How to Enable or Disable DEP in Windows 11
- 8 steps
- Needs administrator rights
- Includes a restart or sign-out
Data Execution Prevention (DEP) is a Windows 11 security feature that blocks code from running in areas of memory meant to hold data, not programs. It is on by default for essential Windows programs and services on most modern PCs, which helps protect you from viruses and other malware.
This guide shows where the DEP setting is and how to change it. If a trusted app stops working, you can turn DEP off for that one app instead of the whole system. That is usually the safer choice.
Open Windows Security, then go to App & browser control Exploit protection settings System settings and choose a value for Data Execution Prevention (DEP) from the dropdown. Administrator rights are required. Turn DEP off for one trusted app on the Program settings tab instead, and restart your PC for system-wide changes.
How to Turn DEP On or Off in 🪟 Windows 11
Open App & browser control, then the exploit protection settings, then the System settings tab. Saving changes requires an administrator account. On a standard account, Windows asks for an administrator password, or the options do not apply. The steps are the same on Home and Pro editions of a currently supported Windows 11 version (25H2 or 26H2).
- Go to App & browser control. Click App & browser control in the menu on the left. The page on the right shows settings such as Smart App Control and Reputation-based protection.
windows 11 app and browser control section windows security app - Open the exploit protection settings (administrator required). Scroll down to the Exploit protection section and click Exploit protection settings. If User Account Control (the prompt Windows shows before it allows system changes) appears, click Yes or enter an administrator password. The Exploit protection page opens.
Windows Exploit protection settings - Find Data Execution Prevention (DEP). Click the System settings tab at the top of the Exploit protection page. Scroll through the list of mitigations (individual protections) until you reach Data Execution Prevention (DEP). This tab controls DEP for the whole system. To change DEP for a single app, use the Program settings tab next to it.
- Choose your DEP setting (administrator required). Open the dropdown menu next to Data Execution Prevention (DEP) and pick one of these options. If the menu is greyed out, you are probably not signed in as an administrator, or your organization manages the setting through policy.
- On by default – DEP is turned on (recommended).
- Off by default – DEP is turned off.
- Use default (On) – Uses the system’s default setting, which is usually on. Pick this option to undo an earlier change.
Windows Exploit protection settings options
Why Does DEP Matter?
DEP monitors your computer’s memory and stops programs from running in areas reserved for data and safe system files. Malware often relies on exactly that trick to take control of a PC. Blocking it also prevents sudden crashes caused by malicious code.
In almost every case, you want DEP turned on.
Some older programs run code from data areas of memory and do not work with DEP. If you use one, you may need to turn DEP off temporarily. Try the per-app option on the Program settings tab first, so the rest of your system stays protected. Turn DEP back on when you no longer need the exception.
For more details about DEP, see the official Microsoft support page: What is Data Execution Prevention (DEP)?
Summary
To undo any change, return to the System settings tab, choose Use default (On), and restart your PC. If you have never opened these settings before, the value you see is most likely Use default (On). If you turned DEP off for a trusted app, switch it back to the default setting as soon as you finish with that app.
Frequently asked questions
How to turn on data execution prevention?
To turn on DEP, open Windows Security, go to App & browser control, and click Exploit protection settings. On the System settings tab, find Data Execution Prevention (DEP) and choose On by default. You need an administrator account to save the change.
How to enable dep 🪟 Windows 11?
Windows 11 turns DEP on by default for essential system programs. To enable it yourself, open Windows Security, select App & browser control, then Exploit protection settings. Pick the System settings tab, choose the Data Execution Prevention (DEP) option, and select On by default. An administrator account is required to save.
How to adjust dep?
To adjust DEP, open Windows Security and go to App & browser control, then Exploit protection settings. On the System settings tab, change the Data Execution Prevention (DEP) setting. To change it for one trusted app only, use the Program settings tab instead, which keeps DEP on for the rest of the system. You need an administrator account.
What is dep in 🪟 Windows 11?
DEP, or Data Execution Prevention, is a Windows 11 security feature. It stops code from running in memory areas meant only for data, which makes it harder for viruses and other malware to take over a program. It is on by default for essential Windows programs and services on most modern PCs.
How to access data execution prevention?
Open Windows Security from the Start menu. Go to App & browser control, then select Exploit protection settings. The DEP setting sits on the System settings tab. Changing it requires an administrator account, and on a standard account Windows will ask for an administrator password.
How to disable dep 🪟 Windows 11?
Turning DEP off weakens protection against malware, so do it only for a trusted app that breaks. Open Windows Security, go to App & browser control, then Exploit protection settings. On the Program settings tab, select the app and set DEP to Off for it only. Avoid turning it off system-wide.
Still have a question?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!