Windows Security (Formerly Windows Defender Security Center)

The Windows Security app is the central dashboard for the operating system's built-in protections. From one place, it shows the status of virus and threat protection, firewall settings, app and browser control, and device performance, so a person can quickly see whether anything needs attention without hunting through separate menus.

Microsoft Defender Antivirus

This is the real-time malware scanning engine built into Windows. It runs automatically in the background, checking files as they're opened or downloaded, and it updates its detection data on an ongoing basis through Windows Update. If a third-party antivirus product is installed and active, Windows automatically steps Defender into a supporting role to avoid conflicts.

Windows Firewall

The built-in firewall monitors incoming and outgoing network traffic and blocks connections that don't match allowed rules. It distinguishes between private networks (like a home Wi-Fi) and public networks (like a coffee shop hotspot), applying stricter rules automatically on public connections.

SmartScreen

SmartScreen checks files, apps, and websites against Microsoft's reputation data before they open, warning if something is unrecognized or has been associated with malicious activity. It works both within Microsoft Edge and at the operating-system level for downloaded applications.

Windows Hello and Sign-In Options

Windows Hello allows sign-in using a fingerprint, face recognition, or a PIN tied to the specific device, instead of typing a password every time. Because a PIN is bound to the device's hardware and doesn't leave it, it can't be reused elsewhere the way a stolen password might be, which is a meaningful security advantage even though it looks like a simple convenience feature.

Controlled Folder Access

This feature, found under Virus & Threat Protection settings, restricts which applications are allowed to make changes inside protected folders like Documents and Pictures. It's specifically designed to make it harder for ransomware to encrypt personal files, since only approved applications can modify content in those folders.

BitLocker Device Encryption

BitLocker encrypts the entire drive, meaning the data is unreadable to anyone who doesn't have the correct key or password — relevant if a laptop is lost or stolen. Many consumer Windows devices now enable a form of device encryption automatically when a person signs in with a Microsoft account, though availability depends on the device's hardware and Windows edition.

Keeping These Features Working Well

  • Leave automatic updates turned on so definitions and security patches install promptly.
  • Check the Windows Security app periodically for any features shown as 'off' or needing attention.
  • Use a PIN, fingerprint, or face sign-in where available, since it reduces reliance on typed passwords.
  • Turn on Controlled Folder Access if ransomware is a particular concern, understanding it may occasionally block a legitimate but unrecognized app until approved.