Windows 11 Security Checklist for Home Users

1. Turn On Windows Update (Auto) 2 min

Windows updates fix security holes that hackers actively exploit. Keeping your PC updated is the single most important thing you can do.

• Open Settings > Windows Update
• Click Check for updates and install everything listed
• Make sure Get the latest updates as soon as they are available is turned on

2. Make Sure Windows Security Is Running 1 min

Windows 11 includes Microsoft Defender, a built-in antivirus. It is good enough for most home users and you do not need to pay for a third-party antivirus.

• Open Windows Security (search for it in Start)
• Check for green checkmarks next to Virus & threat protection
• Check for green checkmarks next to Firewall & network protection
• Check for green checkmarks next to Device security

3. Turn On Ransomware Protection 2 min

Ransomware encrypts your files and demands payment to unlock them. Windows has a built-in feature called Controlled Folder Access that blocks unknown apps from changing files in your Documents, Pictures, and Desktop folders.

• Open Windows Security > Virus & threat protection
• Scroll to Ransomware protection and click Manage ransomware protection
• Turn on Controlled folder access

4. Use a Strong Lock Screen PIN or Password 2 min

Anyone with physical access to your PC can access your files if there is no password set.

• Open Settings > Accounts > Sign-in options
• Set up Windows Hello PIN (minimum 6 digits, preferably longer)
• Set up Windows Hello fingerprint or facial recognition if your PC supports it
• Consider setting up a passkey at Settings > Accounts > Passkeys for phishing-resistant sign-in

5. Turn On Find My Device 1 min

If your laptop is lost or stolen, this feature helps you locate it. It requires you to be signed in with a Microsoft account.

• Open Settings > Privacy & security > Find my device
• Turn it On

6. Review App Permissions 5 min

Apps can request access to your camera, microphone, location, and files. Review what you have allowed and revoke anything unnecessary.

• Open Settings > Privacy & security
• Scroll down to App permissions
• Click through Camera, Microphone, Location, and other categories
• Turn off access for apps that should not have it (e.g., a game does not need your microphone)

7. Turn On Two-Factor Authentication for Your Microsoft Account 5 min

If someone guesses or steals your Microsoft account password, two-factor authentication stops them from logging in.

• Go to account.microsoft.com/security
• Click Advanced security options
• Under Two-step verification, click Turn on
• Follow the setup steps using the Microsoft Authenticator app on your phone

8. Use a Password Manager 10 min

Using the same password on multiple websites is the most common way people get hacked. A password manager creates and stores unique passwords for every site.

• Install a password manager
• Let it generate random passwords for your accounts
• Change your most important passwords first: email, banking, social media

9. Be Careful with Email Links and Attachments

Most hacking starts with a phishing email. Before clicking any link in an email, check these warning signs.

10. Back Up Your Files 3 min

If your PC breaks, gets stolen, or is hit by ransomware, your files are gone unless you have a backup. Use both methods for maximum protection.

11. Review Installed Programs 5 min

Remove programs you do not use. Unused software can have unpatched vulnerabilities that hackers exploit.

• Open Settings > Apps > Installed apps
• Sort by Install date
• Remove anything you do not recognise or no longer use

12. Keep Your Browser Updated

Your web browser is your main exposure point to the internet. Ensure it is always up to date.