Do You Need Antivirus on Windows 11? (Probably Not. Here’s What to Do Instead)

Published: Updated:

Short answer: for most people, no. Microsoft Defender (built into Windows 11 and 10 as “Windows Security”) consistently scores at or near the top of independent lab tests from AV-TEST and AV-Comparatives, and it’s free, light and always up to date. What matters more is keeping Windows updated, using a password manager with two-factor authentication, and having backups. Paid antivirus is optional, not essential.

Make sure Windows Security is on

  1. Open Start → Windows Security.
  2. Every tile should show a green tick: Virus & threat protection, Account protection, Firewall & network protection, App & browser control, Device security.
  3. Under Virus & threat protection → Manage settings, check that Real-time protection, Cloud-delivered protection and Tamper Protection are on.
  4. Under Ransomware protection, consider turning on Controlled folder access to protect Documents and Pictures from ransomware.
  5. Under App & browser control, keep Reputation-based protection (SmartScreen) on.

The security basics that matter more than antivirus

  • Install updates promptly. Most attacks exploit known holes that updates already fixed, in Windows, your browser and apps.
  • Use a password manager (Bitwarden, 1Password, or the one built into your browser) and unique passwords everywhere.
  • Turn on two-factor authentication, or passkeys, for email, banking and your Microsoft/Apple/Google account.
  • Download software only from official sites or the Microsoft Store. Avoid “free” cracked software and fake download buttons.
  • Be suspicious of urgent emails, texts and pop-ups. Phishing is now a bigger threat than viruses. Microsoft and Apple never cold-call you about a “virus”, and a pop-up with a support phone number is always a scam.
  • Back up your files to the cloud and an external drive, so ransomware or a dead laptop can’t take them.

When third-party antivirus might make sense

  • You want extras bundled in one subscription (VPN, identity monitoring, parental controls).
  • You’re less confident spotting scams and want more aggressive web filtering.
  • A family member needs simple, centralised protection across several devices.

If you do buy one, stick to established names with strong independent test results (for example Bitdefender, Norton or ESET), and run only one real-time antivirus. Two at once cause slowdowns and conflicts. Windows Defender switches itself off automatically when another antivirus is installed.

Remove the trial antivirus that came with your laptop

Many new laptops ship with a 30-day McAfee or Norton trial that then nags you to pay. If you don’t want it, uninstall it from Settings → Apps → Installed apps, then use the vendor’s removal tool (McAfee’s MCPR tool or Norton Remove and Reinstall) to clear leftovers. Windows Security turns back on automatically.

Think you’re infected?

  1. Disconnect from the internet if you see ransomware or a fake “your PC is locked” screen.
  2. Run Windows Security → Virus & threat protection → Scan options → Microsoft Defender Offline scan.
  3. Check Installed apps and browser extensions for anything you didn’t install.
  4. From a different device, change the passwords for your email and important accounts.
  5. If problems continue, back up your files and reset Windows.

What about Macs and Chromebooks?

macOS includes XProtect, Gatekeeper and automatic security updates. Most Mac users don’t need extra antivirus, but the same anti-phishing advice applies. ChromeOS is sandboxed and verified at boot, so antivirus isn’t needed.

You may also like