How to Enable Secure Boot in Windows 10 and Windows 11

Secure Boot is a security feature that helps protect your computer from malware that might load during startup. It verifies the digital signatures of programs and drivers to ensure their authenticity, preventing suspicious applications from running. In this guide, we’ll walk you through enabling Secure Boot in Windows 10 and Windows 11.

Checking the Status of Secure Boot

Before enabling Secure Boot, it’s a good idea to check if it’s already turned off. Follow these steps:

  1. Open Windows Settings and navigate to Update & Security.
  2. Select Recovery and, under Advanced startup, click Restart now.
  3. After the system restarts, choose Troubleshoot > Advanced options > UEFI Firmware Settings.
  4. Go to your BIOS/UEFI settings and find the Secure Boot section to check its status.

How to Enable Secure Boot in Windows 10 and Windows 11

To enable Secure Boot, you’ll need to access your system’s BIOS/UEFI. The process may vary slightly depending on your computer’s manufacturer, but the general steps are as follows:

Step 1: Restart and Enter BIOS/UEFI

  1. Restart your computer.
  2. During startup, press the required key (usually F2, F10, Delete, or Esc) to enter BIOS/UEFI. If unsure, refer to your device’s manual or check the documentation.

Step 2: Locate Secure Boot Settings

  1. In BIOS/UEFI, go to the Boot or Security section.
  2. Find the Secure Boot option.

Step 3: Enable Secure Boot

  1. Ensure that the Boot Mode is set to UEFI rather than Legacy.
  2. Switch the Secure Boot status to Enabled.
  3. Save the changes by selecting Save & Exit or a similar option to save settings and exit BIOS/UEFI.

Completing the Process and Verifying Secure Boot

After exiting BIOS/UEFI, the system will restart. To confirm that Secure Boot is now enabled, repeat the initial steps to check its status. If Secure Boot is enabled, your computer is protected from unauthorized modifications during startup.

Possible Issues and Solutions

In some cases, Secure Boot may be unavailable due to the following reasons:

  • Your computer is set to Legacy BIOS mode instead of UEFI. You may need to change this setting, but be cautious—switching modes might require reinstalling Windows.
  • Some older devices may not support Secure Boot. In this case, enabling this feature won’t be possible.

By following these straightforward steps, you can secure your system and ensure a safer boot process. Enabling Secure Boot is an essential step for enhancing your computer’s security in today’s digital environment.