Windows Security · 7 min read
How to Secure a New Windows PC in 20 Minutes
A new PC is at its most secure and its most neglected on day one. Twenty minutes of setup now prevents most of what people later pay to fix.
Published 2026-08-09 · Last updated 2026-08-09
1. Update everything before anything else
Run Windows Update repeatedly until it reports no further updates, including optional driver updates and firmware where offered. A machine that sat in a warehouse for six months is missing six months of patches.
2. Configure Windows Security
Confirm real-time and cloud-delivered protection are on, enable controlled folder access, turn on reputation-based protection including potentially unwanted app blocking, and verify memory integrity under Core isolation.
3. Deal with the OEM trial
Most retail PCs ship with a McAfee or Norton trial. Decide deliberately: activate and pay, or uninstall it with the vendor's removal tool so Defender takes over cleanly. Leaving an expired trial in place is the worst outcome, because it keeps Defender disabled while no longer updating.
4. Encryption and accounts
Turn on BitLocker or Device Encryption. Create a standard user account for daily use rather than running as administrator. Set a unique password on your Microsoft account and enable multi-factor authentication.
5. Browser and backup
Install a modern browser with a reputable content blocker, and set up either OneDrive folder backup or an external drive schedule. Then test a restore once.
- Windows Update run to completion
- Controlled folder access enabled
- OEM antivirus trial resolved
- Device encryption on
- Standard (non-admin) daily account
- Backup configured and tested
Frequently asked questions
- Should I remove the pre-installed antivirus trial?
- Either activate it or remove it properly with the vendor's tool. An expired trial leaves Defender disabled and provides no protection.
- Do I need to buy antivirus for a new PC?
- No. Complete this checklist first, then decide whether any paid feature is missing for you.