How to Manage Windows 11 Security and Privacy Settings

Scan Your PC and Stop Threats

Check your computer for harmful files and use advanced isolation tools to browse the web safely. You will use these steps when you suspect a virus or want an extra layer of protection against risky websites.

Windows Security covers most of this on every edition. Real-time protection runs in the background all the time, and you can start a manual scan whenever something looks wrong. The app also has App & browser control, which holds reputation-based protection against dangerous downloads and sites. If you run Windows 11 Pro, Enterprise, or Education, you can also turn on Windows Sandbox. It opens a disposable copy of Windows where you can test a suspicious file or site. Everything inside it is deleted when you close it. Windows 11 Home does not include Windows Sandbox.

1 How to Scan for Malware in Windows 11 with Defender This article outlines how to identify and remove malware and viruses in Windows 11. Symptoms like slow performance and pop-ups may indicate infection. Users are advised to utilize Microsoft Defender for regular scans, keep updates current, and consider scheduling scans for consistent protection against threats. Vigilance is crucial for maintaining PC security. 7 min read · ↻ Updated Oct 2026

2 How to Install Microsoft Defender Application Guard on Windows 11 The article provides detailed instructions on how to install or uninstall Microsoft Defender Application Guard for Microsoft Edge in Windows 11. This feature isolates untrusted sites and documents in a Hyper-V environment, protecting the user's device from malware and viruses. There are two methods explained: using Windows Security features, or PowerShell/Command Prompt console. It also indicates functionalities under different keyboard shortcuts. 4 min read · ↻ Updated Oct 2026

Control Windows AI and Privacy Settings

Manage new AI tracking features like Recall and control what diagnostic data your computer sends to Microsoft. Use these steps if you want to stop your PC from taking screenshots of your activity or sharing usage data.

Recall only exists on Copilot+ PCs running Windows 11 24H2 or later. If you do not see it, your device probably does not support it, and there is nothing to turn off. Diagnostic data settings are available on all editions, but Home users cannot turn off required diagnostic data entirely. You can only turn off the optional part.

1 How to Enable or Disable Recall in Windows 11 Recall is a new feature in Windows 11 that captures snapshots of your screen, enabling users to later search for previously viewed content. Available on Copilot+ PCs and newer builds, it requires enabling snapshot saving. Users can manage Recall settings via the Local Group Policy Editor or the Windows Registry. 4 min read · ↻ Updated Oct 2026

2 How to Improve Recall Snapshots Filtering on Windows 11 This guide explains how to enable or disable the "Help improve Recall snapshots filtering" feature in Windows 11, which allows anonymous sharing of excluded apps and websites to enhance the Recall function. All snapshots are encrypted and kept private on your device. Regularly check your settings to manage preferences effectively. 5 min read · ↻ Updated Oct 2026

3 How to Enable or Disable Diagnostics Access in Windows 11 This guide details how to enable or disable App diagnostics access on Windows 11, a feature that allows apps to share operational data for improvement. Users can adjust settings through the Settings menu, Group Policy Editor, or Registry Editor. Disabling it enhances privacy and control over shared information. 6 min read · ↻ Updated Oct 2026

Manage User Accounts and Sign-In Rules

Set up administrator permissions, change password expiration rules, and control what standard users can do. These settings are important when multiple people share the same computer or when you want stricter account security.

The safest setup is one administrator account that you use only when needed, and standard accounts for everyday work. To change an account type, follow these steps:

1. Open Settings › Accounts › Other users
2. Select the account you want to change.
3. Click Change account type.
4. Choose Administrator or Standard User, then click OK.

The account now has the new permissions the next time that person signs in. Password expiration rules are a separate matter. They apply to local accounts and are set through Local Security Policy (Account Policies › Password Policy › Maximum password age), which is available on Pro and higher. Microsoft accounts follow Microsoft’s own sign-in rules, so a local expiration setting does not apply to them.

1 How to Turn On Administrator Protection Using Windows Security in Windows 11 Windows 11 introduces Administrator Protection, enhancing security by replacing older User Account Control prompts with clearer, color-coded warnings when admin permissions are needed. Users can easily enable or disable this feature through the Windows Security app. It provides better protection, clear warnings, and simplifies managing permissions for software installations and system changes. 4 min read · ↻ Updated Oct 2026

2 How to Turn On or off PIN Expiration in Windows 11 Windows 11 allows users to manage the expiration of their sign-in PINs, which default to never expiring. Users can set PIN expiration periods between 1 and 730 days or choose to disable expiration entirely. This can be adjusted through the Group Policy Editor or the Registry Editor, with precautions advised before making changes. Regular reviews of PIN settings enhance security. 6 min read · ↻ Updated Oct 2026

3 How to Disable UAC in Windows 11 for Standard Users This article discusses disabling User Account Control (UAC) in Windows 11. UAC is a security feature that prevents unauthorized system changes by prompting for administrator consent. It is advisable to keep UAC enabled. The recommended method to disable it is via the Control Panel, though alternative methods exist for advanced users. 8 min read · ↻ Updated Oct 2026

Clean Up the Windows Security App

Hide specific security sections, family options, or notifications from view inside the Windows Security app. You might use these steps on a work computer or if you prefer a simpler security screen without clutter.

Hiding a section does not turn off the protection behind it. It only removes the page from the Windows Security window, so users cannot change those settings from there. Hidden sections can be restored by reversing the setting you used. The exact steps are in the last section of this tutorial.

