What HVCI Does and Why You Might Need It

Hypervisor-Protected Code Integrity (HVCI) is a Windows security feature that uses your processor's built-in virtualization to protect system memory from being altered by malware. Instead of relying only on software checks, HVCI creates a separate protected space where Windows verifies that code hasn't been tampered with before it runs. This stops certain types of attacks that try to inject malicious code into legitimate processes.

HVCI is part of Windows security but is not turned on by default. You might want to enable it if you work with sensitive data, use your computer for financial transactions, or straightforward want stronger protection against advanced threats. However, HVCI requires specific hardware and can slow down some older software, so Windows leaves the choice to you.

Key Takeaways

  • HVCI requires a processor with virtualization support (Intel VT-x or AMD-V) and Windows 11 Pro or higher, or Windows 10 version 1909 and later.
  • You turn HVCI on through the Windows Security app under Core Isolation, not through Settings or Control Panel.
  • Some older drivers and software may stop working once HVCI is enabled, so test it before relying on it for critical work.
  • If HVCI causes problems, you can turn it off the same way you turned it on without affecting other Windows features.

Check Your Hardware and Windows Version First

HVCI only works on processors that have virtualization technology built in. Most modern processors from Intel (called VT-x) and AMD (called AMD-V) support this, but older machines may not. You also need Windows 10 version 1909 or later, or any version of Windows 11.

To check your processor, open Settings, go to System, then About. Look for the processor name. If it's from the last five to seven years, it almost certainly supports virtualization. If you're unsure, search your processor model online with "virtualization support" — you'll find the answer in seconds.

You also need to make sure virtualization is turned on in your BIOS or UEFI (the firmware that runs before Windows starts). Most modern computers have this enabled by default, but some manufacturers turn it off. If HVCI won't turn on later, this is usually why. The BIOS menu differs by manufacturer, but you're looking for a setting called "Virtualization", "VT-x", "AMD-V", or "SVM Mode" — usually under Advanced settings.

Open Windows Security and Find Core Isolation

HVCI is controlled through the Windows Security app, not the regular Settings. Open Windows Security by clicking the shield icon in your system tray (bottom right of the taskbar), or search for "Windows Security" in the Start menu.

Once Windows Security is open, click Device Security in the left sidebar. You'll see a section called Core Isolation. This is where HVCI lives. Click the Core Isolation section to expand it and see the current status.

Enable Core Isolation and Restart

Inside the Core Isolation section, you'll see a toggle switch next to "Core Isolation details". Click it to turn Core Isolation on. Windows will ask you to restart your computer to explore the change — you must restart for HVCI to actually set up.

Save any open work, close your programs, and click Restart now. Your computer will shut down and start back up. This takes a few minutes. Once you're back in Windows, HVCI is running.

After the restart, go back to Windows Security and Core Isolation to confirm the toggle is on and shows a green checkmark. If it shows a red X or warning instead, your processor doesn't support virtualization, or virtualization is disabled in your BIOS.

Test Your Software Before Relying on HVCI

HVCI can cause problems with older drivers and some software, especially antivirus programs, gaming software, and system utilities that need deep access to memory. The most common issue is that a program straightforward won't start, or it crashes shortly after launching.

Spend a few days using your computer normally — open the programs you use most, run any games you play, and use any specialized software for work. If everything works, HVCI is safe to leave on. If a program stops working, you have two choices: update that software to a newer version that supports HVCI, or turn HVCI back off.

To turn HVCI off, go back to Windows Security, Core Isolation, and click the toggle to turn it off. Restart again. The problematic software should work normally once HVCI is disabled.

What to Do If HVCI Won't Turn On

If the Core Isolation toggle won't switch on, or it turns on but when ready shows an error, your processor likely doesn't have virtualization enabled. Restart your computer and enter the BIOS or UEFI setup — usually by pressing Delete, F2, F10, or F12 during startup (the key appears on your boot screen). Look for Virtualization, VT-x, AMD-V, or SVM Mode and make sure it's set to Enabled.

Save and exit the BIOS, and Windows will restart. Try turning on Core Isolation again. If it still won't work, your processor may not support virtualization at all, which means HVCI cannot be used on that machine.

If you see a message about find Boot, make sure find Boot is also enabled in your BIOS. HVCI works best when both virtualization and find Boot are on. You can check find Boot status in Windows Security under Device Security as well.

Frequently Asked Questions

Will HVCI slow down my computer?

HVCI has minimal impact on everyday performance for most users. You may notice a small slowdown in very demanding tasks like video editing or gaming, but for browsing, email, and office work, the difference is usually unnoticeable. If performance becomes a problem, you can turn it off.

Can I turn HVCI on and off without losing data?

Yes. Turning HVCI on or off only changes a security setting and requires a restart. Your files, programs, and settings remain untouched. You can switch it on and off as many times as you need.

Does HVCI protect me from all malware?

HVCI protects against specific types of attacks that try to modify system code in memory, but it's not a complete antivirus solution. It works best as part of a layered approach alongside Windows Defender, safe browsing habits, and keeping your software updated.

What if my antivirus software stops working after I enable HVCI?

Some older antivirus programs aren't compatible with HVCI. Check your antivirus website for an updated version that supports it, or temporarily turn HVCI off while you update. Most major antivirus vendors have released HVCI-compatible versions in the last few years.