How to Hide the Device Security Section in the Windows Security app on Windows 11
The Device Security section in the Windows Security app shows hardware-level protections like virtualization-based security (VBS — a feature that isolates memory to block malware). Hide this section from the interface if you want a cleaner look or need to stop users from changing security settings on shared Windows 11 PCs.
You hide this section by creating a new `DeviceGuard` key inside the Registry Editor (a tool for changing low-level system settings) at 🗝️HKEY_LOCAL_MACHINE\
Edit the Windows Registry by navigating to 🗝️HKEY_LOCAL_MACHINE\
Understanding Core Security Features
Windows 11 Device Security protects your computer from threats using hardware features like Core Isolation and Memory Integrity. These tools use virtualization to keep harmful code away from important system files. The system also uses a Trusted Platform Module (TPM 2.0), which is a physical chip on your motherboard that safely stores encryption keys to keep your data secure.
- Core Isolation and Memory Integrity: This uses virtualization to isolate computer processes. It prevents malicious code from entering high-security areas of your system.
- Security Processor (TPM 2.0): The Trusted Platform Module (TPM) is a hardware chip that stores encryption keys. It ensures your PC is secure during startup.
- Secure Boot: This feature checks that your PC boots using only trusted software from the manufacturer.
- Kernel-mode Hardware-enforced Stack Protection: This adds a layer of protection to stop attackers from hijacking your system’s memory.
- Credential Guard: This protects your login information by storing it in a virtualized container.
- Local Security Authority (LSA) Protection: This prevents unauthorized processes from accessing sensitive system memory.
Best Practices for a Secure Environment
Enable Memory Integrity in the Device Security settings if your hardware supports it. Avoid downloading software from unverified sources, and ensure your Microsoft vulnerable driver blocklist is active to prevent known exploits.
Why hide these settings?
You might want to hide the Device Security options if you manage a computer for others and do not want them changing security settings. Keeping the security baseline consistent is common in office or school environments.
What happens when done?
What happens when you apply these changes?
The Device Security menu disappears from the Windows Security app (or reappears, depending on your configuration). These modifications do not disable security features; they only hide the user interface for Device security.
Hide or Show Device Security via Group Policy
Windows 11 Device Security can be hidden from the Windows Security app using the Local Group Policy Editor if you have administrator access. This built-in tool lets you change system settings across your computer. You can use it to remove the Device Security page entirely if you manage multiple PCs or want to clean up the security menu.
- Open the Local Group Policy Editor by clicking the Start Menu and searching for "Edit group policy."
- Select "Edit group policy" to open the editor.
3. In the left panel, navigate to this path:
Computer Configuration\Administrative Templates\Windows Components\Windows Security\Device security
4. In the right pane, double-click on "Hide the Device security area."
5. Choose one of the following options:
- Not Configured: The default setting.
- Enabled: Hides the Device security area.
- Disabled: Shows the Device security area.
Hide or Show Device Security via Registry
Windows 11 Device Security can be hidden using the Registry Editor if you use Windows Home, which does not include the Group Policy editor. Registry Editor is a database that stores low-level settings for the operating system and installed apps. Changing the right key here lets you hide the Device Security section when you do not have access to group policies.
If you cannot use the Group Policy editor, you can use the Windows Registry instead. Open the Registry Editor and go to this path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security
If the folders do not exist, right-click the "Windows" key to create them.
- In the right pane, right-click and select New DWORD (32-bit) Value.
- Name this new value `UILockdown`.
3. Double-click the UILockdown file. Set the Value data to 0 to show the section, or to 1 to hide it within the Windows Security app.
4. Restart your computer to apply the changes.
Summary
Windows 11 Device Security offers important hardware protection against today's threats, and you can control its appearance using Group Policy or the Registry.
What is the difference between Device Security and Virus & threat protection?
Device Security protects your computer using hardware features like TPM to stop attacks at a basic system level, while Virus & threat protection looks for and removes active malware and viruses.
Why is my Device Security page showing 'Standard hardware security not supported'?
Your Device Security page might say 'Standard hardware security not supported' because your computer's hardware doesn't have the latest features needed for things like Memory Integrity.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
[…] threat protection, firewall and network security, Account protection, App and Browser Control, and Device Security. This guide shows you how to hide or show the Windows Security app Family options […]