If you've recently bought a Windows 10 motorcar or upgraded your PC to Windows ten, you might be wondering how secure the operating organisation is. Luckily, by default, Windows 10 is more secure than Windows vii and Windows 8.i. It has a lot of new security features that assist block viruses and malware infections. This is especially true if you are using newer hardware.

Fifty-fifty though Windows 10 is more secure, there is nonetheless more room for boosted security. In this postal service, I'm only going to talk virtually various settings in Windows that you can configure to brand Windows more secure. I won't exist mentioning any 3rd-political party programs like anti-virus, anti-spyware, etc. For additional security tips, you should check out my mail on how to protect yourself from hackers and spyware.

computer security

Windows ten Privacy Settings

The first thing I do whenever I setup a new Windows 10 machine is to turn off all the tracking features that Microsoft included with Windows 10. Unfortunately, this is i area that is not meliorate than older versions of Windows.

Windows x has several features that connect back to Microsoft and, even though they are not going to cause you to be hacked or become a virus, they are still a lilliputian unsettling. Do I really desire Microsoft knowing what I'm typing on my estimator all the fourth dimension or listening to everything in the room all the time considering of Cortana? Not actually.

This is much easier to do when you first install Windows because you lot can click Customize and disable everything all at in one case. Manifestly, if yous can't reset or reinstall Windows, you can manually modify the settings.

windows 10 customize settings

To do this, go to Settings and then click on Privacy. Y'all'll find a whole slew of items on the left side along with their On/Off options to the right. I literally accept everything to Off and but turn something on if I run into an app that requires a certain permission.

privacy settings windows 10

Enable Automated Updates

If you're running Windows 10, you should definitely enable automatic updates. It should be enabled by default, but it's a skilful thought to cheque anyhow. Click on Starting time, type in Windows Update and then click on Windows Update settings.

This will bring y'all to the Settings dialog on Windows Update. Click on Advanced Options and make sure the drop-downwards box says Automatic (recommended).

enable automatic updates

Besides, make sure to check the Give me updates for other Microsoft products when I update Windows. This is especially of import if you have Office installed every bit it volition install all Office-related security and feature updates too.

Enable Windows Defender

Again, this should be enabled, merely to check, click on Start, then Settings and Update & Security. Click on Windows Defender and make sure the following three settings are enabled: Real-time protection, Deject-based protection, and Automated sample submission.

windows defender

I've been using only Windows Defender on my Windows 10 machine for many months and oasis't had to install any third-political party anti-virus or anti-malware software. Windows Defender does a great job of protecting your reckoner and information technology's built right into Windows, which is dandy.

Enable Windows Firewall

The built-in Windows firewall is a very powerful characteristic, if y'all really want to control how your calculator communicates with other device on the network. However, the default settings will work fine for most people. By default, all outbound advice is immune to pass through the firewall.

Inbound connections are controlled past a list where y'all tin check or uncheck which programs are allowed through the firewall. Kickoff, click on Start, type in firewall and so click on Windows Firewall.

windows firewall

If your screen shows green shields with check marks, that ways the firewall is On. If not, click on Plough Windows Firewall on or off to enable it. Next, you should click on Allow an app or feature through Windows Firewall to pick the programs that should have free admission through the firewall.

allow app firewall

You'll notice there are ii columns with check marks: Private and Public. Check out my post on the Network and Sharing Center in Windows 10 to acquire the departure between public and private networks. The more than items you tin uncheck from the Public column, the better your security. Items like File and Printer Sharing or Netlogon Service should never have a cheque in the Public column. Y'all'll accept to Google to figure out which items you lot tin can uncheck.

It'south also a good idea to uncheck anything that has "Remote" in the proper name similar Remote Assist, Remote Desktop, etc. Unless you connect to your computer remotely, you tin uncheck both the Private and Public columns for all of these programs/services.

block program firewall

Advanced Sharing Settings

While you are in the Network and Sharing Middle, you should also configure the Advanced Sharing Settings. Curl downward to the Avant-garde Sharing Settings department of the article. For a quick review, here is what you should choose for the settings for maximum security. Accommodate them accordingly if y'all need to.

advanced file sharing

Private

  • Plow off network discovery (Simply if y'all never access other devices on your network using this PC)
  • Turn off file and printer sharing
  • Allow Windows to manage HomeGroup connections

Guest or Public

  • Turn off network discovery
  • Turn off file and printer sharing

All Networks

  • Plow off public folder sharing
  • Turn off media streaming (enable only when you need to stream content from the PC to a device)
  • Utilise 128-scrap encryption for file sharing connections
  • Turn on password protected sharing

User Account Command (UAC)

UAC has been around in Windows for a long time now. You'll always read articles on the Internet explaining how y'all tin disable UAC if yous don't like those pesky prompts all the fourth dimension. In my opinion, I don't go them that often and it's not worth making your computer less secure merely for a modest convenience.

