Hidden Windows 11 safety settings you must allow proper now
Like most individuals working Windows, I depend on the built-in safety to maintain my machine secure. I do know my manner round Windows Security, however I stored my settings principally at default till not too long ago, once I learn a Microsoft report about a recent threat. In brief, malware disguised as reliable, fashionable apps tried to weaken Windows’ personal safety settings by silently disabling them.
This made me allow Tamper Protection and take a better have a look at different helpful Windows 11 safety settings which can be straightforward to miss. I’ll stroll you thru those I discover most attention-grabbing. They’re all easy-to-enable choices proper there in settings; we’re not doing any obscure Registry tweaks.
Tamper Protection
Stop malware from disabling your safety
What occurs when refined malware tries to disable safety features? As I discussed above, some malware is not immediately capable of take management of your machine, however it may well slowly disable the safety settings that hold it below management. Once it will get free rein over your pc, it may well do all kinds of hurt, from modifying information to stealing info.
Sounds like a nightmare, however you may stop it with Tamper Protection. This easy-to-enable characteristic stops apps and processes in your PC from altering or disabling safety settings, even when the malicious app has admin privileges. Beyond stopping common settings modifications, it would additionally block any suspicious Registry modifications. To allow: Go to Settings > Privacy & safety > Windows Security > Virus & menace safety > Manage settings > Toggle Tamper Protection on.
Controlled Folder Access
If you retain delicate info like medical information or monetary statements in your PC, Controlled Folder Access is effectively value enabling.
A ransomware assault might go away you with out necessary paperwork, pictures, and even work information. A 2025 Pew Research Center survey discovered that 10% of respondents mentioned that they had been locked out of their information or computer systems till they paid a ransom.
Attackers deploy seemingly innocent apps to lock you out of your information. The worst half is that you simply will not know till it is too late.
Controlled Folder Access blocks apps in your pc from making modifications to your protected folders. Enabling it’s straightforward: Go to Settings > Privacy & safety > Windows Security > Virus & menace safety > Manage ransomware safety > Toggle Controlled folder entry on.
Once you allow it, you may choose the folders you need to shield and likewise whitelist any apps you need to permit to make modifications to them. From this level on, every time an untrusted app tries to make modifications to a file out of your protected folder, Windows will block it and ship you a notification.
Smart App Control
Stop sketchy apps earlier than they get an opportunity to run
As somebody who likes downloading and making an attempt new apps, I can respect something that stops me from working probably dangerous software program. Smart App Control can try this, though it may be a bit restrictive. Unlike User Account Control, which asks you for permission to run apps, Smart App Control would not ask.
It makes use of a mix of cloud-based software intelligence and digital signature verification to resolve if an app is secure to run or not. If the app in query is thought to be malicious or would not meet Microsoft’s belief necessities, it would block it.
You cannot add exceptions to Smart App Control. If you are an influence consumer or developer and need to run your individual app, this setup could intervene along with your work. For builders, Microsoft recommends signing your apps with a sound certificates. Otherwise, you may need to disable Smart App Control altogether.
To allow it: Go to Settings > Windows Security > App & Browser Control > Smart App Control > Smart App Control Settings > Toggle on to allow. If this feels too restrictive, you may as a substitute set Windows to show file extensions and keep away from opening something that appears misplaced.
Dynamic Lock
Don’t go away your pc alone with strangers
Taking your laptop computer to work at a restaurant, library, or another public area could be a good break out of your traditional routine, however you probably have a behavior of leaving your machine unattended, you may attempt Dynamic Lock for higher privateness.
It’s not as handy since you’ll need to pair it along with your telephone. I say it pays off. Once you join your gadgets and allow Dynamic Lock, your PC will detect when your telephone is not close by. In different phrases, when you go away your desk along with your telephone in your pocket, you do not have to recollect to lock it manually every time.
I do not need to blow issues out of proportion and say that everybody is watching your each transfer, able to steal your valuable knowledge, however it would possibly occur. It’s a easy, further layer of safety that is already proper there in your pc.
The setup is as follows:
- Go to Settings.
- Select Bluetooth & Devices after which Add a Device.
- Find and pair your telephone.
- Once your gadgets are linked, return to the principle Settings menu.
- Go to Accounts > Sign-in choices.
- Scroll all the way down to Dynamic lock.
- Tick the field subsequent to Allow Windows to routinely lock your machine once you’re prepared.
Windows Security goes past malware safety
More than malware scans, the built-in Windows Security in Windows 11 can cease refined threats like ransomware and allows you to implement safety measures for oddly particular eventualities, like locking your PC once you go away it unattended. It’s surprisingly succesful and provides sufficient freedom to set it as much as your liking. That’s in all probability why many PC customers give up third-party antivirus and rely totally on the built-in choices.
