How To Protect Files From Ransomware in Windows 11 & 10

Learn how to activate and configure the built-in ransomware protection in Windows 11 and Windows 10.

Ransomware attacks are devastating. Though viruses, malware, and other forms of computer attacks are undoubtedly problematic and create a real headache, you can at least recover your system data most of the time. But with ransomware, all your files are encrypted, and you must pay a ransom, often in the form of cryptocurrency, to at least have hope of decrypting and getting back access to your own files.

Thankfully, both Windows 11 and Windows 10 have built-in protection against ransomware through the Windows Security (also known as Windows Defender). Once enabled, you can add all your important folders to it, and it will protect them from unauthorized changes. In this quick and easy guide, I will show you the steps to enable ransomware in Windows 11 & 10 to protect your files and data. Let’s get started.

Before You Start

• Administrator rights are required to enable and configure ransomware protection in Windows 11 and Windows 10.
• If you are using a third-party antivirus, you cannot enable the ransomware protection in Windows Security.

Enable Ransomware Protection in Windows 11 & 10

You can enable and configure ransomware protection, also called Controlled Folder Access, using the Windows Security app. Here’s how to do it.

1. Press the “Windows key” on your keyboard to open the Start menu.
2. Search for and open “Windows Security“.
3. Click “Virus & threat protection“.
4. Click the “Manage ransomware protection” link on the right page.
5. Turn ON the “Controlled folder access” toggle.
6. Click the “Protect folders” link.
7. Click the “Add a protected folder” button.
8. Select the folder with the files you want to protect.
9. Click the “Select folder” button.
10. The folder is instantly added to the Controlled Folder Access list.
11. If you have more folders, add them similarly.
12. With that, you’ve protected all your important data against ransomware.

Detailed Steps (With Screenshots)

First thing, open the Windows Security app. You can do that by searching for “Windows Security” in the Start menu. Alternatively, open the Settings app, go to the “Privacy & security” > “Windows Security” page, and click the “Open Windows Security” button.

Once it opens, click the “Virus & threat protection” tab on the sidebar. Next, scroll down the right panel and click the “Manage ransomware protection” link under the “Ransomware Protection” section.

Here, turn ON the “Controlled Folder Access“. Next, click the “Protected folder” link.

Related: Fix the Controlled Folder Access option not available

Next, click the “Add a protected folder” button.

The above action opens the Browse window. Here, select the folder that you want to protect and then click the “Select folder” button.

That’s it. The folder is added to the Controlled Folder Access list. From now on, the folder is protected. That means it is safe from ransomware. In fact, no program can access or modify that specific folder(s) without your authorization. When needed, you can manually allow an app through Controlled Folder Access.

If you have any questions or need help, comment below. I’ll be happy to assist.