Windows operating systems have long faced scrutiny regarding their security, primarily due to the sheer volume of malware targeting them. This vulnerability stems from the extensive global presence of PCs running Windows. As such, safeguarding your Microsoft PC has never been more crucial. Fortunately, enhancing your computer’s security can be straightforward and cost-effective. With just a few adjustments to your existing setup, you can significantly bolster your defenses without the need for additional software. For those interested in further enhancing their security, numerous free Windows applications are available to elevate both security and privacy. This guide outlines essential Windows 11 security settings that can be easily implemented to fortify your computer.
Enable virus protection
Given its popularity, Windows is a prime target for cybercriminals, making robust virus protection essential. To enable this feature, access the Windows Security app via the search bar and select Virus & threat protection from the sidebar. Here, you can review your current antivirus solution—whether it’s Microsoft Defender or a reputable third-party application. If any issues arise, follow the on-screen instructions to enhance your security. Regularly scheduling virus scans is advisable to catch potential threats promptly; specific steps will vary depending on your chosen antivirus software.
Secure your account
Within the Windows Security app, navigate to Account protection in the sidebar. Under Windows Hello, select Manage sign-in options. If your PC is equipped with a webcam or fingerprint reader, consider enabling either Facial recognition (Windows Hello) or Fingerprint recognition (Windows Hello). These options provide a more secure login method than traditional passwords. Additionally, in the Account protection section, enable Dynamic lock settings to automatically lock your device when your paired phone moves out of Bluetooth range, ensuring your data remains secure when you step away.
Fire up the firewall
A strong firewall is another critical component of your PC’s security, particularly when accessing the internet. In the Windows Security app, select Firewall & network protection from the sidebar. Ensure that the firewall is activated under each network type: Domain network, Private network, and Public network. If any are disabled, follow the prompts to enable them. To manage which applications can bypass the firewall, select Allow an app through firewall and review the list, unchecking any applications that do not require access.
Apps and browsers
Next, head to App & browser control in the Windows Security app and select Reputation-based protection. Ensure all toggles are activated for optimal protection. Then, navigate to Exploit protection > Exploit protection settings > System settings to confirm that all settings are enabled. In the Smart App Control section, this feature blocks untrusted applications, although it requires sending optional diagnostic information to Microsoft. If you opted out of this during installation, you may need to reinstall Windows to enable it.
Secure boot and drive encryption
In the Windows Security app, scroll to Device security. The Secure boot feature is vital as it prevents malware from loading during startup and is a requirement for Windows 11 installation. If you see a green tick next to Secure boot, you’re in good shape. If not, follow the instructions to enable it. Below this, the Data encryption section allows you to encrypt your device, safeguarding your files from unauthorized access. If this option is unavailable, you may have the choice to enable BitLocker drive encryption.
Check permissions
Over time, you may have inadvertently granted extensive access to your data. To review and adjust these permissions, open the Settings app and navigate to Privacy & security. Under Windows permissions, examine each section, including Speech and Search permissions, to see what access Windows has. To revoke permissions, simply disable the toggle next to the relevant setting. Below this, App permissions allows you to control which applications can access sensitive features like your location or microphone, ensuring no unwanted access occurs.
Find my device
In the unfortunate event of losing your Windows device, enabling Find my device can facilitate its recovery. Access this feature through Privacy & security in the Settings app and toggle on Find my device. To locate your device, visit Microsoft’s device location website, log in with your Microsoft account, and select the device to view its location on a map. You can also remotely lock your device to prevent unauthorized use. Note that this feature requires location settings to be enabled; if not, you will be prompted to adjust those settings.
Update your PC
While not a specific setting, regularly updating your PC is the most effective way to enhance its security. Keeping your system updated ensures you have the latest security patches to combat viruses and malware. To check for updates, open the Settings app, select Windows Update, and click Check for updates. Follow the prompts to install any available updates, which may require a restart. For third-party applications, consider using a utility like Patch My PC to streamline the update process for all installed software.
Bonus: ensure your privacy is being protected
Windows often collects substantial amounts of personal data, potentially compromising your privacy. To mitigate this, consider utilizing third-party applications designed to limit data collection. One such tool is ShutUp10++ from O&O Software, which allows you to customize privacy settings and block unnecessary data collection. Additionally, BCUninstaller can help remove bloatware, enhancing both privacy and performance. Safing Portmaster is another useful application that monitors network activity, ensuring your data remains secure. These tools can significantly enhance the privacy and security of your Windows PC.
