Features that make Windows 11 the most secure version of Windows ever

David Weston, Microsoft's Director of Enterprise and Operating System Security, said that the fundamental security standard raised by Windows 11 is guaranteed to be secure right from the design stage. Despite many objections, especially from old computer users, Microsoft believes that it is necessary for Windows 11 to require TPM 2.0 support.

TPM is a key component that provides security through Windows Hello and BitLocker. In addition, Windows 11 also follows the Zero Trust security model that Microsoft developed for a long time.

Regarding CPUs, Microsoft says Windows 11 will only support relatively new CPUs with security features including virtualization-based security (VBS), code integrity protection with hypervisor technology (HVCI). ) and Secure Boot. Besides, based on certain hardware, Windows 11 can also protect the execution stack by hardware with the support of the Microsoft Pluton security chip, which Microsoft is always proud of.

With Windows 11, Microsoft once again wants users to completely remove passwords. IT administrators can enable Windows Hello for Business feature in their company or organization. Meanwhile, consumers can enjoy a password-free experience as soon as they install Windows 11 or purchase a Windows 11 pre-installed machine.

Microsoft shared that all of the hardware-level security measures on Windows 11 will work in tandem without affecting performance. At the same time, Microsoft claims that computers with protected processor cores will have better security because they are more resistant to attacks on firmware.

Finally, Windows 11 has built-in support for Azure-based Microsoft Azure Attestation (MAA).