How to Enable Secure Boot Windows 11: Step-by-Step Guide

Enabling Secure Boot on Windows 11 is essential for enhancing your system’s security. Secure Boot helps protect your computer from malicious software by only allowing trusted software to load during the boot process. This guide will walk you through the steps required to enable Secure Boot for Windows 11, ensuring your system remains safe and secure.

How to Enable Secure Boot on Windows 11

Enabling Secure Boot on Windows 11 involves accessing your system’s BIOS or UEFI settings and configuring the Secure Boot feature. This process will ensure that only authorized software can run during the startup, providing an additional layer of protection.

Step 1: Access BIOS/UEFI Settings

Restart your computer and press the designated key (usually F2, F10, Del, or Esc) during startup to enter the BIOS/UEFI settings.

Entering BIOS/UEFI requires you to press a specific key during the initial boot screen. The key varies depending on your computer’s manufacturer, so keep an eye out for a prompt on the screen or consult your user manual.

Step 2: Navigate to the Security/Boot Tab

Once in the BIOS/UEFI settings, use the arrow keys to find the Security or Boot tab.

These tabs contain settings related to your system’s boot process and security features. You might need to explore a bit, as the exact location can differ between systems.

Step 3: Enable Secure Boot

Look for the Secure Boot option and set it to Enabled.

Enabling Secure Boot is usually straightforward. Once you locate the option, use the appropriate keys (often Enter or Space) to toggle it to Enabled. Some systems might require you to confirm your choice.

Step 4: Save and Exit

Save your changes and exit the BIOS/UEFI settings by selecting the Save & Exit option or pressing F10.

Saving your changes ensures that the new settings take effect. Exiting the BIOS/UEFI will cause your computer to restart with Secure Boot enabled.

Step 5: Verify Secure Boot Status

After your computer restarts, check if Secure Boot is enabled by opening the System Information tool (type "msinfo32" in the Run dialog) and looking for Secure Boot State.

This final step confirms that Secure Boot is active. If the Secure Boot State shows as "On," you’ve successfully enabled the feature.

After completing these steps, your computer will be more secure as Secure Boot will verify the integrity of software during the boot process, preventing unauthorized or malicious software from running.

Tips for Enabling Secure Boot on Windows 11

  • Make sure your system meets the requirements for Windows 11, including TPM 2.0 and UEFI firmware.
  • Update your BIOS/UEFI firmware to the latest version before enabling Secure Boot to avoid compatibility issues.
  • If you experience issues, consult your motherboard or computer manufacturer’s support website for specific instructions.
  • Be cautious when making changes in the BIOS/UEFI settings to avoid inadvertently affecting your system’s functionality.
  • If you plan to dual-boot with another operating system, ensure it supports Secure Boot to prevent boot issues.

Frequently Asked Questions

What is Secure Boot?

Secure Boot is a security feature that ensures only trusted software can run during your computer’s startup process.

Why do I need Secure Boot for Windows 11?

Secure Boot helps protect your system from malware and unauthorized software, which is a requirement for Windows 11 to enhance security.

How do I know if Secure Boot is enabled?

You can check Secure Boot status by opening the System Information tool (msinfo32) and looking for the Secure Boot State.

What if I can’t find the Secure Boot option in BIOS/UEFI?

If the option is missing, ensure your system supports Secure Boot and update your BIOS/UEFI firmware if necessary.

Can I disable Secure Boot after enabling it?

Yes, you can disable Secure Boot by returning to the BIOS/UEFI settings and toggling the option off.


  1. Access BIOS/UEFI Settings.
  2. Navigate to the Security/Boot Tab.
  3. Enable Secure Boot.
  4. Save and Exit.
  5. Verify Secure Boot Status.


Enabling Secure Boot on Windows 11 is a straightforward yet crucial step in safeguarding your computer from unauthorized software and potential threats. By following these steps, you ensure that only trusted software runs during the boot process, providing an extra layer of security. Remember, Secure Boot is a requirement for Windows 11, and having it enabled will keep your system compliant and protected.

Taking the time to configure Secure Boot can make a significant difference in your computer’s security posture. If you’re interested in further enhancing your system’s security, consider exploring additional features like BitLocker encryption and Windows Defender. For more detailed instructions and troubleshooting, don’t hesitate to visit your computer or motherboard manufacturer’s support resources. Secure your Windows 11 system today, and enjoy a safer computing experience!