Windows 11 security: how to manage and increase security in the new operating system

Windows 11 was born with the idea of inherent security for every operation, from those in the background to the activities visible on the surface: Microsoft’s idea is to provide a secure operating system for the user in every situation.

However, it is also true that the concept of security is very complex, and, due to obvious human and technical limitations, it isn’t possible to implement absolute security, because this would mean limiting the user's ability to act in a way that would probably be damaging, not to mention that absolute security is a purely theoretical term and only valid for a specific time frame.

So the Redmond company's direction for ensuring security on Windows 11 is to keep a system running that monitors all computer routines and, through other ancillary systems, modulates the user's actions as needed, while maintaining a high level of attention to the problems detected by other PCs.

Windows Security

Starting from the principle that security should be a constant reality but not an obstacle, already with Windows 10, Microsoft introduced Windows Security, an App built into the operating system which, based on user-defined settings, keeps track of what is happening within the system to block any unauthorized activity.

Although the first instinct of the user who doesn’t want to be bothered would be to go to Windows Security preferences and turn on all the options, a more balanced approach will probably offer better results, especially for users using dated applications.

We recommend to check the standard settings offered by the system and evaluate making changes only when they are warranted or become necessary: for managed computers this is not typically the responsibility of the user, who doesn’t have to worry about that.

On the other hand, it is important for the user to constantly monitor the Windows Security interface to understand the source of some problems and take timely action: remember that a green flag means that a particular aspect is working properly, yellow that it needs to be investigated, and red indicates a critical problem that the user needs to resolve promptly.

Update and Upgrade for Windows 11 Security

No operating system or the like can continue to function without updates, especially if it is connected to the Internet, because in our world we are seeing continuous and profound changes to technology in all respects, and the software running on devices (PCs and not only: smartphones and accessories as well) must adapt accordingly.

Many end users, who only use the PC for some specific tasks, would like their device to remain unchanged throughout its life, so that they don’t have to spend more time on it than necessary, time that seems wasted. Nevertheless, security is an item that should never be underestimated, and continued support from the parent company is necessary, as well as included in the price.

Within Windows, particularly on Windows 11, upgrades and updates are delegated to the Windows Update panel within Settings: here you can check all required updates, activate them, and even suspend updating activity for a certain period, as well as decide whether to apply all updates or only the mandatory ones.

Since the release date of Windows 11, Microsoft has decided that the qualitative upgrades, which are the largest and involve changes in functionality within the operating system, will no longer be two per year but only one: this is to make it easier for users and companies in hybrid work, for whom upgrades of this type can pose a difficulty.

Otherwise, quantitative updates are typically applied every second Tuesday of the month, although Microsoft might send an update for a time-critical vulnerability outside the regular calendar.

To keep the level of security high on Windows 11, keeping the device up-to-date is a priority, for all users: it’s not just an extra bonus you get when purchasing the device. Software such as Windows 7, Office 2010 for Windows, and Office 2016 for Mac that have gone into EOS (End of Support) will continue to work, but are no longer supported by Microsoft and as such are no longer considered “secure”; as a result, they are in a suboptimal situation from a legal standpoint as well, given that the GDPR and other regulations in the realm of security and privacy have moved in the direction that only secure software should be used in businesses.

Windows 11 security: private content

After we've gone through how to prevent unexpected behavior for one's PC and how to keep it safe (while also improving its functionality), let's explore a little-known, but extremely important aspect for both security generally and keeping one's content safe: encryption.

All PCs running Windows 10 and 11 Pro have BitLocker software integrated, basically a program that allows you to encrypt the data inside your device's hard drives and make it accessible only to the actual user of the computer.

This allows one to safeguard the contents of one's computer in case of loss or theft, where the hardware is compromised, but the data will still remain hidden from those who possess the device. Remember that from a business perspective, the contents of a PC often far exceed the value of the PC itself.

To activate BitLocker, in case this is not already active, just open the Encrypt Device module inside Privacy and Security in Settings, and from there activate the software (which should be activated by default anyway).

BitLocker allows encryption of both the internal drive (or multiple internal drives for Desktop models) and external drives, from removable USB-A, USB-C or Thunderbolt drives to simple USB flash drives. This possibility makes the program much more interesting, because it protects some of the most critical aspects, such as the portability of files via removable drives, which by their nature are more prone to loss, theft or leaks, while using BitLocker the data will remain safe regardless.

We note that Windows 11 Pro can handle drives encrypted with BitLocker in read and write mode, while Windows 11 Home can use them only in read mode (while other operating systems such as macOS can also handle drives using BitLocker via third-party utilities).