Click on Beginning, type in UAC and then click on Change User Account Control Settings. By default, the slider should be at Notify me merely when apps endeavor to make changes to my computer, but you should endeavour Always notify if you tin can bear it.

user account control

This is definitely a good pick if you visit websites that are sketchy in nature. Keeping UAC to the highest setting will foreclose certain changes from being fabricated on your estimator without your consent.

Use a Local Account

Since Windows 8, Microsoft has been pushing users to login using their Microsoft account. This has some benefits like ii-factor and being able to sync your desktop to any computer, just it too has downsides. Firstly, once again, I don't want Microsoft knowing when I'm logging into my reckoner or annihilation else nigh my computer.

Secondly, what if my Microsoft account gets hacked or something else? Practice I have to worry most someone being able to remotely log into my computer, etc.? Instead of worrying about all of that, only use a local account similar you were with Windows vii and earlier. To do that, click on Start, type business relationship and so click on Manage your account.

sign in local account

Click on the Sign in with a local account instead link and follow the steps. Y'all'll get some warnings from Microsoft as to why you shouldn't do this, simply just ignore them. Naught bad will happen to your estimator.

Apply a Lock Screen

If you desire to continue your reckoner secure, yous should make certain the screen is locked automatically when y'all're not around. To exercise this, click on Start, type lock screen and select Lock screen settings.

windows lock screen

Click on Screen timeout settings and select an appropriate value that works for you. Also, exist careful which apps you allow on the lock screen as others will be able to admission that information without inbound a password.

Secure Boot & UEFI

If you have a newer figurer, you lot should make sure that you lot enable secure kick and UEFI instead of legacy BIOS. These options are changed in the BIOS, so y'all'll have to Google around to get into the BIOS first and so enable these settings.

bios settings

It'south worth noting that you may or may non accept the pick for secure kicking on your estimator. Likewise, if yous switch from LEGACY+UEFI to but UEFI and your estimator doesn't boot, just become back into the BIOS and change information technology back.

Disable Wink and Java

Ii of the biggest threats to all computers are Wink and Java. Literally, every week in that location is a new security vulnerability found in i of these platforms. Most websites have moved beyond Flash because HTML 5 is now supported in all major browsers.

My suggestion would be to disable Wink and Coffee and just use your estimator usually. Like me, you might find that y'all never really needed either installed in the first identify.

edge disable flash player

Check out my previous post on how to disable Flash in Microsoft Border. If y'all're using Cyberspace Explorer however, just click on the gear icon, then Net Options, then Programs, then Manage Add together-ons.

ie disable flash

Under Show, select All add-ons then correct-click on Shockwave Flash Object and select Disable. If you are using Google Chrome, blazon in chrome://plugins in the accost bar and then click on Disable nether Adobe Flash Actor.

chrome disable flash

For Java, just go to Command Panel, Programs and Features and uninstall any Java version currently installed on your figurer. Yous tin can too read my post on how to uninstall or disable Java in Windows and Mac.

Encrypt Hard Bulldoze

Finally, you should encrypt your entire hard drive if you want the maximum security for your PC. Encryption is more protection against someone stealing your computer or gaining access to your machine physically rather than online threats, but it'southward still of import.

I've written a detailed commodity on how to encrypt a hard drive using BitLocker in Windows. If you accept a figurer with a fast CPU, the encryption will not make a noticeable departure in speed. If you accept an older estimator, I would probably avoid using encryption unless you upgrade the hardware.

Overall, yous should be in pretty proficient shape if you follow all the steps above. Remember, though, visiting the wrong websites volition damage you no matter what security you take on your calculator. A practiced option is to use Chrome since it tries to warn you before you visit a malicious website or download something harmful. Enjoy!