How to Hide the Device Security Section in the Windows Security app on Windows 11

Windows 11 Device Security is a vital part of the Windows Security app. It acts as a command center for your computer’s hardware-backed security features. It monitors tools that protect your system from low-level attacks, such as firmware threats. By using virtualization-based security, it creates a secure environment that keeps your data safe from malicious software.

Understanding Core Security Features

The Device Security dashboard focuses on several key technologies:

• Core Isolation and Memory Integrity: This uses virtualization to isolate computer processes. It prevents malicious code from entering high-security areas of your system.
• Security Processor (TPM 2.0): The Trusted Platform Module (TPM) is a hardware chip that stores encryption keys. It ensures your PC is secure during startup.
• Secure Boot: This feature checks that your PC boots using only trusted software from the manufacturer.
• Kernel-mode Hardware-enforced Stack Protection: This adds a layer of protection to stop attackers from hijacking your system’s memory.
• Credential Guard: This protects your login information by storing it in a virtualized container.
• Local Security Authority (LSA) Protection: This prevents unauthorized processes from accessing sensitive system memory.

Best Practices for a Secure Environment

To keep your Windows 11 system safe, always keep your firmware and drivers updated. Enable Memory Integrity in the Device Security settings if your hardware supports it. Avoid downloading software from unverified sources, and ensure your Microsoft vulnerable driver blocklist is active to prevent known exploits.

Why hide these settings?

You might want to hide these options if you manage a computer for others and do not want them to change security settings. This is common in office or school environments where you want to keep the security baseline consistent.

What happens when done?

Once you apply these changes, the Device security menu will either disappear from the Windows Security app or reappear, depending on the setting you choose. This does not disable the security features themselves; it only hides the user interface.

Hide or Show Device Security via Group Policy

Note: This method requires admin privileges.

1. Open the Local Group Policy Editor by clicking the Start Menu and searching for “Edit group policy.”

2. Select “Edit group policy” to open the editor.

3. In the left panel, go to this path:

Computer Configuration\Administrative Templates\Windows Components\Windows Security\Device security

4. In the right pane, double-click on “Hide the Device security area.”

5. Choose one of the following options:

• Not Configured: The default setting.
• Enabled: Hides the Device security area.
• Disabled: Shows the Device security area.

Hide or Show Device Security via Registry

Note: This method requires admin privileges.

If you cannot use the Group Policy editor, you can use the Windows Registry instead. Open the Registry Editor and go to this path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device security

If the folders do not exist, right-click the “Windows” key to create them.

1. In the right pane, right-click and select New > DWORD (32-bit) Value.

2. Name this new value UILockdown.

3. Double-click the UILockdown file. Set the Value data to 0 to show the section or 1 to hide the section in the Windows Security app.

4. Restart your computer to apply the changes.

Summary

Windows 11 Device Security provides essential hardware-backed protection against modern threats. You can manage the visibility of this section using Group Policy or the Registry for administrative control. Always ensure your security features are enabled to maintain a robust system integrity baseline. For more details, visit the official Microsoft support page.