Best Security Settings Recommendations in Windows 11

Windows 11 is the latest operating system from Microsoft that offers many new features and performance improvements. However, in addition to that, Windows 11 also has some security settings that can help you protect your data and privacy from online threats. In this article, we will discuss the best security settings in Windows 11 that you should know and enable.

1] Make sure your Windows 11 is always up to date

One important step to keeping your operating system secure is to make sure that you always install the latest updates available. Windows 11 updates not only bring new features and bug fixes but also fix security holes that hackers or malware might exploit. To check for and install Windows 11 updates, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Windows Update section in the left menu.
• Click the Check for updates button in the right pane.
• If there is an update available, click the Download and Install button to start the process.
• Once the update has finished downloading and installing, you may need to restart your computer to complete the process.

You can also set active hours to prevent Windows 11 from automatically restarting your computer while you’re at work. To do this, click the Advanced options link under the Check for updates button, and then slide the Active hours switch to the On position. Then, choose a time range that suits your work schedule.

2] Enable Windows Hello for Passwordless Login

Windows Hello is a security feature that allows you to log into your Windows 11 computer without using a password. Instead, you can use facial recognition, fingerprint, or PIN to unlock your device. This feature is not only more convenient but also more secure, as it reduces the risk of theft or forgetting passwords. To enable Windows Hello, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Account section in the left menu.
• Click the Sign-in options option in the right pane.
• Under the Windows Hello section, select the sign-in method you want to use,such as Face recognition, Fingerprint, or PIN.
• Follow the on-screen instructions to set up your selected sign-in method.

Once you enable Windows Hello, you can log in to your Windows 11 computer quickly and easily by using the camera, fingerprint sensor, or PIN.

3] Enable BitLocker to Encrypt Your Data

BitLocker is a security feature that allows you to encrypt data on your hard disk drive or USB flash drive. By encrypting your data, you can protect it from unauthorized access if your device is lost or stolen. BitLocker can also prevent malware or hackers from altering or corrupting your data. To enable BitLocker, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Privacy & Security section in the left menu.
• Click the Encrypt device optionin the right pane.
• Under the BitLocker Encryption section, click the Manage BitLocker button to open the BitLocker control panel.
• Select the drive you want to encrypt, and then click the Turn on BitLocker button.
• Follow the on-screen instructions to complete the encryption process.

Once you enable BitLocker, you’ll need to enter a password or recovery key to access your data every time you restart your computer or insert an encrypted USB flash drive.

4] Enable Windows Firewall to Block Network Attacks

The Windows firewall is a security feature that helps prevent hackers or malicious software from accessing your computer over the internet or a network. The Windows firewall can also help you control which applications can send or receive data over the network. To enable Windows Firewall, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Privacy & Security section in the left menu.
• Click the Windows Security optionin the right pane.
• Click the Open Windows Security buttonto open the Windows Security app.
• Select the Network & Internet Protection menuon the left side.
• Click the Firewall &; network protection optionon the right side.
• Under the Firewall status section, make sure that the firewall is on for all network types, such as Domain network, Private network, and Public network.

You can also click the Allow apps through the firewall link to manage which apps can communicate through the firewall. You can add or remove apps from the list, or change settings for individual apps.

5] Enable Defender SmartScreen to Prevent Malicious Websites and Apps

Defender SmartScreen is a security feature that helps protect you from malicious websites and apps that could try to steal your personal information or damage your computer. Defender SmartScreen works by checking the reputation of websites and apps you visit or download and alerts you if anything is suspicious or unknown. To enable Defender SmartScreen, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Privacy & Security section in the left menu.
• Click the Windows Security optionin the right pane.
• Click the Open Windows Security buttonto open the Windows Security app.
• Select the App & Browser Protection menuon the left side.
• Click the App Reputation & File Control optionon the right side.
• Under the Defender SmartScreen section, make sure that all options are active, such as Check apps and files, Check Microsoft Edge, and Check Microsoft Store apps.

You can also click Defender SmartScreen’s Advanced settings link to manage other settings, such as blocking high-risk downloads or providing feedback on Defender SmartScreen alerts.

