---
title: Windows operating system security
description: Securing the operating system includes system security, encryption, network security, and threat protection.
ms.reviewer: 
ms.topic: article
manager: dansimp
ms.author: deniseb
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
author: denisebmsft
ms.collection: M365-security-compliance
ms.prod: m365-security
ms.technology: windows-sec
---

# Windows operating system security

*This article provides an overview of operating system security in Windows 11.*

Security and privacy depend on an operating system that guards your system and information from the moment it starts up, providing fundamental chip-to-cloud protection. Windows 11 is the most secure Windows yet with extensive security measures designed to help keep you safe. These measures include built-in advanced encryption and data protection, robust network and system security, and intelligent safeguards against ever-evolving threats. 

Use the links in the following table to learn more about the operating system security features and capabilities in Windows 11: |  |

| Security Measures | Features & Capabilities | Description |
|:---|:---|
| System security | [Trusted Boot](trusted-boot.md) (includes Secure Boot and Measured Boot) |    | 
|   | [Cryptography and certificate management](cryptography-certificate-mgmt.md) |   |
|   | [Windows Security app](threat-protection/windows-defender-security-center/windows-defender-security-center.md) |  |
| Encryption and data protection | [Encryption and data protection in Windows 11](encryption-data-protection.md) |  |
|   | [Encryption](encryption-data-protection.md) |  |
|   | [BitLocker](information-protection/bitlocker/bitlocker-overview.md) | |
| Network security | [Virtual Private Networks](identity-protection/vpn/vpn-guide.md) (VPNs) |  | 
|  | [Windows Defender Firewall with advanced security](threat-protection/windows-firewall/windows-firewall-with-advanced-security.md) |  |
|  | Bluetooth (NEEDED) |  |
|  | Domain Name System (DNS) security (NEEDED) |  |
|  | Windows Wi-Fi (NEEDED) |  |
|  | Transport Layer Security (TLS) (NEEDED) |  |
| Protection from viruses and threats | [Microsoft Defender Antivirus](/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows) |  |
|  | [Attack surface reduction rules](/microsoft-365/security/defender-endpoint/attack-surface-reduction) |  |
|  | [Tamper protection](/microsoft-365/security/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection) |  |
|  | [Network protection](/microsoft-365/security/defender-endpoint/network-protection) |  |
|  | [Controlled folder access](/microsoft-365/security/defender-endpoint/controlled-folders) |  |
|  | [Exploit protection](/microsoft-365/security/defender-endpoint/exploit-protection) |  |
|  | Integration with [Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint) for additional threat protection |