Powered by Intelligent Security Graph.

Windows 11 powers the advanced biometric features of modern devices, such as fingerprint scanners and special IR cameras for face recognition

Device encryption is available on a wide range of Windows devices and helps protect your data by encrypting it. If you turn on device encryption, only authorized individuals will be able to access your device and data.

Keep track of your devices—even your digital pen!

Your Windows device comes with comprehensive, built-in security features, including firewall and internet protections to help safeguard against viruses, malware, and ransomware.

App & browser control in Windows Security provides the settings for Microsoft Defender SmartScreen, which helps protect your device from potentially dangerous apps, files, websites, and downloads.

Helps protect people from phishing attacks by alerting them as they are entering their Microsoft credentials into a malicious application or website.

Presence sensing combines Windows Hello with presence detection sensors to sign you in when you approach and lock when you leave

Multifactor Authentication

Windows 11 offers simple, secure multifactor authentication via phone call, text, or the Microsoft Authenticator app for mobile phones and tablets

Parental controls/protection

Manage screen time, limit access to mature content, control online purchases when you connect your family's Microsoft accounts, and check to make sure the family’s devices are secure and up to date.

Protection from fileless based attacks

Secure Boot

Helps prevent malicious software applications and unauthorized operating systems from loading during the system start-up process.

Security by default

All new Windows 11 devices will come with powerful built-in security including hardware isolation, encryption, and malware protection.

Smart App Control

Give employees flexibility to choose their own apps while maintaining strong security. Smart App Control blocks untrusted or unsigned software to prevent malicious apps from running. Available on new devices shipped with Windows 11 2022 Update. Devices with previous versions of Windows 11 can use this feature with a reset and clean installation of Windows 11 2022 Update. Organizations using a modern device management (MDM) solution such as Microsoft Intune can use that tool instead to manage apps and devices.

Windows Defender Antivirus

Windows 11 includes built-in malware protection to help keep you safe from viruses, spyware, and other malicious software.

Windows Defender System Guard

Windows Defender System Guard  uses hardware-based root of trust on modern devices to block startup attacks and prevent them from propagating.

Windows Hello

Using facial recognition, a fingerprint, or PIN, Windows Hello is a fast, secure, and password-free way to unlock your compatible Windows devices

Windows Security

View and manage the security and health of your device.

Bitlocker device encryption

If your device is lost or stolen, BitLocker and BitLocker To Go put everything on lockdown, so no one else can access your systems or data

Integrated with Microsoft Information Protection

Protect your information from accidental or intentional data leaks

Remote Deployment and Compliance

Deploy, secure, and manage remote PCs through the cloud, in compliance with your company’s policies

Windows Hello for Business

Windows Hello capabilities plus passwordless sign-in to Windows and Azure.

Windows Information Protection (WIP)

WIP helps to protect against potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leaks on enterprise-owned devices and personal devices that employees bring to work, without requiring changes to your environment or other apps

Resilient File System (ReFS)

Detects when data becomes corrupt on one of the mirrored drives and uses a healthy copy of your data on other drives to correct and protect data.