because Windows displayed a block notice. Test the feature with the programs you rely on and adjust only when necessary.
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Keep Windows, apps, and downloads safer
- Install Windows updates. Current patches address security issues in the operating system.
- Update browsers and other apps. Use their built-in update mechanisms or trusted vendor sources.
- Download from trusted sources. Prefer official publishers and established app stores; avoid unexpected attachments and download prompts.
- Use a modern browser. Current browsers include protections that help identify risky sites and downloads.
These practices complement Windows Security rather than replacing its protections. Microsoft’s guidance on reducing ransomware and unwanted-app risks covers ransomware protection and potentially unwanted applications.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Back up files so an infection is recoverable
A backup does not prevent malware, but a separate copy can help you recover files after ransomware, hardware failure, or accidental deletion. Windows backup options include cloud storage and external storage. Cloud backup offers access away from the PC; an external drive requires hardware and a backup routine, and should not be treated as a live substitute for protection. See Microsoft’s Windows backup overview.
Choose a method you will keep current. If you use an external drive for Windows backups, connect it for scheduled or manual backups and disconnect it when not backing up if practical. OneDrive’s file versioning and recovery features may also help restore files; Microsoft discusses those options in its ransomware guidance.
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
What Windows 10 users need to know
Microsoft ended standard Windows 10 support on October 14, 2025. Free Windows Update software updates, technical assistance, and security fixes ended on that date. Windows Security settings can still provide protections on a Windows 10 PC, but they cannot substitute for operating-system security fixes. Moving to a supported operating system is an important part of reducing risk. See Microsoft’s Windows 10 end-of-support notice.
If Windows Security reports a possible infection
Prevention settings are not a cleanup plan. If a scan or alert suggests malware is already present, follow Microsoft’s Windows Security scan and recovery instructions rather than relying on the settings in this guide alone.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
