Microsoft's insistence that a computer must have a Trusted Platform Module (TPM) 2.0 component built into the motherboard for it to be eligible for a Windows 11 upgrade is evidence of just how seriously the company's taking security with its latest operating system.
TPM 2.0 is a feature that essentially verifies user identities and protects data from attack. Among other protections, TPM makes it much harder for someone who isn't sitting in front of a Windows computer to gain access to it.
But the Trusted Platform Module is only the beginning of the security and safety features that Microsoft has built into Windows 11. If you have the new operating system installed on your computer, here are the security settings you need to be aware of.
First, to get to the Settings screen in Windows 11, click the Start menu button or the Search button on the taskbar and then choose Settings from the panel that pops up.
Good security begins with keeping your software updated, and if you select Windows Update from Settings, you can check that all the latest patches and bug fixes have been applied to the operating system. Click Advanced options and Active hours to make sure Windows isn't going to restart and apply updates in the middle of your working day.
Select your name at the top left of the Settings pane and then Sign-in options to see the various ways you can log into the computer. If Facial recognition (using your webcam) or Fingerprint recognition (using a fingerprint sensor) are available, these are more secure than a password, and most modern computers should support them.
From the same Sign-in options screen, use the If you've been away, when should Windows require you to sign in again? option to make sure logging in is always required. You can also use the Dynamic lock option to tell Windows to lock your device when you move away from it (as indicated by the location of a connected smartphone).
If you select Privacy & security and then Windows Security from Settings, you can make sure the security software that comes with Windows is enabled. This is an absolute necessity if you don't have third-party alternatives installed. Any security issues that require your attention will be marked with a yellow exclamation mark—click on one for more details.
From the same Windows Security screen, you can click Open Windows Security to get to the built-in Windows 11 security center. Most of the features here should be running automatically in the background, including scans for dangerous malware, but you can run a scan manually by clicking on Virus & threat protection and choosing Quick scan.
Any hardware issues with your Windows 11 computer—including problems with the TPM and the secure boot process—will be listed on the Device security page after you've opened the Windows Security tool. If you do need to take any immediate steps to further secure the operating system and the data you've got stored, they'll be listed here.
If you pick App & browser control from the Windows Security utility, you'll see there are two settings you can enable: Reputation-based protection (which means Windows 11 is always on the lookout for suspicious or badly performing applications) and Exploit protection (which helps mitigate the impact of a variety of remote hacking attacks).
Open Settings from inside Windows Security to see the software that's protecting your Windows 11 computer under Security providers—this might be the security software that came with Windows or third-party alternatives. You can also set security notification settings from here to make sure you're always informed.
As on your smartphone, you can decide which permissions applications are allowed to make use of in Windows 11. Open the Privacy & security page from the main Settings screen, then scroll down to see the permissions. Click on any permission, such as Location, Camera, or Microphone, to manage which programs currently have access to it.
From Privacy & security under Settings, choose Find my device to have its location periodically recorded. This enables you to log into your Microsoft account on another device and find out where your Windows 11 computer has gone—very handy if you've left it behind on the train or can't remember if it's at the office or somewhere at home.
Encrypting the data on your hard drive makes it more difficult for someone else to read the information (if they're able to extract the drive from your computer, for example). Not every computer gives you the option, but if yours does, you can enable it by choosing Privacy & security and then Device encryption from the Windows 11 Settings screen.
- 📩 The latest on tech, science, and more: Get our newsletters!
- Is Becky Chambers the ultimate hope for science fiction?
- An excerpt from The Every, Dave Eggers' new novel
- Why James Bond doesn't use an iPhone
- The time to buy your holiday presents now
- Religious exemptions for vaccine mandates shouldn't exist
- 👁️ Explore AI like never before with our new database
- 🎮 WIRED Games: Get the latest tips, reviews, and more
- ✨ Optimize your home life with our Gear team’s best picks, from robot vacuums to affordable mattresses to smart speakers