Click: How to Secure a Windows PC

This updated guide examines Click: How to Secure a Windows PC and organizes the essential facts, background, and practical takeaways in clear American English.

Method 1of 10:

Creating a Strong Password

1. Avoid using obvious words and character combinations. Securing a PC begins with a good password. Passwords like 1234abcd, password1, and ilovemydog are too predictable and easy to guess. Use a mixture of capital and lowercase letters, numbers, and symbols to make your password difficult to crack.
2. Create a unique password that's only for your Windows 10 PC. Once you've created a secure password, it can be tempting to use it across multiple platforms. If a hacker cracks that password on any platform, every account and device you own could be compromised, including your Windows 10 PC. Ensure that your passwords are different for each service, like Hulu, Netflix, Facebook, and others.
   • Many browsers and platforms now suggest pre-generated passwords that are far more complex than anything humans will create. If you're using an app that suggests a password, it's a good idea to accept the recommended password.
3. Use a password manager like LastPass and 1Password. These services store your passwords and automatically fill password fields in web pages, programs, and apps. They can even beef up your current passwords during the setup process.
4. Change your passwords regularly. Even the most trustworthy sites and apps are subject to weaknesses that can leak your password. Changing your password regularly ensures that if your password is cracked at some point, it won't be useable for too long.
5. Never keep your passwords in digital notes. If a hacker gets in to your system and finds a document or note containing your list of passwords, they'll have access to all of your accounts. If you must log your password somewhere, do so on paper, and makes sure you store the paper somewhere nobody would ever think to look.

Method 2of 10:

Enabling Two-Step Authentication

1. Visithttps://account.microsoft.com/securityin your web browser. Prying eyes could watch you enter a password, remember it, and then enter it later to access your PC. With two-factor authentication in place, a second form of verification is needed to access your Microsoft account and Windows 10.
2. Log in with your Microsoft account. Use the same account name and password you use to log in to Windows 10.
3. ClickTurn onunder "Two-step verification. " It's in the blue bar that runs along the top of the page.
   • If you are prompted to verify your phone number or email address, follow the on-screen instructions to do so.
4. ClickSet up two-step verification.
5. ClickNextto continue.
6. Write down your recovery code and clickNext. Keep this code in a safe place in case you lose access to your second device.
7. Configure your second device. To do this, select your mobile platform and follow the on-screen instructions to replace your current on-phone Microsoft password with a pre-generated code.
8. ClickFinishto save your changes. The next time you log into your Microsoft account, you'll receive a verification code on your phone or tablet that you'll have to verify. As long as you have access to that device, you'll be able to log in securely.

Method 3of 10:

Using Windows Hello to Sign In

1. Open your Windows Settings. You'll find it in your Start menu. Passwords are both old-school and annoying to remember, especially when you're juggling more than a handful. As an alternative, you can create a PIN, use a fingerprint, or scan your face to log in. You'll also find a Security Key option that replaces password entry with a physical device.
2. ClickUpdate & Security. It's the icon of two curved arrows.
3. ClickWindows Securityin the left panel.
4. ClickAccount Protectionin the right panel. It's under the "Protection areas" header. This opens a new window.
5. ClickManage sign-in optionsin the right panel. It's under the "Windows Hello" header.
6. ClickWindows Hello Faceto set up facial recognition. If you see "This option is currently unavailable," your PC doesn't support this feature. But if it does, follow the on-screen instructions to set up facial recognition.
   • This option is convenient, but requires you to position your face just as Windows Hello captured it in the original scan.
7. ClickWindows Hello Fingerprintto set up fingerprint unlocking. This method is pretty secure, but you could run into problems if you have a cut or burn on the scanned fingertip. If you see "This option is currently unavailable," your PC doesn't support this feature. But if it does, follow the on-screen instructions to scan your fingerprint.
8. ClickWindows Hello PINto create a brief PIN. This is an easy entry way into Windows 10, though spying eyes could see you enter the digits. You should only do this if you feel confident that nobody will ever see you enter your PIN.
9. Click theSecurity Keyto set up a physical security key. This option will help you set up your physical security key, like the USB-based YubiKey 5 or Yubico's Security Key series.

