How to Enable Ransomware Protection in Windows

The most useful feature in Windows 11 is disabled by default.

Windows Defender Security 11 Feat

Ransomware protection is a useful feature that comes with Windows 11 to help secure your device against ransomware attacks. However, by default, ransomware protection comes disabled on all Microsoft devices. We’ll find out why and also explore how to activate it in your security settings.

How to Activate Ransomware Protection in Windows 11

Before attempting these changes, ensure you’re using an administrator account. Guest users have no access to this feature.

  1. Click the Win button and scroll down the Start menu for the Settings tab. Click it to open the Settings menu.

Another way to do it is to find the Settings icon on pinned items or use the search bar to find “Settings”.

Start Page Screenshot
  1. Once the Settings tab launches, select “Privacy & Security”.
System Settings Page
  1. Find the “Windows Security” menu.
Windows Security
  1. Click on the “Open Windows Security” button to access ransomware settings.
Windows Security2
  1. A new window will open up. Here, click on the “Virus & Threat, Protection” menu item and scroll down to find the “Ransomware Protection” option.
Winsec1
  1. Click on “Manage Ransomware Protection” to get a list of options involving ransomware.
Winsec2
  1. Find the “Controlled Folder Access” option right pane.
Ransomware Protection
  1. Toggle the switch to enable it.
Ransomware Protection2

Ransomware Protection is now enabled. Here, you can also add (whitelist) program folders that may test as false positives in the protected folders.

How to Use a PC With Active Ransomware Protection

Once ransomware protection is activated, you’ll have to whitelist some of your favorite programs for them to gain controlled folder access. These steps will help you avoid false positives and allow you to install newer programs:

  1. Click “Allow an app through Controlled folder access” in the Controlled Folder Access window.
Ransomware Protection Allowed Apps
  1. Click “Add an allowed app”.
Controlled Folder Access
  1. Select “Browse all apps” or “Recently blocked apps” to see which Windows Security (previously known as Windows Defender)has archived or blocked.
Controlled Folder Access2
  1. Selecting “Browse all apps” opens a pop-up window that allows you to pick all executable files with the .exe extension.
  2. Under “Recently Blocked Apps”, you can remove harmful or unwanted apps, or reinstate those you wish to keep.
Controlled Folder Access3

To avoid having the ransomware protection flag useful software or apps, add them to the “Protected Folders”.

3 Reasons to Enable Ransomware Protection

Ransomware protection is a necessary feature in your Windows PC for these reasons.

1. Prevent Extortion and Exploitation

Most ransomware exploit and extort users, slowing your PC speeds, denying you access to your files, or shutting it down. Ransomware attacks can affect PCs and laptops at any organization or individual level and take your data hostage. These attacks can hurt your business, cost you money, and destroy your company reputation. Turning ransomware protection on prevents any possible attacks on your PC.

2. Protect Your Data from Loss, Corruption, Deletion, or Theft

Ransomware attacks take control of data, encrypt it, and deny you access. Besides that, they can delete your data, corrupt, or steal it.

Turning on ransomware protection on your PC helps detect and flag malicious software, deleting it before it wreaks havoc on your computer system.

Why is Ransomware Protection Disabled?

By default, the ransomware protection feature is disabled. Here’s why.

To Prevent Windows Security from Sensing False Positives

As a precaution, ransomware protection is disabled in Windows Security. This prevents Windows Security from flagging legitimate programs as false positives.

This way, many programs that require controlled folder access can perform their functions without problems.

You May Be Using a Third-Party Antivirus

Whenever you install a third-party antivirus on your PC, it automatically takes over from Windows Security (Defender). With Windows Security disabled, your new antivirus software takes over controlled folder access and protects your PC from ransomware attacks.

Your System May Already Be Compromised

When malware attacks your system, it disables your PC’s ability to protect itself. It may corrupt programs, files, registry keys, and other critical system functions. It also disables Windows Security, preventing it from scanning and removing malware.

While the attack may not necessarily be ransomware, it’s often just as bad.

Frequently Asked Questions

1. Should I turn on ransomware protection?

Yes. Keeping ransomware protection on helps protect your PC from scams and malware attacks. Ransomware protection is essential for all PC users, including those who think their data isn’t worth protecting.

Ransomware attacks are particularly nasty. For this reason, ransomware protection will secure you from extortion or data corruption attempts.

2. How can I tell if I have ransomware?

If you’ve activated ransomware protection, you’ll receive notifications every time Windows Security detects or flags Ransomware. You can visit the “Block History” section and view the harmful files your antivirus software blocked.

Like most malware, ransomware attacks will bring your PC speeds down to a crawl. So, if your computer deals with frequent hang-ups, scan your PC for a possible ransomware attack.

The primary reason for ransomware attacks is to take your data and your PC hostage. Such attacks encrypt your data, making it unusable and inaccessible unless you pay a ransom to the attackers. Other times, the attack can corrupt your data, delete it or destroy it.

3. Does ransomware steal data?

Some ransomware attacks can steal your data. Initially, attackers would hold your data ransom and extort you before returning access to it. Today, ransomware attacks can also steal your data despite you paying the ransom.

Image credit: Unsplash

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox