Windows 11 Security Guides
63 free step-by-step guides covering the whole picture: removing malware that is already there, turning on the Windows 11 protections that stop the next one, securing the accounts most attacks actually target, and locking down your router and smart home devices.
Every fix uses tools built into Windows or into the service itself. Nothing here requires buying software, and every step that could affect your files says so before you reach it.
Start Here
Match what you are seeing to the closest row, then open the guide that walks you through it. If something is happening right now, disconnect the PC from the internet before you start.
| What you are seeing | Likely cause | Start here |
|---|---|---|
| Files renamed with a strange extension and a ransom note | Ransomware, still possibly running | Ransomware response |
| You let a "support agent" onto the PC remotely | Remote access scam with full control of the machine | After a remote access scam |
| Fans loud and the PC slow with nothing open | A cryptominer using your CPU or GPU | Remove a cryptominer |
| Ads and redirects on every site | A hijacked browser or a malicious extension | Audit browser extensions |
| Malware keeps coming back after every scan | A scheduled task or service is restoring it | Clear persistence |
| Sign-in alerts from places you have never been | A reused password exposed in a breach | Check breach exposure |
| Phone suddenly lost signal and accounts are resetting | A SIM swap in progress | SIM swap response |
| A camera feed or PC reachable from the internet | Port forwarding or UPnP opening the firewall | Close open ports |
Something Is Wrong Right Now (11 guides)
Start here if an infection, a scam call, or a hijacked account has already happened. These are ordered by what to do first.
- Hit by Ransomware? What to Do First
Files encrypted and a ransom note on screen? Isolate the PC, identify the strain, check for a free decryptor, and recover safely without paying — step by step.
- What to Do After a Remote Access Scam
You let a fake support agent onto your PC with AnyDesk or TeamViewer. Here is the exact order to lock things down, find what they left behind, and protect your money.
- How to Remove a Virus or Malware from Windows 11
Pop-ups, unknown toolbars, or a PC that slowed overnight—run Windows Defender offline, cut startup malware, and clean browsers without sketchy 'cleaner' apps.
- How to Find and Remove Cryptominer Malware in Windows 11
Fans loud, CPU or GPU pinned when idle, and usage drops the moment you open Task Manager? That is a cryptominer. Here is how to find it and remove it for good.
- How to Detect and Remove a Rootkit in Windows 11
Malware that survives every scan and reinstall is hiding below Windows. Detect a rootkit or bootkit, remove it properly, and know when a clean install is the only answer.
- Remove Malware Startup Entries and Scheduled Tasks
Malware you deleted keeps coming back? It left a scheduled task, service, or Run key behind. Here is how to find and clear every persistence point in Windows 11.
- How to Spot and Remove a Fake Antivirus or Scareware
Browser locked by a virus warning? Remove fake antivirus pop-ups and tech-support scareware on Windows 11 without calling the number on screen.
- How to Remove a Browser Hijacker and Search Redirect
Browser opening a search engine you never chose, or redirecting every result? Remove the hijacker properly: extensions, shortcuts, policies, scheduled tasks, and profiles.
- How to Find and Remove Malicious Browser Extensions
An extension you installed years ago can be sold and turned malicious overnight. Audit Chrome and Edge properly, spot the warning signs, and remove what should not be there.
- How to Recover a Hacked Email Account
Locked out or seeing strange activity in your inbox? Step-by-step actions to recover a hacked email account and lock attackers out for good.
- How to Recover a Hacked Microsoft Account
Locked out of your Microsoft account, or seeing sign-ins you did not make? Recover it, remove what the attacker added, and stop losing your files and Windows PC with it.
Harden Windows 11 (10 guides)
The settings that stop the next infection doing damage. Every one of these is built into Windows and costs nothing.
- Enable Core Isolation and Memory Integrity in Windows 11
Memory Integrity blocks malicious drivers from loading into the Windows kernel. Turn it on, and fix the incompatible driver error that stops it switching on.
- Enable Controlled Folder Access in Windows 11
Controlled Folder Access stops unknown apps writing to Documents and Pictures, blocking ransomware before it encrypts. Turn it on and allow the apps you trust.
