How to turn on Microsoft Windows’ built-in ransomware protection

Ransomware is nasty stuff. This type of malware encrypts the files on your PC so that you cannot access them unless you pay the attacker to unlock the data. In other words, your files are held hostage unless you can pay the ransom. Survive a ransomware attack Use other means.

The best way to protect against ransomware is to avoid visiting ransomware-laden websites and downloads, but you can also take other protective measures. Modern antivirus software often restricts which applications can change files in folders typically targeted by ransomware. Microsoft Defender built into Windows can also do this. (Microsoft changed the name of Windows Defender a few years ago, but it’s the same program.) Some antivirus suites also run automatic backups in case you need to restore your files.

What’s the gain? Unlike third-party antivirus software, these additional protections are no It’s on by default in Microsoft Defender. You must enable them yourself.

further reading: PCWorld’s picks for the best antivirus software.

How to turn on ransomware protection in Windows

Step One: Turn on Windows Security

Open the Windows Security application on your computer. You can access it in one of several ways:

• Press Alt + Spacebar on the keyboard and enter Windows Securitythen press Enter
• Open the Start menu and enter Windows Securitythen press Enter
• Open your Settings app and select Windows Security in left pane

Step 2: Find your ransomware settings

In the Windows Security app, click Virus and threat protection. Then click Manage ransomware protection at the bottom of the screen.

Next, turn on Controlled folder access. This setting restricts applications from accessing your computer’s default OneDrive, Documents, Pictures, Videos, Music, and Favorites folders. You can also manually add additional folders to the list.

Not all applications are blocked from these areas in Windows – Microsoft Office programs are automatically allowed to open and change files. But if it’s not in Microsoft’s internal list of trusted applications, the program can’t see anything in those folders unless explicit permission is granted in Windows Security.

Further reading: Is Windows 11’s built-in antivirus enough for the average person?

Step 3: Make sure you are logged in to OneDrive

Restricting access to files and folders does not fully protect them. Another important defense is to take good backups, which Windows does automatically if you log into OneDrive. (You can connect your Microsoft account to your entire Windows PC, or just to the OneDrive app.)

To confirm that this protection is on, you can view Ransomware Protection > Ransomware Data Recovery.

Of course, to prevent the most severe impact of ransomware, the safest way to back up your files is offline. You should also make a copy of anything you store in the cloud — if you only have one copy of your data, you’re not backing it up properly after all.

Should you turn on ransomware protection in Windows?

Security and convenience are at opposite ends of the spectrum, and that’s true here too. Controlling folder access in Windows can keep attackers away from your important folders, but it can also be a bit inconvenient. For example, gamers may find that the default may block access to save files because they are typically saved in the Files folder.

You can fix this with minimal work – add the application to your access list. Or store the game files in another folder on your computer that does not have controlled access. (You simply use third-party software to schedule regular backups.)

Also protects your Windows PC from other online threats

For more information about Windows security (and its different components) you can check out Overview of our videos on YouTube. If you prefer more sophisticated software and extra protection, you may also consider upgrading your antivirus software. For example, Norton 360 Deluxe EditionIt is our current antivirus software of choice, bundling powerful malware protection with features like VPN, password manager, profile darknet monitoring, and more. It can help simplify the process of staying safe online.

Finally, if you’re interested in learning more about ransomware protection, check out our separate guide How to prevent (or survive) a ransomware attack.

Editor’s note: This article has been updated to include links to other helpful resources related to ransomware and general security.