1 How to Hide or Show Family Options in Windows Security The article outlines steps to hide or show the Family options section in the Windows Security app for Windows 11. The Family options section offers settings to manage a family's digital life, protect children online, set screen time, and manage what kids see and purchase online. Users can choose to hide or unhide this section based on their preference using the Local Group Policy Editor or Windows Registry. 4 min read · ↻ Updated Oct 2026

2 How to Hide the Device Security Section in the Windows Security App on Windows 11 The article guides users on how to hide or show the Device Security section within the Windows Security app in Windows 11. This segment can be managed through the Local Group Policy Editor and the Windows Registry. These modifications permit users to control access to critical security settings and ensure their device's protection against malicious software. 6 min read · ↻ Updated Oct 2026

3 How to Hide the App &Amp; Browser Control Section in Windows 11 Security The article provides a guide for managing the App & browser control section of the Windows Security app in Windows 11. Users can hide or show this section, which offers settings for Microsoft Defender SmartScreen, to protect against unsafe apps, files, and sites. Instructions are provided for using Local Group Policy Editor and Windows Registry for this purpose. 6 min read · ↻ Updated Oct 2026

4 How to Hide the Account Protection Section in the Windows Security Apps on Windows 11 The article provides a guide on how to hide or show the Account Protection section in the Windows Security app on Windows 11. It details methods of doing this using two different tools: Local Group Policy Editor and Windows Registry. This feature allows users to secure their device's settings according to their preferences. 5 min read · ↻ Updated Oct 2026

5 How to Hide the Firewall &Amp; Network Protection Section in Windows 11 Security App The article provides a guide on how to hide or show the Firewall & Network Protection section in the Windows Security app on Windows 11 using two methods: Local Group Policy Editor and Windows Registry. The Windows Security app, a built-in application in Windows 11, allows controlling network access and managing security settings. 4 min read · ↻ Updated Oct 2026

6 How to Hide the Virus &Amp; Threat Protection Section in Windows 11 Security App The article provides steps to hide or display the Virus & Threat Protection section in the Windows Security app of Windows 11. Users can use either the Local Group Policy Editor or Windows Registry to make these changes. Configuring the highlighted settings will determine if the section appears or not, depending on users' preferred device security settings. 5 min read · ↻ Updated Oct 2026

7 How to Disable Lock Screen Notifications in Windows 11 The article explains how to disable notifications on the lock screen of Windows 11 for privacy. Users can access System Settings and uncheck the option to show notifications on the lock screen. This process enhances privacy in public spaces, allowing for a cleaner interface without distractions. Settings can be easily reverted if needed. 11 min read · ↻ Updated Oct 2026

Common questions

How do I run a virus scan in 🪟 Windows 11?

To run a scan, follow these steps:

1. Open the Windows Security app from your system tray 🔔 (the small icons near the clock) or from the Start menu ⊞. If you do not see the icon, click the small up arrow to show hidden icons.
2. Select Virus & threat protection.
3. Click Quick scan. Windows checks the places where threats usually hide, and this takes a few minutes.
4. Wait for the result. You will see either “No current threats” or a list of detected items with options to remove or quarantine them.

If you want to check every file on your hard drive, click Scan options and choose Full scan, then click Scan now. A full scan can take an hour or more, but you can keep working while it runs. If you think malware is hiding from normal scans, the same page offers Microsoft Defender Offline scan, which restarts the PC and scans before Windows loads. Save your work first.

What is Windows Recall and how do I turn it off?

Recall takes periodic screenshots of your screen so you can search through past activity, but it raises privacy concerns for many users. You can disable this feature entirely through the Windows features menu or privacy settings.

The quick way to pause it is in the privacy settings. Open Settings › Privacy & security, and look for Recall & snapshots. If you do not see that entry, your PC does not support Recall. If it is there, turn off the option to save snapshots, and Windows stops capturing your screen. You can also delete snapshots already saved from the same page.

To remove the feature entirely, search for Turn Windows features on or off in the Start menu ⊞, find Recall in the list, clear its check box, and click OK. Windows may ask you to restart. To bring Recall back, open the same window, tick the box again, and restart.

How do I stop lock screen notifications on 🪟 Windows 11?

Hide sensitive alerts from appearing on your locked screen by adjusting the notification settings in the Windows Personalization menu. This prevents people nearby from reading your private messages when you are away.

1. Open Settings › Personalization › Lock screen
2. Find Lock screen status and open its drop-down list.
3. Choose None so no app shows detailed status on the lock screen.

The lock screen should now show only the time and your background. Also check Settings › System › Notifications, where you can open individual apps, such as your email or messaging app, and change how and where they show alerts. Locking your PC with the Win+L whenever you step away is still the best habit.

Should I turn off User Account Control in 🪟 Windows 11?

Turning off User Account Control (UAC) is risky. Leaving it enabled preserves the pop-up warnings that demand permission whenever apps try to change your system.

If UAC prompts annoy you, lower the level instead of switching it off. The slider in the UAC settings has four positions. The default, the second one from the top, is the right choice for most people. Setting it to Never notify removes the protection completely, and you will need to restart for the change to take full effect. If you did turn it off, move the slider back up and restart to get the warnings back.

Can I hide parts of the Windows Security app?

Administrators can hide specific tabs like Device Security or App & Browser Control using the Local Group Policy Editor or the Windows Registry. This is helpful if you manage multiple computers and want to hide settings your family or employees should not change.

The Local Group Policy Editor is only included in Windows 11 Pro, Enterprise, and Education. On Home, the Registry is the only route. Before you edit the Registry, create a restore point or export the key you plan to change, because a wrong edit can cause problems that are hard to trace. In Group Policy, the Windows Security policies sit under Computer Configuration › Administrative Templates › Windows Components › Windows Security To undo a change, set the policy back to Not Configured, or delete the Registry value you added. After that, sign out and back in or restart so the hidden pages reappear.