Method 4of 10:

Requiring a Password when Waking from Sleep

1. Open your Windows Settings. You'll find it in your Start menu.
   • Use this method to make sure login credentials must be entered each time the PC wakes from sleep mode. This prevents people from moving the mouse or hitting a key to gain instant access to the sleeping system.
2. ClickAccounts. It's the option with the outline of a person's head and shoulders.
3. ClickSign-in optionsin the left panel.
4. SelectWhen PC wakes up from sleepfrom the "Require sign-in method. " It's near the top of the right panel. Now that you've selected this option, your PC will require your default sign-in method (e.g., password, facial recognition) each time it wakes from sleep.

Method 5of 10:

Managing Security and Firewall Settings

1. Open your Windows Settings. You'll find it in your Start menu.
   • Windows 10 ships with a suite of security features spanning antivirus protection, a firewall, browser control, and more. This method teaches you where these features reside.
2. ClickUpdate & Security. It's the option with two curved arrows.
3. ClickWindows Securityin the left panel. This displays a list of protection areas in the right panel.
4. ClickVirus & threat protection. It's at the top of the right panel. This opens the Windows Security window.
5. ClickManage settingsunder "Virus & threat protection settings. " You may have to scroll down a bit to find it.
6. Toggle all available options to the On (blue) position. Some or all may already be turned on, but if not, make sure you enable them now.
7. ClickFirewall & network protectionin the left panel.
8. Turn on the firewall for all available networks. All three network types should be protected by firewalls. If a network is set to "Firewall is off," click it and select the option to turn it on.
   • You usually won't have to make any adjustments, as Windows Defender does a good job managing inbound and outbound network traffic on its own. Still, there may be cases when you need to alter network connections. For example, you've installed a game and accidentally hit No when prompted by Windows Defender to approve network access. If you do need to make adjustments, such as allowing or denying apps and services on specific ports, click Advanced settings near the bottom of the right panel to access your settings.
9. ClickApp & browser controlin the left panel. It's near the middle of the menu.
10. Adjust all settings in the right panel as desired. The first three are set to Warn by default, which means if a threat is detected, you'll be prompted to block it manually. This is usually good enough, however, if you're being bombarded with warnings, you may want to set one or more of these options to Block automatically.
    • Be careful, as sometimes safe apps can be incorrectly flagged as unsafe and be blocked automatically.
11. Install Windows Defender Application Guard for isolated browsing in Edge. This step is only required if you're using Windows 10 Professional and want to make sure your users are fully protected when using the Microsoft Edge web browser. To do so:^[1]
    • Click Install Windows Defender Application Guard under the "Isolated browsing" heading in the right panel.
    • Select both Hyper-V and Windows Defender Application Guard .
    • Click OK and follow the on-screen instructions to restart the system.

Method 6of 10:

