You can lower the risk of malware by keeping your operating system and apps updated, leaving browser warnings and download checks on, and using your device’s built-in security features. These settings reduce exposure to known threats, but no single switch catches every new attack. Start with the protections for your device below, and treat unexpected installers, update prompts, and requests to bypass a warning as reasons to stop and verify.
What settings help prevent malware?
Use several layers rather than relying on one browser setting. Keep your operating system, browser, and apps current; retain their built-in checks for unsafe sites, downloads, and apps; and install software only when you intended to install it and obtained it from a trusted source. Microsoft’s guidance is to “Keep your device up-to-date with the latest updates for Windows, your browser, and your apps.” Restart when an update requires it so installation can finish.
- Updates: reduce exposure to known security gaps.
- Browser protections: warn about or block some known deceptive sites and dangerous downloads.
- Operating-system protections: check downloaded apps or monitor harmful behavior, depending on the platform.
- Your choices: avoid unexpected software and do not casually bypass security warnings.
These features have different scopes and data practices; they are layers of protection, not a guarantee against infection. Menu names and availability may vary by operating-system version, region, or device-management policy.
How do I make Windows safer?
Windows 10 and 11 include security settings in Windows Security. Keep a reputable antivirus provider active, review app and browser protections, and install Windows and app updates promptly.
#1 Best Overall
Review app and browser protection
- Open Windows Security > App & browser control.
- Review reputation-based protection and Microsoft Defender SmartScreen settings for apps, files, websites, and Edge downloads. Leave relevant warnings and checks enabled.
- Do not assume Smart App Control is available on every Windows 11 PC. Microsoft says it is limited to new installations or eligible reset/reinstall situations; it is not a general switch available to all Windows 11 users.
Exploit protection is already active with default settings for most users. Avoid changing advanced options unless you understand the effect or are following trusted guidance for a specific issue. Microsoft explains App & browser control and its availability.
Check antivirus and intelligence updates
- Open Windows Security > Virus & threat protection.
- Confirm Microsoft Defender Antivirus or your existing reputable security provider is active.
- Check that protection intelligence is current. Windows downloads intelligence updates through Windows Update; Windows Security also offers a manual check.
Do not run multiple real-time antivirus products without checking how they interact. For details on status and updates, see Microsoft’s Virus & threat protection guide.
Rank #2
Consider Controlled folder access
Controlled folder access can help prevent unknown apps from changing files in protected folders. If it blocks an app you trust and need, verify the app came from its legitimate publisher before allowing it; do not approve an unexpected program merely to clear a prompt. Microsoft describes the feature in its guidance for protecting a PC from unwanted software.
Which browser security settings should I turn on?
Keep the browser’s built-in checks enabled. They can warn about known phishing pages, deceptive sites, or dangerous downloads, but a newly created threat may not yet be recognized. A warning is a reason to pause, not an obstacle to click through automatically.
Chrome: check Safe Browsing
- Open Settings > Privacy and security > Security.
- Confirm Safe Browsing is enabled. Standard protection is on by default and addresses known dangers.
- Choose Enhanced protection only if its additional checks suit your privacy preferences.
Enhanced protection can warn about potential new dangers, including sites and downloads not previously known to Google. In return, it sends additional information for security checks, including URLs and a small sample of page content, extension activity, download information, and system information. Standard protection and Enhanced protection therefore are not equivalent in data sharing. Chrome also blocks downloads it identifies as dangerous; take its download warnings seriously rather than disabling protection under pressure. See Chrome’s Safe Browsing options and its explanation of download warnings.
Edge: keep SmartScreen on
Leave Microsoft Defender SmartScreen enabled. It checks pages and downloads against reported phishing and malicious software, and may warn about or block known dangerous sites and downloads. See Microsoft’s explanation of SmartScreen in Edge.
Rank #4
Firefox: retain dangerous-content and download checks
- Open Settings > Privacy & Security > Security.
- Keep Block dangerous and deceptive content and Block dangerous downloads selected.
- Keep the warning for unwanted and uncommon software enabled.
Mozilla says these protections are enabled by default unless changed. Its Firefox security guide describes what they cover.
Safari: heed deceptive-site and connection warnings
If Safari flags a site as deceptive, malicious, or potentially harmful, Apple recommends not visiting it. Do not enter personal or financial information on a page marked “Not Secure.” Check the address carefully and navigate to the legitimate site yourself rather than following an unsolicited link. Apple explains these warnings in its Safari guidance on avoiding fraud.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsWhat operating-system protections should I use on Mac and Android?
Mac: retain Gatekeeper checks
macOS Gatekeeper checks downloaded apps, plug-ins, and installers for developer identity and notarisation. In System Settings > Privacy & Security > Security, Apple documents the options App Store or App Store and identified developers. Treat a message that Apple cannot verify an app as meaningful: confirm the app and its publisher through an official source rather than casually overriding the warning. See Apple’s instructions for safely opening apps on Mac (published June 1, 2026).
Android: leave Google Play Protect on
- Open Play Store > profile > Play Protect > Settings.
- Keep Play Protect enabled.
Google says Play Protect checks apps and devices for harmful behavior and may warn about, disable, or remove harmful apps. Its protections may process device connections, potentially harmful URLs, operating-system details, and installed-app information. Review Google Play Protect’s safety and privacy details.
Chrome on Android also provides warnings about unsafe sites; Google documents how to manage those warnings. Keep them enabled rather than treating a warning as proof that a site is safe to visit after all.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should I do when a warning appears?
- Unexpected update prompt: close it and check for updates through the operating system’s settings or the software publisher’s official site. Mozilla warns that fake update notices can be designed to install malware.
- Unfamiliar installer or extension: do not open or install it unless you deliberately sought it and verified its source.
- Browser blocks a download: do not disable protection just because a site says the file is necessary. Verify the publisher and obtain the file through an official channel.
- Security warning may be a false positive: verify with the software publisher or your organization’s IT support. Do not follow contact details or links presented by an unsolicited warning.
Apple advises against visiting sites Safari identifies as deceptive or malicious. A request to bypass a browser or operating-system warning is not itself evidence that the file or site is legitimate.
How do these protections differ?
| Protection | What it checks | Typical response | Availability or data consideration |
|---|---|---|---|
| Chrome Safe Browsing | Websites and downloads | Warns about known or potential dangers; Chrome blocks downloads it identifies as dangerous. | Standard is on by default. Enhanced adds checks and sends additional browsing, download, extension, and system information to Google. |
| Edge SmartScreen | Pages and downloads | May warn about or block known dangerous sites or downloads. | Built into Edge; see Microsoft’s SmartScreen description. |
| Firefox protections | Deceptive content, dangerous downloads, unwanted or uncommon software | Blocks or warns, depending on the protection. | Mozilla says the listed protections are enabled by default unless changed. |
| macOS Gatekeeper | Downloaded apps, plug-ins, and installers | Checks developer identity and notarisation; may prevent opening an app that cannot be verified. | Apple documents App Store-only or App Store and identified developer settings. |
| Google Play Protect | Apps and device behavior | May warn, disable, or remove harmful apps. | May process device connections, potentially harmful URLs, OS details, and installed-app information. |
| Windows Defender and reputation protections | Malware, apps, files, websites, and (with Controlled folder access) changes to protected folders | Can detect or warn about threats and restrict unknown apps’ access to protected files. | Smart App Control availability is limited on Windows 11; SmartScreen and other settings depend on Windows configuration. |
The tools are not directly interchangeable: some focus on browsing, others on downloaded or installed software, antivirus detection, or file changes. Choose based on your device and keep the relevant protections active rather than assuming one vendor feature is categorically best.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
