Secure your Windows PC: updates, accounts and protection

Lock down a Windows PC reliably with the tools it already has – updates, Defender, accounts and backups. No expensive extra software needed.

A Windows PC can be secured very well with the tools it already ships with, for free. You will find most of the settings below in Settings, under Privacy & security and Windows Update.

The short version

  • Leave automatic updates turned on.
  • Use Microsoft Defender with real-time protection.
  • Use a standard user account for everyday work, not an administrator account.
  • Leave User Account Control (UAC) switched on.
  • Turn on device encryption / BitLocker and set up a backup.

Step by step

Secure Windows in 15 minutes

  • Updates: Settings › Windows Update – allow automatic updates and restarts.
  • Check Defender: Windows Security › Virus & threat protection – real-time and cloud protection on.
  • Account: create a standard user account for daily use; use the administrator account only to install things.
  • UAC: leave User Account Control at the default level or higher.
  • Encryption: turn on device encryption or BitLocker (where supported).
  • Firewall: leave the Windows firewall on for every network profile.
  • Backup: set up File History, or an external or cloud backup.

Updates and Defender

Let Windows Update run automatically – that closes the holes most attacks go through. Microsoft Defender gives solid baseline protection with real-time and cloud scanning; very few people need an expensive suite on top. Whether extra software makes sense is covered in do you need antivirus .

Accounts and rights

Do your daily work in a standard user account. That means malware has to obtain administrator rights before it can do real damage – and User Account Control (UAC) asks you first. Set a strong sign-in password or PIN, and protect your Microsoft account with two-factor authentication .

Local account or Microsoft account?

Either works. A Microsoft account brings security advantages: you can protect it with two-factor authentication , and your BitLocker recovery key is stored automatically, so you can get back to your data after a problem. A local account keeps more out of the cloud, but then you have to save the BitLocker key yourself (print it, or store it encrypted). Choose deliberately – and if you go with a Microsoft account, give it a strong password and two-factor protection.

Encryption and backups

BitLocker, or device encryption, protects your data if the PC is lost or stolen. Set up a backup as well – how to do that is in set up backups .

Browser, downloads and ransomware protection

Most infections today arrive through downloads and attachments, not through security holes. Get software only from official sources, leave the SmartScreen filter on, and do not open unexpected attachments – many of them are phishing . Against ransomware, Defender offers Controlled folder access, which blocks unauthorized changes to your documents; turn it on and keep a backup that is disconnected from the PC. What to do if it happens anyway is in ransomware: your PC is encrypted .

Common mistakes

  • Postponing updates indefinitely or blocking restarts.
  • Working as an administrator all the time.
  • Installing software from dubious sources or from an email attachment.
  • Using pirated software and “cracks” – a common route for malware.
  • No backup – a failure or ransomware then costs you everything.
More device protection Secure your home network too: secure your home Wi-Fi and secure your router . The overview is in the devices section .

Frequently asked questions

Is Windows Defender enough as virus protection?

For most home users, yes. The built-in Microsoft Defender does well in independent tests. Updates, a standard user account and care with downloads matter more than any paid suite.

Should I work with administrator rights?

No. Create a standard user account for everyday use and keep the administrator account for installing things. That way malware can do far less damage.

How important are Windows updates really?

Very. Many attacks use known holes that were fixed long ago. Automatic updates are the simplest and most effective protection there is.

Topics: Devices, Windows