How To Turn On Secure Boot In Windows 11: A Step-by-Step Guide

Home » How-To

Edgar Nicov

How-To

5 min. read

Published on November 6, 2025

Fix Windows errors with Fortect:
Fortect can repair common computer errors by scanning your entire system for damaged or missing OS files and replacing them with the original, working versions. Optimize your PC in 3 simple steps:

Download and Install Fortect on your PC
Use the PC Scan feature to look up any Windows issues (including drivers)
Right-click on Repair, and fix it within a few minutes.

Besides that, it helps you clean up junk files, fix stability problems, and get rid of annoying programs and malware traces.

Secure Boot is a crucial security feature in Windows 11 that helps protect your computer from malware and unauthorized operating systems during the startup process. By ensuring that only trusted software can run at boot, Secure Boot adds a significant layer of defense against rootkits and other boot-level threats. This guide will walk you through the process of enabling Secure Boot on your Windows 11 system.

Enabling Secure Boot can seem daunting, but it’s a straightforward process when you follow the right steps. This guide will provide clear, easy-to-understand instructions to help you enable Secure Boot, ensuring your system is protected from potential threats. Let’s get started!

What Are The Steps To Enable Secure Boot?

Check Secure Boot Status

Before attempting to enable Secure Boot, it’s essential to verify its current status.

Press the Windows key + R to open the Run dialog box.
Type “msinfo32” and press Enter to open the System Information window.
In the System Information window, look for “Secure Boot State“. If it says “Enabled“, Secure Boot is already active. If it says “Disabled” or “Unsupported“, proceed with the following steps.

Access UEFI (BIOS) Settings

To enable Secure Boot, you need to access your computer’s UEFI (BIOS) settings. The method for accessing UEFI settings varies depending on your computer’s manufacturer.

Restart your computer.
As your computer restarts, look for a message indicating which key to press to enter the setup menu (e.g., Del, F2, F12, Esc). This message usually appears briefly during the boot process.
Press the indicated key repeatedly until the UEFI (BIOS) settings menu appears.

Locate Secure Boot Settings

Once you’re in the UEFI (BIOS) settings, navigate to the Secure Boot options.

Use the arrow keys to navigate through the UEFI menu. Look for options such as “Boot“, “Security“, or “Authentication“. The exact location of Secure Boot settings varies depending on the motherboard manufacturer.
Look for a setting labeled “Secure Boot“. It may be under a submenu like “Boot Options” or “Security Features“.
If Secure Boot is disabled, change the setting to “Enabled“.

Set Boot Mode to UEFI

Secure Boot requires the system to boot in UEFI mode. If your system is in Legacy or CSM (Compatibility Support Module) mode, you’ll need to switch to UEFI.

In the UEFI (BIOS) settings, look for a “Boot Mode” or “Boot Option Filter” setting.
Change the setting from “Legacy“, “CSM“, or “BIOS” to “UEFI“.

Enable CSM (Compatibility Support Module) if needed

If you can’t find the Secure Boot option, you may need to disable CSM (Compatibility Support Module) first.

In the UEFI (BIOS) settings, look for “CSM Support” or “Compatibility Support Module“.
Set the option to “Disabled“.
Save the changes and restart your computer.

Save and Exit UEFI Settings

After enabling Secure Boot and setting the boot mode to UEFI, save your changes and exit the UEFI settings.

Look for an option like “Save & Exit” or “Exit Saving Changes“.
Select the option and confirm your choice.
Your computer will restart.

Verify Secure Boot is Enabled

After restarting, verify that Secure Boot is now enabled.

Press Windows key + R to open the Run dialog box.
Type “msinfo32” and press Enter.
In the System Information window, check the “Secure Boot State“. It should now display “Enabled“.

Tips

Back Up Your Data: Before making changes to UEFI settings, it’s always a good idea to back up your important data.
Consult Your Motherboard Manual: Refer to your motherboard’s manual for specific instructions on accessing and configuring UEFI settings.
Check Compatibility: Ensure that your hardware and operating system are compatible with Secure Boot.
Be Careful: Incorrect UEFI settings can prevent your computer from booting. If you’re unsure about a setting, leave it at its default value.

Here’s a comparison of BIOS and UEFI:

Feature	BIOS	UEFI
Interface	Text-based	Graphical User Interface (GUI)
Boot Mode	Legacy	UEFI
Security	Limited	Secure Boot
Partitioning Scheme	Master Boot Record (MBR)	GUID Partition Table (GPT)
Size Limit	2TB	No practical limit
Mouse Support	No	Yes
Driver Support	16-bit real mode drivers	32-bit or 64-bit drivers

Securing Your System with Secure Boot

Enabling Secure Boot is a significant step in protecting your Windows 11 system from boot-level threats. By following these steps, you can ensure that your computer only runs trusted software during startup, enhancing your overall security posture.

FAQ

What happens if Secure Boot is disabled? If Secure Boot is disabled, your computer is more vulnerable to malware and unauthorized operating systems during startup.

Can I enable Secure Boot after installing Windows 11? Yes, you can enable Secure Boot after installing Windows 11, but it’s easier to enable it before installation.

Does Secure Boot affect performance? Secure Boot has minimal impact on performance. The security benefits outweigh any potential performance drawbacks.

What if I can’t find the Secure Boot option in UEFI? Ensure that your system is in UEFI mode and that CSM is disabled. If the option is still missing, consult your motherboard manual.

Will Secure Boot prevent all malware? No, Secure Boot is just one layer of security. You still need to use antivirus software and practice safe computing habits.