Security settings in windows you are not using (and hackers hope you don’t find)

I have always been crazy about PC safety. But in these years, Windows has really carried forward its game with some powerful safety features, which most people ignore.

These security settings are sitting there, unused. Even more importantly, cyber criminals are trusting them that do not find them.

4

Windows sandbox

Keeps suspicious files away from your system

Windows Sandbox creates a completely isolated virtual environment where you can test suspicious files without risking your main system.

When you download some sketches, you can run it in the first sandbox. If it is malware, the damage lies and everything is cleaned when you are done.

This feature only works on Windows 10 Pro or Windows 11 Pro, though. If you are running a home edition, then you have to rely on free online sandboxing tool instead. Here’s how to enable Windows Sandbox:

1. Press Windows + R To open the run dialog box, then type A ppwiz.cpl And hit enter,

2. Click turn Windows features on or off On the left side.

3. Check forward boxes Windows sandbox,

4. Return your computer when indicated.

In addition, Windows 11 has other ways to enable and set Windows Sandbox. Once capable, you can launch sandbox from the start menu.

It boots a clean version of Windows in seconds when you open it. You can then download that email attachment, test a software, or click on a suspicious link – if something goes wrong, just close the sandbox and the danger disappears.

Connected

Windows not working in Windows 11 to fix Sandbox

Windows Sandbox is a useful tool in any PC user toolbox, but sometimes it needs to start some help.

3

Core isolation

Prevents advanced malware in its track

The core isolation uses your computer’s hardware to create a safe obstruction around the most important processes of Windows. The main component, memory integrity, prevents hackers from injecting malicious codes in system memory, which is the favorite trick of advanced malware.

This feature uses virtue-based security (VBS) to separate sensitive operations from the rest of your system. Even if the malware manages to infiltrate your computer, it cannot tamper with protected kernel procedures. How to enable memory integrity here:

1. Press Windows + i To open the settings, navigate again Privacy & Security From the left sidebar.

2. Click Windows security Select more in the main panel Device security,

3. For look Core isolation And then togle Memory integrity,

4. Click restart now When Windows inspires you to reboot your system.

The biggest advantage of core isolation is the ability to block curnell-level attacks that can miss traditional antivirus software. This serves as part of Windows’s Built-in Defense System with your current security software.

However, there are some downside to consider. Older driver compatibility can cause problems, and you can see drops of minor performance in gaming or CPU-intensive applications. This facility also requires modern hardware with virtualization support, so older computers will not be able to use it.

If the memory integrity appears out to the togal gray, your system may require a driver update or BIOS change. With such features, Windows security is better, you do not need to install antivirus on Windows 11, although this is a matter of debate based on your browsing habits.

Connected

7 ways to fix the memory integrity facility were grayed on Windows 11

Sometimes Windows 11 will complain that memory integrity facility is disabled, despite that you do not really give a way to turn it on.

2

App and browser control

Prevents dangerous download

The app and browser control Windows has a built-in web protection system that prevents malicious download before reaching your PC. Smartscreen analyzes files, websites and apps against the danger database of Microsoft in real time.

This feature works in many layers- your browser, file download and even Microsoft Store App. When you try to download some suspects, the smartscreen throws a warning or blocks it completely.

Most people face smartscreen when it blocks legitimate software, then “Windows protected your PC” message. The temptation is to disable it, but it is exactly that hackers hope you will do it. Here is how to configure the app and browser control:

1. Open Windows security through Settings> Privacy and Safety> Windows Security,

2. Click App and browser control From the main dashboard.

3. Under reputation-based security, click Reputation-based protection settings,

4. Make sure that Check apps and files The download is on for safety.

5. Able Smartscreen for Microsoft Edge If you use edge browser.

6. Turn on Potentially unwanted app blocked To prevent bundle software.

The “potentially unwanted app blocking” setting is easy as it catches the timid toolbar installation and system optimizer that piggabacks on legitimate downloads.

Smartscreen is not correct, but it catches a stunning amount of malware that misses traditional antivirus programs. Cloud-based approach means that security updates are immediate, not during the scheduled definition update.

You can bypass smartscreen warnings for temporarily reliable software, but avoid making it a habit.

1

Controlled folder access

Ransomware block

This safety facility is the answer to Windows for ransomware attacks. The controlled folder access creates a protective shield around your most important folders, such as documents, pictures, desktops, and other, prevent unauthorized apps from changing.

This feature works on a white -white principle. Only reliable applications can modify protected folders, while everything else is blocked. When the ransomware tries to encryp your files, it hits a wall.

Ransomware usually targets the first user folders because this is the place where your valuable data remains, but the controlled folder access stops this behavior. Here’s how to enable it to Windows Settings:

1. Open Windows security through Settings> Privacy and Safety> Windows Security,

2. Navigate Virus and danger protection From the main menu.

3. Scroll down and click Manage ransomware protection,

4. Togal Controlled folder access But.

5. Click again Protected folder To see which directors are safe from default.

6. Use Allow an app through controlled folder access To allow reliable programs.

You must manually approve valid applications that want to reach the protected folders. This may seem annoying at first, but always enables ransomware security on Windows as it is one of the most effective defense against file-encrypting malware.

The feature monitors the file system activity in real time; Therefore, this approach does not rely on the malware signature. Some productivity applications can initially trigger false positivity, but you can easily add them to the permitted list.

Connected

Ransomware 2025: 6 perceives in quick tips that will protect your data

These safety strategies can protect your data without the need for technical expertise.

These security facilities are sitting in windows with all. To enable these safety, taking just ten minutes can protect you from an expensive ransomware attack or malware infection. Your future will definitely thank you.