How to Improve Windows Security
These are ordered so the highest-impact, lowest-effort items come first. Doing the first five gets most of the benefit.
The list
- Turn on automatic Windows updates and install pending ones now.
- Use a standard account for daily work; keep administrator separate.
- Enable two-factor authentication on your Microsoft and email accounts.
- Verify Windows Security real-time protection is on.
- Set up one backup — File History plus an offline copy, or a cloud service with version history.
- Turn on BitLocker or Device Encryption if your edition supports it.
- Enable controlled folder access against ransomware, then whitelist the apps it blocks.
- Remove browser extensions you do not actively use.
- Turn off unnecessary startup programs.
- Enable Windows Firewall for all network profiles.
- Set your network as Private only at home; Public everywhere else.
- Schedule a weekly malware scan.
What not to bother with
- Registry cleaners — no measurable security benefit
- Multiple resident antivirus engines
- Disabling Windows Update to "avoid problems"
- "Optimizer" suites promising security as a side effect
Frequently asked questions
Does a standard user account really help?
Significantly. A great deal of malware needs administrator rights to install persistence, and a standard account forces a visible prompt.
Malware-Bytes.net is an independent information resource about malware protection for Windows. We are not Malwarebytes, and this site is not the official Malwarebytes website or support channel. Malwarebytes is a trademark of Malwarebytes Inc.