- Enable Smart App Control and SmartScreen in Windows 11
Smart App Control blocks untrusted apps before they run, and SmartScreen warns on risky downloads. Set both up, and understand why Smart App Control needs a clean install.
- Enable LSA Protection and Credential Guard in Windows 11
Stop password-stealing tools reading saved credentials out of memory. Turn on LSA protection on any Windows 11 PC, and Credential Guard on Pro and Enterprise.
- Set Up UAC and a Standard User Account in Windows 11
Running as administrator gives every program you open full control of the PC. Set UAC to always notify and move daily use to a standard account without losing anything.
- How to Enable BitLocker Drive Encryption in Windows 11
Turn on BitLocker in Windows 11 Pro to encrypt C: and external drives—save your recovery key so a lost laptop doesn't mean lost data or a leak.
- How to Enable TPM 2.0 and Secure Boot for Windows 11
PC Health Check failed for the Windows 11 upgrade? Turn on TPM 2.0, Secure Boot, and UEFI in your BIOS so the install completes on supported hardware.
- How to Fix Windows Defender Not Working or Turned Off
Windows Security shows threats need attention but Defender won't turn on—fix group policy blocks, stale services, and malware that disables antivirus.
- How to Fix Windows Firewall Blocking Apps in Windows 11
App blocked by Windows Defender Firewall, can't join a game server, or file sharing fails? Add allow rules, reset firewall defaults, and fix network profile.
- How to Disable Telemetry and Tracking in Windows 11
Cut Windows 11 telemetry and tracking—reduce diagnostic data, turn off the advertising ID, clear activity history, and lock down app permissions.
Accounts, Passwords, and Identity (9 guides)
Most compromises start with a credential, not with malware. Fix the account layer and the rest gets much harder to attack.
- How to Set Up Passkeys for Passwordless Sign-In
Passkeys cannot be phished, reused, or stolen in a breach. Set them up on Windows 11, your phone, and your main accounts — and keep a way back in if a device is lost.
- How to Set Up Two-Factor Authentication (2FA)
Stop hackers even when they have your password. A plain-English guide to turning on two-factor authentication for email, banking, and social accounts.
- How to Use a Password Manager Safely
A password manager remembers strong, unique passwords for every account so you don't have to. Here's how they work, how to start, and how to use one securely.
- How to Create Strong, Memorable Passwords
Make passwords that are hard to crack but easy to remember. Simple, practical rules for stronger logins—no random gibberish you'll forget by tomorrow.
- How to Check If Your Email Was in a Data Breach
Find out which breaches exposed your email and passwords, work out what is actually at risk, and fix it in the right order — without falling for a fake breach alert.
- How to Review and Revoke App Access and Sessions
Changing your password does not always kick an attacker out. Audit connected apps, active sessions, and app passwords on Google, Microsoft, and Apple accounts.
- How to Prevent a SIM Swap Attack on Your Phone Number
If someone ports your number, every SMS code goes to them. Lock your mobile account with a port-out PIN, move 2FA off SMS, and know what to do in the first hour.
- How to Set Up Account Recovery Options
Recovery emails, phone numbers, and backup codes are your safety net if you forget a password or get hacked. Set them up properly before you need them.
- How to Reset a Forgotten Windows Password
Locked out of Windows 11 or 10? Reset a forgotten Microsoft account or local user password the safe way — without losing data or reinstalling Windows.
Network, Router, and Smart Home (8 guides)
Your router is the one device every other device depends on, and cheap smart gadgets are the weakest thing on the network.
- How to Secure Your Home Wi-Fi Router
Lock down your home Wi-Fi in an evening: change default logins, switch to WPA3, disable WPS and remote admin, and keep neighbours and attackers off your network.
- Set Up DNS Filtering to Block Malicious Sites
A filtering DNS resolver blocks phishing, malware, and ad domains for every device before they load. Set it up on Windows 11 and on the router, with encrypted DNS.
