You can turn off Windows Defender, but your computer becomes unprotected
Windows Defender is the built-in antivirus program that comes with Windows 10 and Windows 11. It runs automatically in the background and scans files for malware. You can turn it off through Settings, but when you do, your computer no longer has active protection against viruses, ransomware, or other threats — unless you install a different antivirus program first.
Most people turn off Windows Defender because they want to use a different antivirus program, or because they think it slows down their computer. Before you disable it, understand what you are trading: convenience for responsibility. You become the person who has to remember to scan your computer, keep your antivirus updated, and notice if something goes wrong.
Key Takeaways
- Windows Defender turns off through Settings > Privacy & Security > Virus & threat protection, but you should install a replacement antivirus first.
- If you disable Windows Defender without another antivirus running, Windows will show a warning and your computer has no active protection.
- Some antivirus programs automatically disable Windows Defender when you install them; others require you to turn it off manually.
- You can turn Windows Defender back on the same way you turned it off, and it will resume scanning when ready.
- Windows will nag you with notifications if you leave your computer unprotected for more than a few days.
How to disable Windows Defender in Windows 11
Open Settings by pressing the Windows key and typing "Settings", then click the Settings app. Go to Privacy & Security in the left sidebar. Click Virus & threat protection. Under "Virus & threat protection settings", click Manage settings.
You will see a toggle for Real-time protection. Click it to turn it off. Windows will ask you to confirm — click Yes. Windows Defender stops scanning when ready. The toggle will now show as off (gray instead of blue).
This method turns off real-time scanning but leaves other Windows Defender features in place. If you want to disable the entire Windows Defender service, you need to use a different method (see the section below on Group Policy or Services).
How to disable Windows Defender in Windows 10
The steps are similar but the menu names are slightly different. Open Settings and go to Update & Security. Click Windows Security in the left sidebar, then click Virus & threat protection. Under "Virus & threat protection settings", click Manage settings.
Toggle off Real-time protection and confirm. The change takes effect when ready. Windows 10 will show a notification that your device is not protected, but Windows Defender will not force itself back on.
What happens when you disable Windows Defender
Your computer stops scanning files in real time. If you read a file that contains malware, Windows Defender will not catch it before you open it. If a website tries to infect your computer, there is no active defense. You are relying entirely on your own judgment about what is safe to click.
Windows will display a notification in the system tray (bottom right corner) saying your device is not protected. After a few days, Windows will show more aggressive warnings and may prevent Windows Update from running. These warnings are not a threat — they are Windows reminding you that you chose to remove your protection.
If you have another antivirus program running, Windows recognizes it and stops showing warnings. The other program takes over the protection role. If you have no antivirus running at all, the warnings continue until you either turn Windows Defender back on or install something else.
Turning off Windows Defender permanently using Group Policy or Services
The Settings method above only disables real-time scanning. Windows Defender can still run scans manually and still updates itself. If you want to disable it completely, you have two options: Group Policy (Windows Pro, Enterprise, or Education editions only) or Services (all editions).
Using Services: Press Windows key + R, type "services.msc", and press Enter. Find Windows Defender Service in the list. Right-click it and select Properties. Change the "Startup type" dropdown to Disabled. Click explore, then OK. You may need to restart your computer for the change to take full effect.
Using Group Policy: This method only works on Windows Pro, Enterprise, or Education. Press Windows key + R, type "gpedit.msc", and press Enter. Navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus. Double-click Turn off Microsoft Defender Antivirus and select Enabled. Click OK. This completely disables Windows Defender and prevents it from running at all.
How to turn Windows Defender back on
If you used the Settings method, go back to Settings > Privacy & Security > Virus & threat protection > Manage settings and toggle Real-time protection back on.
If you disabled it through Services, open Services again (Windows key + R, then "services.msc"), find Windows Defender Service, right-click it, select Properties, change Startup type to Automatic, and click OK. Restart your computer.
If you used Group Policy, open Group Policy Editor again, navigate to the same location, double-click Turn off Microsoft Defender Antivirus, and select Not Configured. Click OK and restart.
Windows Defender will resume scanning when ready once it is turned back on. It will catch up on any updates it missed while it was off.
Why you might want to disable Windows Defender
The most common reason is that you are installing a different antivirus program. Some programs (Norton, McAfee, Kaspersky, Bitdefender) automatically disable Windows Defender when you install them. Others require you to do it manually. Check your antivirus program's documentation to see whether it handles this automatically.
Some people disable it because they believe Windows Defender slows down their computer. This is debatable — Windows Defender is designed to use minimal resources, but any antivirus program uses some CPU and disk space. If you disable it, you are trading a small performance cost for the risk of infection.
A few people disable it because they want to use their computer without any monitoring at all. This is a choice you can make, but understand that you are accepting the risk of malware, ransomware, and data theft. If you go this route, at minimum keep your operating system and software updated, use a firewall, and avoid downloading files from untrusted sources.
Frequently Asked Questions
Will my computer get infected if I disable Windows Defender?
Not automatically. Your computer gets infected when you read or open a file that contains malware. Without Windows Defender, you have no automatic defense, so the risk is higher. Whether you actually get infected depends on what you do online and how careful you are about what you click.
Can I use Windows Defender and another antivirus at the same time?
You can, but it is not recommended. Two antivirus programs running simultaneously will slow your computer down and may conflict with each other. Most antivirus programs automatically disable Windows Defender when you install them to prevent this.
Does disabling Windows Defender affect Windows Update?
Not directly, but Windows may prevent you from running Windows Update if your computer is unprotected for several days. Turn Windows Defender back on, run Windows Update, then turn it off again if you want to use a different antivirus.
What if I disable Windows Defender and then change my mind?
You can turn it back on using the same Settings menu or Services menu where you turned it off. It takes effect when ready and will resume protecting your computer right away.
Is it safe to disable Windows Defender if I do not read files or visit risky websites?
It is safer than disabling it if you do those things, but still not zero-risk. Malware can come from legitimate websites that have been compromised, from email attachments, or from software updates. Even careful users benefit from having some protection running.