Windows 11 Security Checklist

# Tip
General Security Tips
Avoid downloading files from unknown or untrustworthy sources to avoid potential
1
malware on your device.

2 Do not connect unknown USBs or other devices to your computer.

Depending on your email provider, you can set up spam filters to protect against
3
phishing threats and avoid malware that's attached to emails.
Anti-Virus
It's important to run a malware scan to ensure there is no presence of dangerous
malware on your computer. To do this, navigate to Settings > Privacy & Security >
4
Windows Security > Virus & threat protection. The majority of these processes
should automatically run in the background, but you can check them here.
In Virus & threat protection, you can click on Scan options to run different types of
scans on your device. Quick scan is recommended for your usual scheduled scans and
5 will look at the locations where malware could be hidden that could affect starting your
device. A full scan takes much longer but performs a deep scan of your device including
archived files, network drives, and more.
To ensure your device is protected at all times, toggle Real-time protection on in the
6 Virus & threat protection settings menu. This will locate any malware on your device
and stop it from installing.
Your device should automatically download the latest security intelligence to keep your
7 device protected. However, you can manually check for updates by going to Virus &
protection settings > Protection updates.
In addition to virus protection, you can also enable ransomware protection on your
8 device in the Virus & protection settings > Ransomware protection menu. Toggle on
to allow controlled folder access.
If an item that you know is 100% safe gets flagged by Windows Defender as a threat,
9 you can allow some threats through. You can do this via Virus & protection settings >
Allowed threats.
Since Windows Defender comes as part of Windows 11, there is no need to install any
10 third-party anti-virus software. If you do install third-party software, it could cause
conflicts and cause Windows Defender to stop working, which is counterproductive.
Sign-In
Ensure you have enabled the right way to sign in on your selected computer by going to
11 Settings > Accounts > Sign-in options. From here you can enable different ways to
sign in depending on the type of computer you're using.
Ensure your PC is secure and locked while you're away from the screen via Settings >
12 Accounts > Sign-in options. Under Additional settings you can choose to
dynamically lock your device automatically.
If multiple people are using the same Windows 11 device, you can add multiple
13 Microsoft accounts to sign in with. Go to Settings > Accounts > Family & other users
then click on Add other user > Add account.
If you use your device in a public place, it's sensible to add an account sign-in
password. You can set a password via Accounts > Password. A strong password
14
contains a mix of letters, numbers, and symbols, and shouldn't be easy to guess (like
your mother's maiden name, child's name, or street you live on).

Copyright © 2022 MUO. For more cheat sheets, head over to www.makeuseof.com
Activity and Permissions
To check which devices are linked to your account and to make sure no unauthorized
15 devices appear, navigate to Settings > Privacy & Security > Find my device and select
the option to see all your devices.
By default, your device will store your activity history, such as the websites you browse
16 and how you use apps and services. To stop storing your activity, you can do this in
Settings > Privacy & Security > Activity history.
Windows Search uses the web and various apps to give you relevant results on your
17 device. You can filter out specific content by going to Settings > Privacy & Security >
Search permissions. Here you can set SafeSearch to Strict, Moderate, or Off.
Certain apps require permission to access information like your location, camera,
18 microphone, etc. To see which apps use these, navigate to Settings > Privacy &
Security > App permissions. You can click on each category to toggle on/off access.
If you're worried about losing your Windows laptop or tablet, you can save your
19 device's location in order to find it again. Go to Settings > Privacy & Security > Find
my device to toggle the option on/off.

Don't want to see personalized apps or allow Windows access to your data? Turn these
20
options off by going to Settings > Privacy & Security > General.

Threat Prevention
Keep Windows 11 up to date to ensure your PC has the latest security updates.
21 Navigate to Settings > Windows Update to check to see if there are any updates
available to download and install.
Enable Windows 11's built-in security tools by navigating to Settings > Privacy &
22 Security > Windows Security. If you don't have any third-party software installed, this
is a necessary step to securing your computer.
To protect your device from potential online threats, it's worth looking at a firewall.
23 Windows 11 includes one and it can be activated via Settings > Privacy & Security >
Windows Security > Firewall & network protection.
If you have the Pro or Enterprise version of Windows 11, you can enable BitLocker, a
feature that encrypts your device. If you were to lose your Windows 11 device,
24 BitLocker protects the operating system and files so no one else can access them. You
can activate this via Settings > Privacy & Security > Device encryption > BitLocker
drive encryption.

Copyright © 2022 MUO. For more cheat sheets, head over to www.makeuseof.com