How to Check Secure Boot on Windows 11
Secure Boot on Windows 11 confirms your PC starts up with only safe, approved software.
Secure Boot is a security feature that checks your computer’s essential startup files. It stops unwanted programs, like malware that hides before Windows loads, from running when you turn on your PC.
This check is important because Secure Boot is required to install Windows 11, just like TPM 2.0. For most Windows 11 computers, Secure Boot should already be turned on for the best protection.
Open Windows Security, go to Device security, and look for the Secure Boot status. It will clearly state if Secure Boot is On or Off.
How to See if Secure Boot is On or Off
Here are three easy ways to check your Secure Boot status on Windows 11:
1Check Using the Windows Security App
- Click the Start button and type Windows Security, then open the app.
- Click on Device security.
- Look for the Secure Boot section. It will say On if it’s enabled or Off if it’s disabled.
This is the easiest way to see your Secure Boot status.
2Use the System Information Tool
- Press ⊞ Win+R on your keyboard to open the Run box.
- Type
msinfo32and press Enter. - In the window that opens, look for BIOS Mode and Secure Boot State on the right side.
- If BIOS Mode says UEFI and Secure Boot State says On, then Secure Boot is enabled.
- If it says Off, then Secure Boot is disabled.
You can check Secure Boot on Windows 11 using the System Information tool by opening it and looking for the Secure Boot State. This handy tool shows you exactly if Secure Boot is on or off, along with your BIOS mode, helping you confirm your PC’s security settings quickly.
3Use Windows Terminal to Check
- Right-click the Start button and select Windows Terminal (Admin). %📂%SC0%%
- In the terminal window, type the following command and press Enter:
Using Windows Terminal is a quick way to check Secure Boot on Windows 11. After opening it as an administrator, you just need to type a simple command. The result will clearly show 'True' if Secure Boot is enabled, or 'False' if it's not.
- True — Secure Boot is enabled.
- False — Secure Boot is disabled.
- An error message — Secure Boot is not supported on your device.
Summary
- Secure Boot helps protect your PC by only allowing trusted software when it starts.
- Windows 11 requires Secure Boot to be enabled for installation.
- You can check Secure Boot status using the Windows Security app, System Information tool, or Windows Terminal.
- Secure Boot status will show as On/Off or True/False depending on the method you use.
Checking your Secure Boot status on Windows 11 is important for PC security, as it prevents harmful software from loading during startup. Windows 11 requires Secure Boot to be on for installation. You can easily check if Secure Boot is enabled using the Windows Security app, the System Information tool, or Windows Terminal.
If you have questions or need more help, feel free to ask in the comments below!
How to confirm Secure Boot status?
Summary. Starting in April 2026, the Windows Security app displays additional information about the status of Secure Boot certificate updates on your device. You can find this under Device security > Secure Boot. Microsoft Secure Boot certificates, originally issued in 2011, are approaching expiration in 2026.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!