How to Protect Your PC From Malware and Online Threats
You do not need to be a security expert to stay safe. A few consistent habits block the large majority of common threats such as viruses, ransomware and phishing scams.
Keep everything updated
Most attacks exploit known flaws that updates have already fixed. Turn on automatic updates for Windows, your browser and your apps.
Use the built-in protection
Windows Security (Microsoft Defender) is included with Windows. Check Settings → Privacy & security → Windows Security and make sure real-time protection is on. Run a full scan occasionally.
Create strong, unique passwords
- Use a long passphrase (four or more unrelated words).
- Never reuse a password across important accounts.
- A reputable password manager can generate and store them for you.
- Turn on two-step verification wherever it is offered.
Recognize phishing
Phishing messages try to rush you into clicking a link or sharing a code. Warning signs include urgent threats, unexpected attachments, misspelled sender addresses and links that do not match the real website. When in doubt, open the company's website yourself instead of using the link.
Download software from official sources
Get apps from the Microsoft Store or the developer's official website. Avoid bundled installers that add extra programs, and read each installer screen.
Back up your files
A good backup is your best defence against ransomware and drive failure. Follow our backup guide.
Use a standard account for daily work
Day-to-day use on a standard (non-administrator) account limits the damage if something malicious runs.
If you think your PC is infected
- Disconnect from the internet.
- Run a full Windows Security scan, and an Offline scan if offered.
- Change important passwords from a different, clean device.
- Restore from backup if problems continue.