Keeping the PC Up-to-Date

1. Check for updates that haven't yet been installed. Although Windows 10 is set up to automatically download and install updates, there may be a gap between the update's release date and the time it takes to get to your PC. If you've heard about a new update being released or are experiencing issues with your PC, try checking for an update using these steps:
   • Typeupdateinto the Windows Search bar. If you don't see the search bar next to the Start menu, click the magnifying glass icon.
   • Click Check for updates in the search results.
   • Click the Check for updates button at the top of the right panel.
   • If an update is found, it will begin downloading immediately. You can keep working in other apps during the download.
   • Once the download is complete, you'll be prompted to restart your computer. If you're not ready to restart just yet, click OK to schedule the reboot for a time you won't be using the computer. Otherwise, click Restart Now to reboot and complete the update.
2. Restrict updates to certain hours. You can defer updates if needed so Windows 10 doesn't reboot for updates at the wrong time. This change could delay important security updates from being promptly installed, but it could also help you prevent unexpected data loss if your computer is shut down in the middle of your work. Here's how to set this up:
   • Open the Start menu and click Settings .
   • Click Update & Security . It's the icon of two curved arrows.
   • Click Change active hours in the right panel.
   • Select the hours you are normally using your computer. The time period you enter should be when you do not want Windows to perform automatic updates.
   • Click Save and then Change to accept your changes.
   • If you'd prefer Windows to determine the best time to run updates, slide the "Automatically adjust active hours for this device based on activity" to the On position.
3. Delay new updates by a specific time period. You should only do this if you have a reason to suspect an update is going to harm your PC. Why delay updates if they're important? For compatibility and stability reasons. Sometimes updates don't work as planned despite Microsoft's best intentions. That's due to the overall Windows 10 ecosystem spanning thousands of hardware, software, and app configurations. Here's how to delay new updates:
   • Click the Start menu and select Settings .
   • Click Update & Security .
   • Click Advanced Options in the right panel.
   • Slide the "Update notifications" switch to the On position.
   • Scroll down to "Choose when updates are installed" and select the number of deferred days from each drop-down menu.
     • Feature update: These typically arrive twice a year bringing new features and improvements. Try not to delay these more than a week.
     • Quality update: Contains security updates and OS patches. The sooner you install these, the better. It's best not to delay these updates for more than a few days.
4. Use your PC manufacturer's software to update your drivers. PC manufacturers typically install software that scans your system to detect outdated drivers. For example, Dell supplies its SupportAssist program on Alienware PCs to scan for outdated drivers, hardware and performance issues, and more. If you have something similar installed on your PC, make a habit of running it at least once a month.
   • Updated drivers typically mean better performance, as they're continuously tweaked to make the most out of your installed hardware. They're also updated to remove flaws that could translate into gateways for hackers.
5. Update the apps on your PC. Although many apps are capable of updating themselves, some require you to perform a few steps from within the program. Here are a few examples:
   • Google Chrome: In Chrome, click the three-dot menu at the top-right corner, select Help , and then About Google Chrome . If an update is available, it will install now. Once it's complete, you'll be prompted to click Relaunch .
   • Microsoft Office: Most Office products are updated through Windows Update, but you can customize your update preferences in any of the Office apps. Just click the File menu, select Account , and then choose Update Options to view and change your options.
   • Microsoft Store: Apps you've installed from the Microsoft Store are configured to update automatically unless you've chosen a different option. To check your preferences, open the Microsoft Store app, click the three-dot menu at the top-right corner, and then select Settings . If "Update apps automatically" is not already set to the On/blue position, toggle the switch now.

Method 7of 10:

Changing Account Privileges

1. Open your Windows Settings. You'll find it in your Start menu.
   • Windows 10 provides four account types: Administrator, Standard, Child, and Guest. Use this method to downgrade any Administrator-level account to a lower level, and/or block users from signing in to the computer.
   • Typically, all new accounts (after the PC owner) default to the Standard User mode.
2. ClickAccounts. It's the option with the outline of a person's head and shoulders.
3. ClickFamily & other usersin the left panel. It's near the bottom of the option list.
4. Block an account from logging in to the PC. You'll see the user list in the right panel. If you don't want one of these users to be able to access the computer, click their account and select Block .
   • To allow a user to sign in, select their account and click Allow .
5. Change an account's access level. To change an account from an Administrator to a Standard User, follow these steps:
   • Select the account in the right panel.
   • Click Change account type .
   • Select Standard User from the menu.
   • Click OK .

Method 8of 10:

Preventing Non-Administrators from Installing Apps

1. Typeedit group policyinto the Windows Search bar. If you don't see the search bar next to the Start menu, click the magnifying glass icon to make it appear.
   • This feature is only available on Pro and Enterprise editions of Windows.
2. ClickEdit group policyin the search results. This opens the Local Group Policy Editor window.
3. Expand theComputer Configurationgroup in the left panel. If the group is already expanded you can skip this step.
4. Expand theAdminstrative Templatesfolder. It's in the left panel.
5. Expand theWindows Componentsfolder. It's in the left panel.
6. 

   FAQ

   What is Click: How to Secure a Windows PC about?

   It provides a structured overview of click, explains the main context, and highlights practical takeaways for readers.

   Why does this topic matter?

   Understanding the main concepts helps readers evaluate the issue, avoid common mistakes, and make better-informed decisions.

   How should readers use this information?

   Use the guidance as a practical starting point, confirm details that may have changed, and follow current product, safety, or security recommendations.