How to Manage Windows 11 Security and Privacy Settings

Scan Your PC and Stop Threats

This section covers checking your computer for harmful files and using isolation tools to browse more safely. Use it when you suspect a virus or want extra protection against risky websites.

Windows Security covers most of this on every edition. Real-time protection runs in the background all the time, and you can start a manual scan whenever something looks wrong. The app also has App & browser control, which holds reputation-based protection against dangerous downloads and sites.

If you run Windows 11 Pro, Enterprise, or Education, you can also turn on Windows Sandbox. It opens a disposable copy of Windows where you can test a suspicious file or site. Everything inside it is deleted when you close it. Windows 11 Home does not include Windows Sandbox.

1 How to Scan for Malware in Windows 11 with Defender This article outlines how to identify and remove malware and viruses in Windows 11. Symptoms like slow performance and pop-ups may indicate infection. Users are advised to utilize Microsoft Defender for regular scans, keep updates current, and consider scheduling scans for consistent protection against threats. Vigilance is crucial for maintaining PC security. 7 min read · ↻ Updated Oct 2026

2 How to Install Microsoft Defender Application Guard on Windows 11 The article provides detailed instructions on how to install or uninstall Microsoft Defender Application Guard for Microsoft Edge in Windows 11. This feature isolates untrusted sites and documents in a Hyper-V environment, protecting the user's device from malware and viruses. There are two methods explained: using Windows Security features, or PowerShell/Command Prompt console. It also indicates functionalities under different keyboard shortcuts. 4 min read · ↻ Updated Oct 2026

Control Windows AI and Privacy Settings

This section covers AI tracking features such as Recall, and the diagnostic data your computer sends to Microsoft. Use it if you want to stop your PC from taking screenshots of your activity or sharing usage data.

Recall only exists on Copilot+ PCs running Windows 11 24H2 or later. If you do not see it, your device probably does not support it, and there is nothing to turn off. Diagnostic data settings are available on all editions.

Home and Pro editions do not let you set diagnostic data to fully off in Settings. The lowest level you can pick is Required diagnostic data (the Optional diagnostic data switch is off). To lower it, follow these steps:

1. Open Settings › Privacy & security › Diagnostics & feedback.
2. Find the Send optional diagnostic data switch and turn it off. Windows now sends only required diagnostic data.
3. If you also want to clear what Windows has already collected, find the delete option for device diagnostic data on the same page and click Delete.

That’s it. Your PC now sends only the required diagnostic data, and any data you deleted is removed from the device’s diagnostic record.

Heads-up: Microsoft has announced a change to the Privacy & security page, but it is not in Windows yet. The page will group related Camera, Microphone, and Location privacy controls and show usage information alongside them. Microsoft says it arrives in the November 2026 security update. You can preview it earlier with the October 2026 optional non-security update on Windows 11 versions 26H2 and 25H2. The steps in this guide stay the same until then.

1 How to Enable or Disable Recall in Windows 11 Recall is a new feature in Windows 11 that captures snapshots of your screen, enabling users to later search for previously viewed content. Available on Copilot+ PCs and newer builds, it requires enabling snapshot saving. Users can manage Recall settings via the Local Group Policy Editor or the Windows Registry. 4 min read · ↻ Updated Oct 2026

2 How to Improve Recall Snapshots Filtering on Windows 11 This guide explains how to enable or disable the "Help improve Recall snapshots filtering" feature in Windows 11, which allows anonymous sharing of excluded apps and websites to enhance the Recall function. All snapshots are encrypted and kept private on your device. Regularly check your settings to manage preferences effectively. 5 min read · ↻ Updated Nov 2026

3 How to Enable or Disable Diagnostics Access in Windows 11 This guide details how to enable or disable App diagnostics access on Windows 11, a feature that allows apps to share operational data for improvement. Users can adjust settings through the Settings menu, Group Policy Editor, or Registry Editor. Disabling it enhances privacy and control over shared information. 6 min read · ↻ Updated Oct 2026

Manage User Accounts and Sign-In Rules

This section covers administrator permissions, password expiration rules, and what standard users can do. These settings matter when several people share one computer or when you want stricter account security.