6] Enable Tamper Protection to Prevent Changes to Security Settings

Tamper Protection is a security feature that helps prevent malware or hackers from changing important security settings on your Windows 11 computer. By enabling this feature, you can ensure that built-in antivirus, real-time protection, cloud protection, and automatic updates remain on and cannot be turned off by unauthorized parties. To enable Tamper Protection, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Privacy & Security section in the left menu.
• Click the Windows Security option in the right pane.
• Click the Open Windows Security buttonto open the Windows Security app.

• Select the Virus & Threat Protection menuon the left side.
• Click the Virus & Threat Protection settings optionon the right side.
• Scroll down until you find the Tamper Protection section, then slide the switch to the On position.

Once you turn on Tamper Protection, you’ll see a lock icon next to the options protected by this feature. You can’t change this option unless you turn off Tamper Protection first.

7] Enable Folder Protection to Prevent Ransomware Access

Ransomware is a type of malware that can encrypt your data and demand a ransom to restore it. Ransomware can attack your important files, such as documents, photos, videos, or music. To prevent this, you can enable Folder Protection, a security feature that helps protect your folders from ransomware access. To enable Folder Protection, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Privacy & Security section in the left menu.
• Click the Windows Security optionin the right pane.
• Click the Open Windows Security buttonto open the Windows Security app.
• Select the Virus & Threat Protection menuon the left side.
• Click the Virus & Threat Protection settings optionon the right side.
• Scroll down until you find the Folder Protection section, then click the Manage Folder Protection button.
• Under the Protect your important folders from changes by unauthorized apps section, slide the switch to the On position.

Once you enable Folder Protection, your folders, such as Documents, Pictures, Videos, and Desktop will be protected from ransomware access. You can also add other folders that you want to protect by clicking the Add protected folder link.

8] Enable Privacy Settings to Control Data Shared with Microsoft and Other Apps

Windows 11 has several privacy settings that let you control what your data shares with Microsoft and other apps. This data can include location, camera, microphone, contacts, calendar, activity history, and more. To turn on privacy settings, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Privacy & Security section in the left menu.
• Click the General Privacy option in the right pane.
• Under the General privacy settings section, slide the switches for each option according to your preference. For example, you can turn off Let Apps use advertising IDs to provide more relevant ads based on your activity if you don’t want to see ads tailored to your interests.
• Click the Advanced Privacy Settings link to access other privacy settings, such as location, camera, microphone, contacts, calendar, activity history, and more. Here, you can manage the permissions for each app that wants to access your data.

By enabling privacy settings, you can improve your data protection and privacy in Windows 11.

9] Enable Sandbox Mode to Test Unknown Apps or Websites

Sandbox mode is a security feature that allows you to run unknown or untrusted applications or websites in a virtual environment isolated from the main operating system. That way, you can prevent malware or hackers from infecting or damaging your computer. To enable Sandbox Mode, follow these steps:

• Open the Settings app by pressing the Windows key + I on your keyboard.
• Select the Apps section in the left menu.
• Click the Apps & features optionin the right pane.
• Under the Programs and Features section, click the Turn Windows features on or off link.
• In the window that appears, find and check the Windows Sandbox Mode box, then click the OK button.
• Wait for the installation process to complete, then restart your computer.

After you enable Sandbox Mode, you can run it by typing Windows Sandbox Mode in the search box on the taskbar and then selecting the appropriate result. You’ll see a new window showing a virtual Windows 11 desktop. Here, you can install or run the app or website you want to test. When you’re done, you can close the Sandbox Mode window, and all data and changes you made will be automatically deleted.

10] Enable Microsoft Edge Security Settings to Browse the Internet Safely

Microsoft Edge is Windows 11’s built-in browser that offers several security features to keep your browsing experience safe and smooth. Some of the Microsoft Edge security features you can enable are as follows:

• Tracking prevention: This feature helps protect your privacy by blocking third-party trackers that may collect data about your browsing activity. To enable this feature, open Microsoft Edge and click the Three horizontal dots icon in the upper-right corner. Select the Settings menu, then click the Privacy, search, and Services options on the left side. Under the Tracking prevention section, slide the switch to the On position, and then select the protection level you want, such as Basic, Balanced, or Strict.
• Password protection: This feature helps protect your online accounts by alerting you if your passwords are leaked or stolen by hackers. To enable this feature, open Microsoft Edge and click the Three horizontal dots icon in the upper-right corner. Select the Settings menu, then click the Profile option on the left side. Click the Password option, and then slide the switch for the Alert if my password leaks online option to the On position.
• InPrivate Browsing Mode: This feature helps maintain your privacy by not storing your browsing history, cookies, or other data while you browse the internet. To enable this feature, open Microsoft Edge and click the Three horizontal dots icon in the upper-right corner. Select the InPrivate New window menu, or press the Ctrl + Shift + N keys on your keyboard. You will see a new window with a blue mask icon in the upper left corner. Here, you can browse the internet without leaving a trace.

