Windows 11 includes several built-in security features designed to protect users from threats:
- Microsoft Defender: A built-in antivirus program that provides real-time protection against threats and can perform various types of system scans.
- Firewall & Network Protection: Monitors incoming and outgoing traffic to prevent unauthorized access, customizable for specific applications.
- App & Browser Control: Utilizes SmartScreen to check URLs and downloads against a database of known threats, blocking harmful installations.
- Core Isolation: Adds protection for sensitive processes using virtualization-based security features like Memory integrity.
- Ransomware Protection: Shields files and folders from unauthorized access and provides recovery options through Controlled folder access.
- BitLocker Encryption: An encryption tool available on Windows 11 Pro, Enterprise, and Education editions that secures hard disk data.
- Secure Boot: A BIOS-level feature that ensures Windows boots only with trusted software, preventing boot process hijacking.
- Dynamic Lock: Automatically locks the device when a paired Bluetooth-enabled device goes out of range.
- Windows Hello: Allows biometric authentication for logging in using facial recognition, fingerprints, or a PIN.
- User Account Control (UAC): Prompts for confirmation when actions requiring administrator-level permission are initiated, helping to prevent unauthorized changes.