- Set Up a Guest Network to Isolate Smart Home Devices
Cheap smart plugs and cameras sit on the same network as your PC and files. Move them to an isolated guest network or VLAN so one weak device cannot reach anything.
- How to Secure Smart Home Cameras From Hacking
Most hacked home cameras were not hacked at all — the password was reused or the feed was exposed to the internet. Lock yours down with these checks.
- Port Forwarding and UPnP: The Security Risks Explained
Port forwarding opens your home network to the internet, and UPnP lets any app do it silently. Here is what to close, what to keep, and safer ways to get remote access.
- How to Secure Remote Desktop (RDP) in Windows 11
RDP exposed to the internet is a top ransomware entry point. Lock it down with Network Level Authentication, lockout policy, and a VPN instead of port forwarding.
- How to Stay Safe on Public Wi-Fi
Cafés, airports, and hotels offer free Wi-Fi—but it isn't always safe. Simple steps to protect your passwords and data on public networks.
- How to Set Up a VPN on Windows 11 (Built-in & Third-Party)
Connect to a work VPN or install NordVPN/ExpressVPN on Windows 11 — built-in IKEv2 and L2TP setup plus when a third-party VPN app is the better fit.
Scams and Online Safety (8 guides)
The attacks that reach real people every day arrive by email, text, and phone — not through a vulnerability.
- How to Spot and Avoid Phishing Emails and Scams
Learn how to recognize phishing emails, fake login pages, and text scams before they steal your passwords or money—simple checks anyone can do in seconds.
- How to Spot Scam Text Messages (Smishing)
Fake delivery, bank, and prize texts are everywhere. Learn how to recognize scam text messages—called smishing—and what to do when one arrives.
- How to Avoid Tech-Support Scam Calls and Pop-Ups
That 'Microsoft' call or scary virus pop-up is a scam. Learn how fake tech-support tricks work and exactly what to do when one targets you.
- How to Avoid Online Shopping and Payment Scams
Fake stores, too-good-to-be-true deals, and payment tricks cost shoppers billions. Learn the warning signs and how to buy online safely.
- How to Avoid Malware From Fake Downloads
Most malware arrives because someone clicks 'download.' Learn how to spot fake downloads, risky extensions, and dodgy apps before they infect your device.
- How to Check Whether a Website Is Safe Before You Click
Not sure a site or link is genuine? Check the domain properly, read the padlock for what it really means, scan the URL, and spot the signs of a fake shop or phishing page.
- How to Stop Spam Notifications from Your Browser
Fake virus alerts and gambling ads popping up in the corner of your screen? They come from browser notification permissions. Here is how to revoke them and block them for good.
- How to Protect Your Privacy on Social Media
Your social profiles reveal more than you think. Practical privacy settings and habits to keep your personal info away from strangers and scammers.
Backups and Safe Disposal (5 guides)
The layer that decides whether an incident is an inconvenience or a disaster — plus how to hand a PC on without handing over your data.
- How to Set Up Automatic Backups So You Never Lose Files
Hard drives fail, laptops get stolen, ransomware strikes. Set up automatic backups once and protect your files, photos, and documents for good.
- How to Back Up Your PC with Windows Backup & File History
Set up File History and Windows Backup on Windows 11 so a deleted file or dead drive can't wipe out your photos, documents, and settings. Step-by-step.
- How to Create and Use a System Restore Point in Windows 11
Turn on System Protection, create a restore point before driver or registry changes, and roll Windows 11 back without wiping your files.
- How to Organize and Back Up Your Important Documents
Scattered files, lost passwords, and no plan for emergencies? A simple system to organize, protect, and back up the documents that matter most.
- How to Wipe a PC Before Selling or Donating It
Factory reset and securely erase a Windows 11 PC before you sell or donate it—remove your Microsoft account, BitLocker keys, and personal files for good.
More Security Guides (12 guides)
Everything else in the security and privacy category, newest first.
