How to Keep Windows Secure with Microsoft Defender

Windows includes Microsoft Defender Antivirus and a firewall. Used together with regular updates and careful habits, they protect most home users well. This checklist explains what to turn on and how to check that protection is working.

Check Virus and threat protection

Open Settings, then Privacy and security, then Windows Security.
Select Virus and threat protection. Check that real-time protection is on.
Run a quick scan from this page once a week, or let scheduled scans run.

Check the firewall

In Windows Security, select Firewall and network protection. Make sure the firewall is on for the domain, private and public networks. Public Wi-Fi networks should always use the Public profile, which blocks more connections.

Turn on Smart App Control and tamper protection

Smart App Control blocks untrusted apps, and tamper protection stops malware from turning off the security features. Both are in the Virus and threat protection settings. If Smart App Control is off, it may be because it was turned off after an update. You can turn it on again in the same area.

Keep Windows updated

Install security updates as soon as they arrive. The guide on how to update your computer safely explains the steps.

Protect your account

Use a Microsoft account with a strong password and two-factor authentication. Consider a local account with a PIN if you do not need cloud features. Avoid sharing your account with others.

Check controlled folder access

Controlled folder access protects documents from ransomware. You can turn it on in Ransomware protection in Windows Security, then add trusted apps that need to change your files.

Watch out for extra antivirus products

Installing a second antivirus program can conflict with Defender. Use one main security product. If you use a paid product, check that it is current and replaces Defender correctly.

Frequently asked questions

Is Microsoft Defender enough for most people?

For most home users, yes, when combined with updates, strong passwords and careful browsing.

What should I do if a scan finds a threat?

Follow the recommended action. Read what malware is and how to remove it if the threat remains.

Keep an eye on the security dashboard

Windows Security shows a status for each area: virus protection, firewall, device performance and account protection. A green check means no action is needed, and a yellow or red warning explains what to fix. Visit the page after major updates, because new features sometimes turn off protections by default.

Use standard accounts for daily work

Running Windows with a standard account rather than an administrator account limits what malware can change without asking. Use an administrator account only when you install software or change system settings, and approve each prompt carefully.