The safest setup is one administrator account that you use only when needed, and standard accounts for everyday work. To change an account type, follow these steps:

1. Open Settings › Accounts › Other users.
2. Select the account you want to change.
3. Click Change account type.
4. Choose Administrator or Standard User, then click OK.

That’s it. The account now has the new permissions the next time that person signs in.

Password expiration rules are a separate matter. They apply to local accounts and are set through Local Security Policy (Account Policies › Password Policy › Maximum password age), which is available on Pro and higher. Microsoft accounts follow Microsoft’s own sign-in rules, so a local expiration setting does not apply to them.

1 How to Turn On Administrator Protection Using Windows Security in Windows 11 Windows 11 introduces Administrator Protection, enhancing security by replacing older User Account Control prompts with clearer, color-coded warnings when admin permissions are needed. Users can easily enable or disable this feature through the Windows Security app. It provides better protection, clear warnings, and simplifies managing permissions for software installations and system changes. 4 min read · ↻ Updated Oct 2026

2 How to Turn On or off PIN Expiration in Windows 11 Windows 11 allows users to manage the expiration of their sign-in PINs, which default to never expiring. Users can set PIN expiration periods between 1 and 730 days or choose to disable expiration entirely. This can be adjusted through the Group Policy Editor or the Registry Editor, with precautions advised before making changes. Regular reviews of PIN settings enhance security. 6 min read · ↻ Updated Oct 2026

3 How to Disable UAC in Windows 11 for Standard Users This article discusses disabling User Account Control (UAC) in Windows 11. UAC is a security feature that prevents unauthorized system changes by prompting for administrator consent. It is advisable to keep UAC enabled. The recommended method to disable it is via the Control Panel, though alternative methods exist for advanced users. 8 min read · ↻ Updated Oct 2026

Clean Up the Windows Security App

This section covers hiding specific security sections, family options, or notifications inside the Windows Security app. You might do this on a work computer or if you prefer a simpler security screen without clutter.

Hiding a section does not turn off the protection behind it. It only removes the page from the Windows Security window, so users cannot change those settings from there. Reversing the setting you used restores the hidden section. The exact steps are in the last section of this tutorial.

1 How to Hide or Show Family Options in Windows Security The article outlines steps to hide or show the Family options section in the Windows Security app for Windows 11. The Family options section offers settings to manage a family's digital life, protect children online, set screen time, and manage what kids see and purchase online. Users can choose to hide or unhide this section based on their preference using the Local Group Policy Editor or Windows Registry. 4 min read · ↻ Updated Nov 2026

2 How to Hide the Device Security Section in the Windows Security App on Windows 11 The article guides users on how to hide or show the Device Security section within the Windows Security app in Windows 11. This segment can be managed through the Local Group Policy Editor and the Windows Registry. These modifications permit users to control access to critical security settings and ensure their device's protection against malicious software. 6 min read · ↻ Updated Nov 2026

3 How to Hide the App &Amp; Browser Control Section in Windows 11 Security The article provides a guide for managing the App & browser control section of the Windows Security app in Windows 11. Users can hide or show this section, which offers settings for Microsoft Defender SmartScreen, to protect against unsafe apps, files, and sites. Instructions are provided for using Local Group Policy Editor and Windows Registry for this purpose. 6 min read · ↻ Updated Nov 2026

4 How to Hide the Account Protection Section in the Windows Security Apps on Windows 11 The article provides a guide on how to hide or show the Account Protection section in the Windows Security app on Windows 11. It details methods of doing this using two different tools: Local Group Policy Editor and Windows Registry. This feature allows users to secure their device's settings according to their preferences. 5 min read · ↻ Updated Nov 2026

5 How to Hide the Firewall &Amp; Network Protection Section in Windows 11 Security App The article provides a guide on how to hide or show the Firewall & Network Protection section in the Windows Security app on Windows 11 using two methods: Local Group Policy Editor and Windows Registry. The Windows Security app, a built-in application in Windows 11, allows controlling network access and managing security settings. 4 min read · ↻ Updated Nov 2026

6 How to Hide the Virus &Amp; Threat Protection Section in Windows 11 Security App The article provides steps to hide or display the Virus & Threat Protection section in the Windows Security app of Windows 11. Users can use either the Local Group Policy Editor or Windows Registry to make these changes. Configuring the highlighted settings will determine if the section appears or not, depending on users' preferred device security settings. 5 min read · ↻ Updated Oct 2026

7 How to Disable Lock Screen Notifications in Windows 11 The article explains how to disable notifications on the lock screen of Windows 11 for privacy. Users can access System Settings and uncheck the option to show notifications on the lock screen. This process enhances privacy in public spaces, allowing for a cleaner interface without distractions. Settings can be easily reverted if needed. 11 min read · ↻ Updated Oct 2026

Common questions

How do I run a virus scan in 🪟 Windows 11?

