Not all Windows users should enable Secure Boot

Secure Boot is a Windows security feature that most people don’t even know they have enabled. It protects your PC from malware before the machine fully boots, but this level of security can cause problems in certain situations. Most people first hear about Secure Boot when trying to play the latest multiplayer games, as most of them won’t let you log in without enabling it. Changing Secure Boot settings requires access to your PC’s BIOS, which is intimidating for non-tech-savvy users.

You can set the Secure Boot settings once and forget all about it once you’re able to load into “Battlefield 6” or “Valorant,” but there are actually a few situations where you’ll need to disable Secure Boot. Older hardware configurations may have compatibility issues with Secure Boot, for example, and dual booting a secondary operating system like Linux is difficult when it is enabled. Disabling it, however, comes with serious security drawbacks, so it’s best to take things on a case-by-case basis.

Setting up Secure Boot on Windows 11 only takes a few minutes. First, you can check if it is already enabled on your computer by pressing Windows + R to open Run. Next, type “msinfo32” and click OK to display a system information menu. If the Secure Boot state is enabled, it means that it is already operational. To enable Secure Boot, you will need to access your system’s BIOS. This is where you’ll find the basic settings that are important for your machine, so don’t change anything unless you know what you’re doing.

You can access your BIOS by restarting your PC and pressing a specific key like F2 or Delete (each manufacturer’s settings are different) while your device restarts. In the BIOS, look for the boot menu or something similar – each major motherboard brand uses different naming schemes. Most BIOS interfaces also have a search function, so you can simply search for “Secure Boot” to find the necessary settings. Set Secure Boot to enabled, then save and exit. Your PC will then restart with Secure Boot enabled.

Most Windows users will want to enable Secure Boot to maximize their device security and play the latest AAA games, but there are several reasons why people keep it disabled. For example, it can block programs with unsigned drivers. This isn’t a problem for the average Windows user browsing the web, but advanced users trying to use applications like LatencyMon to troubleshoot performance issues will need to temporarily disable Secure Boot. Another reason people disable Secure Boot on Windows is dual booting with a second operating system, usually Linux.

Most popular Linux distributions do not support Secure Boot, so compatibility issues may appear during the installation process. Some popular Linux distributions like Linux Mint work with it, but even then compatibility is spotty. Additionally, there may be compatibility issues with older hardware configurations and operating systems due to expired certificates, making operating systems like Windows 10 less secure. Microsoft always releases updates to protect these systems, but it’s not as simple as downloading the latest Windows update: there are a few extra steps to follow.