- Fix "PIN Is Not Available" in Windows 11
- Fix Microsoft Account Sign-In Problems in Windows 11
- How to Fix the BitLocker Recovery Key Loop in Windows 11
- Fix "You Need Permission to Perform This Action"
- How to Find Your Saved Wi-Fi Password in Windows 11
- How to Change DNS Servers in Windows 11
- How to Fix Windows Hello (Face/Fingerprint) Not Working
- How to Check SSD or Hard Drive Health in Windows 11
- How to Debloat Windows 11 and Remove Bloatware
- How to Clear Your Browser Cache and Cookies
- How to Keep Your Devices Updated Safely
- Windows 10 End of Support: What to Do Now
The Order That Actually Works
Security advice tends to arrive as a long undifferentiated list. It is not equally weighted. If you do four things and stop, do these: unique passwords in a password manager, two-factor authentication on your email, a backup that is not always connected, and a standard user account for daily use. Those four remove the routes behind the overwhelming majority of real incidents.
Cleanup comes before hardening. Turning on protections while something is already running on the machine gives you a false sense of the state it is in — and some settings will not stick until the infection is gone. Work through removal first, verify with an offline scan, then harden.
Assume account compromise travels with device compromise. If malware ran on the PC, change passwords from a different device and revoke active sessions afterwards, because a stolen session token keeps working long after the password changes.
Finally, treat backups as the layer that decides how bad an incident is. Every other control on this page reduces the chance of something happening. A backup that is offline, tested, and recent is what makes it survivable when one of them fails.
Common Questions
- What should I do first if I think my PC is infected?
- Disconnect it from the internet, then run a full scan followed by a Microsoft Defender Offline scan. The offline scan matters most, because it runs before Windows loads and catches things that hide from a live scan. Only after that should you change passwords, and do it from a different device.
- Is Microsoft Defender good enough on its own?
- For most home users, yes — provided real-time protection, cloud-delivered protection, and tamper protection are all on. The bigger wins are the settings people leave off: Memory Integrity, Controlled Folder Access, potentially unwanted app blocking, and a standard user account.
- Which security setting gives the most protection for the least effort?
- Unique passwords in a password manager with two-factor authentication on your email account. Most compromises begin with a reused credential rather than with malware, so fixing the account layer removes the most common route in.
- Do I need to pay for antivirus?
- No. Windows Security is competitive with paid products in independent testing, and paid suites often disable Windows own layers while adding upsells. Spend the money on a backup drive instead.
- How do I know whether a warning is real or a scam?
- Real Windows warnings never include a phone number, never appear inside a browser tab, and never use countdown timers or sirens. Windows Security lives in Settings, not in a pop-up. If a number is shown, it is a scam.
- Should I use a VPN for security?
- A VPN protects traffic on untrusted networks and hides your IP address from sites you visit. It does not stop malware, phishing, or account takeover. It is a useful tool for a specific problem, not a general security product.
- How often should I change my passwords?
- Only when there is a reason: a breach notification, a suspected compromise, or a password you know is reused. Forced rotation on a schedule tends to produce weaker, more predictable passwords. Unique and long beats frequently changed.
- Is two-factor authentication by SMS worth using?
- It is much better than no second factor and stops automated credential-stuffing attacks. It is the weakest common option because a SIM swap defeats it, so use an authenticator app or a passkey on email, banking, and anything holding money.
- What is a passkey and should I use one?
- A passkey replaces a password with a private key held on your device and unlocked by your face, fingerprint, or PIN. It cannot be phished, reused, or leaked in a breach because the site never stores anything reusable. Use them wherever they are offered.
- Does a factory reset remove all malware?
- Usually, but not always. Reset This PC preserves the EFI and recovery partitions, so a bootkit can survive it. If you suspect something below Windows, do a clean install and delete every partition on the disk first.
- Are my smart home devices a real security risk?
- Yes, mainly because they stop receiving updates quickly and sit on the same network as your PCs. Putting them on an isolated guest network means a compromised device cannot reach your computers or your files.
- How do I know if my details are already in a breach?
- Check your email address at haveibeenpwned.com, and use the password health check built into your browser or password manager. Register for future notifications rather than checking manually — you will usually hear before the breached company tells you.