A quick scan checks the places where threats usually hide. To run one, follow these steps:

1. Open the Windows Security app from your system tray🔔 (the small icons near the clock) or from the Start menu⊞. If you do not see the icon, click the small up arrow to show hidden icons.
2. Select Virus & threat protection.
3. Click Quick scan. The scan takes a few minutes while Windows checks the common hiding places.
4. Wait for the result. You will see either “No current threats” or a list of detected items with options to remove or quarantine them.

That’s it. Your PC has been checked, and you know whether Windows Security found anything that needs action.

If you want to check every file on your hard drive, click Scan options and choose Full scan, then click Scan now. A full scan can take an hour or more, but you can keep working while it runs.

If you think malware is hiding from normal scans, the same page offers Microsoft Defender Offline scan. It restarts the PC and scans before Windows loads, so save your work first.

What is Windows Recall and how do I turn it off?

Recall takes periodic screenshots of your screen so you can search through past activity, but it raises privacy concerns for many users. You can pause it in the privacy settings or remove it entirely through the Windows features menu.

The quick way to stop it is in the privacy settings. To do that, follow these steps:

1. Open Settings › Privacy & security.
2. Look for Recall & snapshots. If you do not see that entry, your PC does not support Recall, and there is nothing more to do.
3. Turn off the option to save snapshots. Windows stops capturing your screen.
4. If you want, delete the snapshots already saved from the same page.

You should now have Recall paused, with no new screenshots saved. You can turn the option back on later from the same page.

To remove the feature entirely, follow these steps:

1. Search for Turn Windows features on or off in the Start menu⊞ and open it.
2. Find Recall in the list and clear its check box.
3. Click OK. Windows may ask you to restart, so save your work and restart if prompted.

That’s it. Recall is now removed from the PC. To bring it back, open the same window, tick the box again, and restart.

How do I stop lock screen notifications on 🪟 Windows 11?

Notification settings in the Windows Personalization menu let you hide sensitive alerts from your locked screen. This stops people nearby from reading your private messages when you are away.

1. Open Settings › Personalization › Lock screen.
2. Find Lock screen status and open its drop-down list.
3. Choose None so no app shows detailed status on the lock screen.

That’s it. The lock screen should now show only the time and your background.

Also check Settings › System › Notifications. There you can open individual apps, such as your email or messaging app, and change how and where they show alerts. Locking your PC with the Win+L whenever you step away is still the best habit.

Should I turn off User Account Control in 🪟 Windows 11?

Turning off User Account Control (UAC) is risky. UAC shows pop-up warnings that ask for permission whenever an app tries to change your system, and leaving it on keeps that safety check in place.

If UAC prompts annoy you, lower the level instead of switching it off. The slider in the UAC settings has four positions. The default, the second one from the top, is the right choice for most people.

Setting the slider to Never notify removes the protection completely. Restart your computer or sign out and back in for the changes to take full effect. If you did turn it off, move the slider back up and restart or sign out and back in to get the warnings back.

Can I hide parts of the Windows Security app?

Administrators can hide specific tabs, such as Device Security or App & Browser Control, using the Local Group Policy Editor or the Windows Registry. This helps if you manage several computers and want to hide settings your family or employees should not change.

The Local Group Policy Editor is only included in Windows 11 Pro, Enterprise, and Education. On Home, the Registry is the only route. Before you edit the Registry, create a restore point or export the key you plan to change, because a wrong edit can cause problems that are hard to trace.

In Group Policy, the Windows Security policies sit under Computer Configuration › Administrative Templates › Windows Components › Windows Security. To undo a change, set the policy back to Not Configured, or delete the Registry value you added. After that, sign out and back in or restart so the hidden pages reappear.