How to Check Secure Boot on Windows 11
You check Secure Boot on Windows 11 to verify if your PC is protected against unauthorized software loading during startup.
Secure Boot is a crucial security standard developed by the Trusted Computing Group that ensures only trusted software is loaded by your PC’s firmware when it boots. This helps prevent malware like rootkits from running before Windows even starts.
Knowing your Secure Boot status is vital for installing Windows 11, as it’s a prerequisite for the operating system, along with TPM 2.0. On a Windows 11 PC, Secure Boot should be enabled by default for optimal security.
Open Windows Security, go to Device security, and look for the Secure Boot status. It will clearly state if Secure Boot is On or Off.
How to See if Secure Boot is On or Off
Here are three easy ways to check your Secure Boot status on Windows 11:
1Check Using the Windows Security App
- Click the Start button and type Windows Security, then open the app.
- Click on Device security.
- Look for the Secure Boot section. It will say On if it’s enabled or Off if it’s disabled.
This is the easiest way to see your Secure Boot status.
2Use the System Information Tool
- Press ⊞ Win+R on your keyboard to open the Run box.
- Type
msinfo32and press Enter. - In the window that opens, look for BIOS Mode and Secure Boot State on the right side.
- If BIOS Mode says UEFI and Secure Boot State says On, then Secure Boot is enabled.
- If it says Off, then Secure Boot is disabled.
You can easily check secure boot windows 11 using the built-in System Information tool, which shows your PC’s hardware and software details.
3Use Windows Terminal to Check
- Right-click the Start button and select Windows Terminal (Admin). %📂%SC0%%
- In the terminal window, type the following command and press Enter:
Checking secure boot windows 11 with Windows Terminal is a quick way to get a clear True or False answer about its status.
- True — Secure Boot is enabled.
- False — Secure Boot is disabled.
- An error message — Secure Boot is not supported on your device.
Summary
- Secure Boot helps protect your PC by only allowing trusted software when it starts.
- Windows 11 requires Secure Boot to be enabled for installation.
- You can check Secure Boot status using the Windows Security app, System Information tool, or Windows Terminal.
- Secure Boot status will show as On/Off or True/False depending on the method you use.
Secure Boot is a vital security feature that helps protect your PC during startup, and knowing how to check secure boot windows 11 is important for system health.
If you have questions or need more help, feel free to ask in the comments below!
How to confirm Secure Boot status?
Summary. Starting in April 2026, the Windows Security app displays additional information about the status of Secure Boot certificate updates on your device. You can find this under Device security > Secure Boot. Microsoft Secure Boot certificates, originally issued in 2011, are approaching expiration in 2026.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!