Windows security basics

Windows security is mostly habit: keep the built-in protections on, reduce the number of passwords you reuse, and verify installers before you elevate.

1. Leave Windows Security enabled

Real-time protection and SmartScreen are the baseline. Third-party tools should add coverage, not silently replace the stack unless you understand the trade-off.

2. Use a password manager

Bitwarden stores unique passwords and fills them through the browser extension. Prefer that over a spreadsheet of reused logins.

3. Keep a second-opinion scanner

Malwarebytes remains useful as an on-demand check. Premium real-time is optional; the free scan still helps after a suspicious download.

4. Browse and install carefully

A privacy-aware browser such as Mozilla Firefox reduces drive-by clutter. When you write an OS installer USB with Rufus, confirm the ISO hash and the target disk before you click Start.

Most breaches still begin with a file someone chose to run.

For the full download-to-install path, see How to Safely Download and Install Software on Windows. To inspect an installer before you elevate, use How to Check if a Windows Program Is Safe Before Installing It.