Protect your PC as you turn it on - how to enable secure boot in Windows 11
As a good PC user, I run security software in Windows to protect my computer from malware that may pop up as I go about my day. But what about malware that tries to launch before Windows even loads? For that, you can turn to a feature known as Secure Boot.
Built into modern PCs as part of the UEFI (Unified Extensible Firmware Interface) standard, Secure Boot makes sure that only trusted programs launch during the boot process, thereby preventing malware from rearing its ugly head.
Also: How Microsoft finally makes good on its syncable passkey promise - and what's coming next
Secure Boot should already be enabled on any current Windows computer. If not, the option will at least be present if you run Windows 11, as that's been a requirement for using or upgrading to Microsoft's latest operating system.
Here's how to see if Secure Boot is enabled and turn it on if it's not.
1. Check to see if Secure Boot is already enabled
To see if Secure Boot is already enabled, click the search field in Windows 11and type msinfo32. At the System Information window, scroll down the System Summary screen. BIOS mode should say "UEFI," while Secure Boot State should say "On." If so, you're all set. If not, read on.
2. Restart your PC
To head to the Secure Boot setting, go to Settings, select System, and then click Recovery. In the Advanced startup section, click Restart now to reboot your PC.
Also: 12 ways to find viruses on your PC for free (and how to remove them)
3. Boot into your computer's UEFI screen
At the screen that asks you to choose an option, select Troubleshoot. From there, choose Advanced options and then select UEFI Firmware Settings. Click Restart to boot into your computer's UEFI screen.
4. Turn on Secure Boot
At the UEFIscreen, move to the Boot or Security tab, look for the Secure Boot option, and turn it on. Press F10 to save the settings and exit the screen. Your PC will then reboot into Windows.
5. Check the settings
After you sign back in to Windows, type msinfo32 in the search field. Check the entry for BIOS mode to make sure it says UEFI and the one for Secure Boot State to ensure that it's turned on. Your PC will now be protected from any malware that attempts to infect your system during boot up.
