Why you might want to disable Windows Defender

Windows Defender is the built-in antivirus program that runs automatically on Windows 11. It scans files, monitors downloads, and blocks suspected threats without asking permission first. Most people leave it on — it catches real problems and runs quietly in the background.

You might want to disable it temporarily if you're installing software that Defender keeps blocking (even though you trust it), if you're running a different antivirus program that conflicts with it, or if you're testing something and need Defender out of the way. Disabling it is a choice you can reverse at any time.

Before you turn it off, understand the trade-off: your computer will have no active antivirus protection while Defender is disabled. That means malware, ransomware, or other threats could install without warning. If you disable it, do it only for as long as you need to, and turn it back on when ready after.

Key Takeaways

  • You can disable Windows Defender temporarily through Settings, but Windows 11 will turn it back on automatically after a restart or after a period of time.
  • Disabling Defender leaves your computer unprotected against malware, so only turn it off when you have a specific reason and plan to turn it back on soon.
  • If you want to run a different antivirus program instead, you can uninstall Defender entirely, but this requires administrator access and a restart.
  • Real-time protection is the easiest setting to toggle off if you just need Defender to stop blocking a single file or read.

Disable real-time protection temporarily

The quickest way to stop Defender from scanning and blocking things is to turn off real-time protection. This is the setting that watches files as you read and open them. Open the Settings app (press Windows key + I), then go to Privacy & Security on the left side, then Windows Security.

Click "Virus & threat protection" in the list. Under "Virus & threat protection settings," you'll see a toggle for "Real-time protection." Click it to turn it off. Windows will ask you to confirm — click "Yes" to proceed.

Real-time protection will stay off until you turn it back on manually, or until Windows restarts. After a restart, Defender automatically turns real-time protection back on. If you restart your computer and Defender is still off, Windows may have re-enabled it on its own.

Disable Windows Defender entirely through Group Policy

If you want to disable Defender completely rather than just real-time protection, you can use Group Policy Editor — but this only works on Windows 11 Pro, Enterprise, or Education editions. Home edition does not have Group Policy Editor.

Press Windows key + R to open the Run dialog, type gpedit.msc, and press Enter. Navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus. Find the policy called "Turn off Microsoft Defender Antivirus" and double-click it.

Select "Enabled" and click OK. You'll need to restart your computer for the change to take effect. After the restart, Defender will be disabled. To turn it back on, return to the same policy and select "Not Configured" or "Disabled," then restart again.

Uninstall Windows Defender if you're using different antivirus software

If you've installed a third-party antivirus program (like Norton, McAfee, or Bitdefender) and want to remove Defender entirely instead of just disabling it, you can uninstall it through Settings. Go to Settings > Apps > Apps & features, search for "Windows Defender," and click the three dots next to it, then select "Uninstall."

Windows will ask for administrator confirmation. Click "Yes" to proceed. You'll need to restart your computer to complete the uninstall. After the restart, Defender will no longer be installed on your system.

Be aware that Windows Update may reinstall Defender automatically in future updates, especially if your third-party antivirus program stops running or is removed. If that happens, you can uninstall it again using the same method.

What happens when Defender is off

With Defender disabled or uninstalled, your computer has no active antivirus protection. That means files you read, programs you install, and websites you visit are not being scanned for threats. If you accidentally read malware or visit a malicious website, nothing will stop it from running.

Windows will display a notification in the system tray (bottom right corner) telling you that virus protection is off. This is a reminder, not a blocker — you can dismiss it and continue working, but the warning stays visible until you turn Defender back on.

If you're using a different antivirus program, that program should be running in the background instead. Check your system tray to confirm the other antivirus is active and up to date. If both Defender and another antivirus are off, your computer is unprotected.

Turn Windows Defender back on

To re-enable real-time protection, go back to Settings > Privacy & Security > Windows Security > Virus & threat protection. Click the toggle for "Real-time protection" to turn it back on. The toggle will switch when ready, and Defender will resume scanning.

If you disabled Defender through Group Policy, open Group Policy Editor again (Windows key + R, type gpedit.msc), navigate to the same policy, select "Not Configured," and restart your computer.

If you uninstalled Defender, you can reinstall it by going to Settings > Apps > Optional features, clicking "Add a feature," searching for "Windows Defender," and selecting it. After installation, restart your computer. Defender will be back and running on the next startup.

Why Defender keeps turning itself back on

Windows 11 is designed to keep Defender running because it's the default protection. If you disable it and then restart your computer, Windows may automatically turn it back on. This is intentional — Microsoft wants your computer protected by default.

If you've disabled Defender through Settings and it keeps turning back on after restart, that's normal behavior. Windows restarts Defender to may support your system stays protected. If you need Defender off for longer than a single session, use Group Policy (Pro/Enterprise/Education only) or install a different antivirus program that will take over protection duties.

Frequently Asked Questions

Will my computer get a virus if I disable Windows Defender?

Not automatically — but your computer has no active protection while Defender is off. If you read infected files or visit malicious websites, nothing will stop the threat from running. The risk depends on what you do while Defender is disabled. If you're just installing trusted software for a few minutes, the risk is low. If you browse unfamiliar websites or read files from untrusted sources, the risk is much higher.

Can I disable Defender on Windows 11 Home edition?

You can turn off real-time protection through Settings, but Windows will turn it back on after a restart. You cannot permanently disable Defender on Home edition without using workarounds that may conflict with Windows updates. If you need Defender off long-term, consider upgrading to Pro edition or installing a different antivirus program.

What's the difference between disabling and uninstalling Windows Defender?

Disabling turns off the protection but leaves the program installed — you can turn it back on anytime. Uninstalling removes the program entirely from your computer. Uninstalling is more permanent, but Windows may reinstall Defender during future updates. Disabling is reversible and simpler if you only need Defender off temporarily.

If I install Norton or McAfee, do I have to disable Windows Defender?

Most third-party antivirus programs will disable Defender automatically when they install, or they'll ask you to disable it during setup. Running two antivirus programs at the same time can slow your computer and cause conflicts. Check your antivirus program's documentation to see whether it handles Defender automatically or if you need to disable it manually.

How do I know if Windows Defender is actually off?

Check the system tray (bottom right corner of your screen). If Defender is off, you'll see a notification icon and a message saying virus protection is off. You can also go to Settings > Privacy & Security > Windows Security > Virus & threat protection and look at the status of "Real-time protection" — it will show as "Off" if disabled.