Loading
You do not need to be a computer expert to keep your Windows 11 PC safe. This checklist covers the most important security settings, written in plain language. Most items take less than 2 minutes.
Get Help Securing Your PCWindows updates fix security holes that hackers actively exploit. Keeping your PC updated is the single most important thing you can do.
Why it matters: Windows 11 installs updates automatically by default, but some users turn this off because updates require restarts. Leave it on. The risk of being hacked through an unpatched vulnerability is far greater than the inconvenience of a restart.
Windows 11 includes Microsoft Defender, a built-in antivirus. It is good enough for most home users and you do not need to pay for a third-party antivirus.
Ransomware encrypts your files and demands payment to unlock them. Windows has a built-in feature called Controlled Folder Access that blocks unknown apps from changing files in your Documents, Pictures, and Desktop folders.
If a legitimate app gets blocked, you can add it to the allowed list from the same settings page.
Anyone with physical access to your PC can access your files if there is no password set.
A 6-digit PIN on Windows 11 is more secure than it sounds. It is tied to your specific device and locks out after a few failed attempts. Passkeys take security a step further by eliminating passwords entirely.
If your laptop is lost or stolen, this feature helps you locate it. It requires you to be signed in with a Microsoft account.
Apps can request access to your camera, microphone, location, and files. Review what you have allowed and revoke anything unnecessary.
If someone guesses or steals your Microsoft account password, two-factor authentication stops them from logging in.
Using the same password on multiple websites is the most common way people get hacked. A password manager creates and stores unique passwords for every site.
Bitwarden
Free, open source
Edge Password Manager
Built into Microsoft Edge
Microsoft Authenticator
Manages passwords and passkeys
Most hacking starts with a phishing email. Before clicking any link in an email, check these warning signs.
If your PC breaks, gets stolen, or is hit by ransomware, your files are gone unless you have a backup. Use both methods for maximum protection.
The best backup strategy uses both: OneDrive for everyday protection, and an external drive stored somewhere safe for worst-case scenarios. If ransomware encrypts your files, it can also encrypt your cloud sync, but an offline external drive is safe.
Remove programs you do not use. Unused software can have unpatched vulnerabilities that hackers exploit.
Your web browser is your main exposure point to the internet. Ensure it is always up to date.
Microsoft Edge
Updates automatically with Windows Update
Google Chrome
Three dots > Help > About Google Chrome
Mozilla Firefox
Menu > Help > About Firefox
| Setting | Where | Time |
|---|---|---|
| Windows Update | Settings > Windows Update | 2 min |
| Windows Security check | Windows Security app | 1 min |
| Ransomware protection | Windows Security > Virus & threat protection | 2 min |
| Lock screen PIN / passkey | Settings > Accounts > Sign-in options / Passkeys | 2 min |
| Find My Device | Settings > Privacy & security | 1 min |
| App permissions | Settings > Privacy & security | 5 min |
| Microsoft account 2FA | account.microsoft.com/security | 5 min |
| Password manager | Install Bitwarden or use Edge | 10 min |
| OneDrive backup | Settings > Accounts > Windows backup | 3 min |
| Remove unused apps | Settings > Apps > Installed apps | 5 min |
If any of these steps feel overwhelming or you want a professional to review your setup, our team can help. We offer on-demand support and full computer security checkups for home users.
One email per month with our best articles. No spam.