When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
We strongly recommend specifying the encryption method.
By default, BitLocker uses XTS-AES-128.
Secure your Windows 11 PC with these 6 steps.
you might opt XTS-AES-256 for stronger security.
Use AES-CBC 256-bit for removable drives so it is more compatible with other devices.
“This policy setting allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption.
Check if your encryption is 128-bit or 256-bit.
This policy setting is applied when you turn on BitLocker.
For fixed and operating system drives, we recommend that you use the XTS-AES algorithm.
when you obtain the correct options selected, go ahead and hit apply and close out the group policy.
Look for the “Choose drive encryption method and cipher strength” option.
Now you’re free to follow our guide onHow to configure BitLocker encryption on Windows 11.
It is worth doing a double check and making sure they are all turned on and functioning.
Some of the features may require a PC restart to be completely enabled.
XTS-AES-256 for operating system drives and fixed drives. Use AES-CBC 256-bit for removable drives so it is more compatible with other devices.
It is good to know why each of them is important.
What is virus and threat protection in Windows Security?
What is account protection in Windows Security?
All 5 of these options should be green in Windows Security for Windows 11.
Firewall & data pipe protection is vital to protect your gear from being directly accessed by malicious external devices.
Microsoft is always updating their Firewall controls to protect from new and emerging threats.
What is app & net online gate control in Windows Security?
Use Windows Backup to preserve your files and settings in case of your PC ever becomes unrecoverable due to an infection or being lost/stolen.
What is machine protection in Windows Security?
It sequesters your most important and powerful functions that can be hijacked by low-level drivers.
Use Windows Backup to preserve your files and options
What is Windows Backup?
Browse to: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
Delete the Windows 11 page file at every shutdown
What is the page file?
So, how do we double-check to scrub the page file at every shutdown?
Let’s take a look.
Double-click on ClearPageFileAtShutdown
It is always best practice to back up the registry before making changes.
Download the Windows 11 security baseline
What is a Windows security baseline?
Microsoft offers a free security baseline for its different operating system versions.
Change the 0 to 1 in this pop-up window.
This is more pervasive than a simple security update.
This is a sweeping change to security configs and policies.
Here are the steps to harden this security feature.
Go to the scripts folder.
There you have it.
6 steps you’re free to take today to improve the security of your Windows 11 PC.
Click on the Security option to open the drop-down menu.
Under User Account Controls, click on Change Settings.
Drag the slider to the top option for “Always Notify."
