---
title: Windows operating system security
description: Securing the operating system includes system security, encryption, network security, and threat protection.
ms.reviewer: 
manager: dansimp
ms.author: deniseb
ms.prod: w10
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
author: denisebmsft
---

# Windows operating system security

*This article provides an overview of operating system security in Windows 11.*

Security and privacy depend on an operating system that guards your system and information from the moment it starts up, providing fundamental chip-to-cloud protection. Windows 11 is the most secure Windows yet with extensive security measures designed to help keep you safe. These measures include built-in advanced encryption and data protection, robust network and system security, and intelligent safeguards against ever-evolving threats. 

Use the links in the following table to learn more about the operating system security features and capabilities in Windows 11:<br/><br/>

| Security Measures | Features & Capabilities |
|:---|:---|
| System security | [Trusted Boot](trusted-boot.md) (includes Secure Boot and Measured Boot) <br/><br/>[Cryptography and certificate management](cryptography-certificate-mgmt.md) <br/><br/>[Windows Security app](windows-security-app.md) |
| Encryption and data protection | [Encryption and data protection in Windows 11](encryption-data-protection.md)<br/><br/>[Encryption](encryption-data-protection.md)<br/><br/>[BitLocker](information-protection/bitlocker/bitlocker-overview.md) |
| Network security | [Virtual Private Networks](identity-protection/vpn/vpn-guide.md) (VPNs)<br/><br/>[Windows Defender Firewall with advanced security](threat-protection/windows-firewall/windows-firewall-with-advanced-security.md)<br/><br/>Bluetooth (NEEDED)<br/><br/>Domain Name System (DNS) security (NEEDED)<br/><br/>Windows Wi-Fi (NEEDED)<br/><br/>Transport Layer Security (TLS) (NEEDED) |
| Protection from viruses and threats | [Microsoft Defender Antivirus](/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-windows)<br/><br/>[Attack surface reduction rules](/microsoft-365/security/defender-endpoint/attack-surface-reduction)<br/><br/>[Tamper protection](/microsoft-365/security/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection)<br/><br/>[Network protection](/microsoft-365/security/defender-endpoint/network-protection)<br/><br/>[Controlled folder access](/microsoft-365/security/defender-endpoint/controlled-folders)<br/><br/>[Exploit protection](/microsoft-365/security/defender-endpoint/exploit-protection)<br/><br/>Integration with [Microsoft Defender for Endpoint](/microsoft-365/security/defender-endpoint) for additional threat protection |