Protect Your Data: Enable Ransomware Protection in Windows 11

How to enable controlled folder access

Controlled folder access is a built-in security setting in Windows 11 ransomware protection that stops unknown apps from changing or deleting your personal files. Turn on this feature by opening Windows Security, going to Virus & threat protection, and selecting Manage ransomware protection. This blocks malicious software from locking your documents.

If an app that Windows doesn’t trust tries to write to a protected folder, Windows blocks it and shows a notification. Microsoft’s own apps and well-known, trusted programs are allowed automatically. The feature relies on Microsoft Defender Antivirus, so if you run a third-party antivirus, Windows may hide or disable these settings. In that case, check the other product for its own ransomware shield.

1. Open Settings by pressing the Win+I on your keyboard. The Settings ⚙️ window opens with a list of categories on the left.
2. Select Privacy & Security from the left menu, then click Windows Security. You should now see the Windows Security page, with a list of protection areas and a button to open the app.

This page is only a launcher. The ransomware settings themselves live inside the Windows Security app, which you open next.

If you are signed in with a standard account, Windows asks for an administrator password when you change them.

3. Click the Open Windows Security button. The Windows Security app opens in its own window and shows the Security at a glance overview.

The overview shows a tile for each protection area, such as Virus & threat protection, Account protection and Firewall & network protection. A green check on a tile means that area needs no action.

4. Click on Virus & threat protection in the menu on the left. The page shows your current threats, scan options and protection settings.
5. Scroll down to the bottom and click Manage ransomware protection. If you don't see it, make sure the window is fully scrolled down, and check that Microsoft Defender Antivirus is your active antivirus. The Ransomware protection page opens.

On this page you will see the Controlled folder access switch. Below it are links for Protected folders and for allowing an app. A section for ransomware data recovery, linked to OneDrive, also appears here.

5. Toggle the switch under Controlled folder access to On to enable protection. If a User Account Control prompt appears, click Yes. The switch now reads On, and the extra links for protected folders and allowed apps become available. You don't need to restart. To undo this later, return to this page and switch it back to Off.

Once protection is on, Windows may block some of your older or less common programs from saving files into protected folders. That is normal, and the sections below show how to fix it.

Managing your protected folders

Protected folders include your default user directories like Documents and Pictures, but you can add custom folders to keep more of your data safe from threats. Go to Windows Security, open your ransomware protection settings, and click Protected folders to add any custom location on your hard drive that needs extra security.

On the Protected folders page, click Add a protected folder, pick the folder in the window that opens, and confirm. The folder then appears in the list. To remove one later, select it in the list and click Remove. You can't remove the default folders. Protect folders that hold work files, projects or photos you can't replace. Don't protect folders that apps write to constantly, such as game install folders, or you will get a lot of blocks.

Keep the list short. Every folder you add is one more place where legitimate apps may get blocked.

The Block history shows legitimate programs that ransomware protection blocked. You can open the Block history to allow a trusted program access if it was incorrectly flagged. This prevents essential software from being shut down by the ransomware protection feature.

If a program can't save a file, or you see a "Unauthorized changes blocked" notification, here is what to do:

1. Go to Windows Security › Virus & threat protection › Manage ransomware protection
2. Click Block history and find the app in the list.
3. If you trust the app, go back and click Allow an app through Controlled folder access, then click Add an allowed app.
4. Choose Recently blocked apps and select the program, or choose Browse all apps to find its executable file yourself.

If you don't recognize the name of a blocked program, leave it blocked.

Backing up with OneDrive

It is always smart to keep a backup. Using OneDrive allows you to restore your files if the worst happens. Controlled folder access reduces the risk, but no single tool stops every attack, and a good backup is your last line of defense. %%LNK1%% to learn how to set up your backups.

On the Ransomware protection page, the data recovery section shows whether OneDrive is set up. If it isn't, Windows offers a link to set it up. Keep a second copy on an external drive that you disconnect after each backup.

Summary

• Enable Protection: Use the Windows Security settings to turn on Controlled folder access. It is off by default and needs no restart.
• Customize: Add specific folders to the protected list to keep them safe. Stick to folders that hold data you can't replace.
• Check History: If an app stops working, check your block history to give it permission. Allow only programs you trust.
• Use Backups: Always keep a backup of your data using OneDrive. Add an offline copy if you can.

Windows 11 ransomware protection keeps your personal files safe by blocking unauthorized apps from modifying your data. Turn on controlled folder access in the Windows Security app, add any extra folders you want to protect, and check your block history if a trusted program gets stopped by mistake. If you ever need to turn it off, use the same switch on the Ransomware protection page.