By enabling Microsoft Edge security settings, you can browse the internet more safely and comfortably.

11] Enable Microsoft Account Security Settings to Protect Your Online Identity

A Microsoft account is an online account that you can use to sign in to Microsoft products and services, such as Windows 11, Office 365, OneDrive, Skype, Xbox Live, and more. A Microsoft account also helps you sync your settings and data across all the devices you use. To protect your online identity, you can enable some Microsoft Account security settings, such as the following:

• Two-step verification: This feature helps protect your account by requesting an additional security code each time you sign in from an unknown device or location. The security code can be sent via email, SMS, phone, or authenticator app. To enable this feature, go to the [Microsoft Account] website and sign in with your account. Select the Security menu at the top, then click the Two-step verification option. Follow the on-screen instructions to complete the process.
• Account recovery: This feature helps you restore access to your account if you forget your password or lose your device. To enable this feature, go to the [Microsoft Account] website and sign in with your account. Select the Security menu at the top, then click the Account Recovery Information option. Here, you can add or update an alternate email address or phone number that you can use to recover your account.
• Recent activity: This feature helps you monitor sign-in activity and changes to your account. You can see when and where your account is used, as well as what devices and apps are used. If you notice suspicious or unknown activity, you can take action to secure your account. To enable this feature, go to the [Microsoft Account] website and sign in with your account. Select the Security menu at the top, then click the Recent Activity option. Here, you can view your account activity history and manage notification settings.

By enabling Microsoft Account security settings, you can protect your online identity and avoid the risk of losing or compromising your account.

12] Enable OneDrive Security Settings to Protect Your Cloud Data

OneDrive is a cloud storage service that allows you to store and sync your data across all the devices connected to your Microsoft Account. OneDrive also offers several security features to keep your cloud data safe and protected from unauthorized access. Some of the OneDrive security features you can enable are as follows:

• End-to-end encryption: This feature helps protect your data by encrypting it before it’s sent to OneDrive’s servers and decrypting it once it’s received by the destination device. That way, only you and the people you share data with can access it. To enable this feature, open the OneDrive app on your Windows 11 computer, and then click the Three horizontal dots icon in the lower-right corner. Select the Settings menu, then click the Privacy tab. Under the End-to-end encryption section, slide the switch to the On position.
• Private key: This feature helps protect your data by requesting an additional private key each time you want to access end-to-end encrypted data from a new device or web browser. The private key is a secret code known only to you and not stored by Microsoft. To enable this feature, go to the [OneDrive] website and sign in with your Microsoft Account. Click the Three horizontal dots icon in the upper-left corner, then select the Settings menu. Click the Security tab, and then click the Generate private key option. Follow the on-screen instructions to generate and save your private key.
• Personal Storage Box: This feature helps protect your important or sensitive data by storing it in a special folder that requires additional identity verification to access it. You can use your fingerprint, facial recognition, PIN, or security code to unlock this folder. To enable this feature, open the OneDrive app on your Windows 11 computer, and then click the Three horizontal dots icon in the lower-right corner. Select the Settings menu, then click the Accounts tab. Under the Personal Storage Box section, click the Get Started button. Follow the on-screen instructions to set up and manage this folder.

By enabling OneDrive security settings, you can protect your cloud data from online threats and safeguard your privacy.

Conclusion

Windows 11 is an operating system that offers many new features and improvements, including security features that can help you protect your data and privacy. In this article, we have discussed the 12 best security settings in Windows 11 that you should know and enable. By following the steps we described, you can increase your protection and comfort when using Windows 11. Hope this article was useful and informative for you. Thanks for reading.