Windows 11: four settings worth turning on to secure your laptop

With a new Windows 11 laptop, we usually switch it on, finish the setup and immediately install programmes or start gaming. According to the Antyweb website (article of 21 October 2026), this means we skip settings that are particularly important on mobile devices that connect to various Wi-Fi networks. Below are four changes that the author considers worth making.

1. Controlled folder access

This feature is meant to protect against ransomware, that is, malicious software that can be used to steal data and blackmail users. Once it is switched on, no unknown app will change, overwrite or delete files in protected folders without the user's explicit permission.

Where to turn it on: Settings → Privacy & security → Windows Security → Virus & threat protection. At the bottom of the page, you need to switch on the ransomware protection management option.

2. Dynamic lock

With it, the laptop locks when you walk away from it with your phone. First, you need to pair your phone with the laptop via Bluetooth. Then, in Settings → Accounts → Sign-in options, expand the Dynamic lock section and tick the option to lock the device automatically when you are away. The system monitors the signal strength between the devices and locks the computer when you move away.

3. Drive encryption

The author points out that if a laptop is stolen, a Windows password alone does little, because the drive can be removed and its data copied. With full encryption and no recovery key, the data is unreadable. According to Antyweb, with SSDs the drop in performance is unnoticeable.

You can check the status in Settings → Privacy & security → Device encryption. If the system supports BitLocker, protection should be active and the backup key synchronised with your Microsoft account.

4. Tamper protection

This switch removes the permissions of programs and scripts to interfere with security mechanisms. As a result, for example, a trojan will not be able to turn off Windows Defender or system scanning. The option is in: Settings → Privacy & security → Windows Security → Virus & threat protection → Manage settings. The "Tamper Protection" switch should be on.

The author estimates that making all the changes will take a few minutes.

What this means for you

The advice applies to every Windows 11 user, including in the United Kingdom. It is especially useful for people who often use a laptop away from home, for example at work, while travelling or on public Wi-Fi networks. The names of the options may differ slightly depending on the version of the system and the interface language.