A Windows 10/11 Security Checklist

Think in Terms of Three Layers

It's tempting to think "as long as I have antivirus, I'm covered," but a Windows PC's security actually spans three distinct layers.

1. The PC layer: Preventing malware from running or intruding
2. The file layer: Noticing tampering or deletion of important data
3. The network layer: Understanding the vulnerability of the devices on your home network itself

Here's what to check in each layer.

1. The PC Layer

• Set Windows Update to automatic, and restart periodically to apply updates
• Confirm antivirus real-time protection (Windows Defender or a third-party product) is enabled
• Keep the other software you use up to date as well
• Don't open attachments or links from suspicious emails
• Avoid using an administrator account for everyday work (use a standard user account)

2. The File Layer

• Back up important files using the 3-2-1 rule (3 copies, 2 different media types, 1 offsite)
• Verify your backup destination won't be caught up in a ransomware infection on your PC (an always-connected external drive alone risks being encrypted or deleted too)
• Use a tamper detection tool for especially important folders so you can notice changes in real time

3. The Network Layer

• Change your router admin password from the default
• Confirm Wi-Fi encryption is at least WPA2 (WPA3 preferred)
• Check whether your router's firmware is up to date and hasn't reached end-of-life (EOL)
• Regularly check for known vulnerabilities (CVEs) with a vulnerability scanning tool
• Disable UPnP and remote management features you don't use

Do an Annual Review

Security isn't a "set it once and forget it" task. We recommend reviewing this checklist about once a year: uninstalling software you no longer use, revisiting your passwords, and testing that your backups actually restore.

Summary

Thinking in terms of "your PC," "your files," and "your network" makes it easier to notice risks that antivirus alone can't cover. ShieldGuard, ShieldGuard EDR, and ShieldGuard NET each address one of these layers and can be purchased individually as needed.