Windows · Privacy & Encryption
Microsoft Defender Antivirus for Windows
Built-in, free real-time antivirus included with every Windows 11 and Windows 10 installation, automatically active whenever no other antivirus is installed.
Updated August 9, 2026 · Reviewed by SoftNexi Editorial Team, Software research and documentation
Overview
Microsoft Defender Antivirus is the antivirus engine built into Windows 11 and Windows 10, managed through the Windows Security app. It runs automatically at no extra cost and requires no separate download or installation — it's already there. When you install a third-party antivirus, Defender's real-time engine automatically steps aside to avoid conflicts, and it automatically re-activates if that third-party product is removed or its subscription lapses.
Independent lab results (AV-Test, AV-Comparatives) have shown Defender performing competitively with many paid antivirus products in recent years, a significant change from its reputation a decade ago. It integrates with other built-in Windows security features — Smart App Control, Controlled Folder Access for ransomware protection, and Windows Firewall — under the same Windows Security interface.
Its main limitations compared to paid suites are fewer bundled extras (no VPN, password manager, or identity monitoring built in) and a simpler management interface without some of the granular controls power users get from third-party products. For most home users who practice reasonably careful browsing habits, Defender alone is considered adequate baseline protection by many security professionals, though opinions vary and higher-risk users may still want a supplemental on-demand scanner.
Because it's already installed and free, there is no separate 'download' step for most users — this record documents how it works and how to manage it rather than pointing to an installer.
Key features
- Free real-time antivirus and anti-malware protection built into Windows
- Automatically activates when no other antivirus is installed, and steps aside when one is
- Controlled Folder Access for ransomware protection on chosen folders
- Integrated with Windows Firewall and Smart App Control under Windows Security
- Cloud-delivered protection for faster response to new threats
- No account, subscription, or separate license required
System requirements
- Operating system
- Included with Windows 11 and Windows 10; no separate install needed
- Management
- Configured through the built-in Windows Security app
- Internet connection
- Required for definition updates via Windows Update
How to install Microsoft Defender Antivirus
1. Open Windows Security
Search for 'Windows Security' in the Start menu; Defender is already active by default.
2. Check protection status
Confirm real-time protection is on and no third-party antivirus is also claiming to be active.
3. Enable Controlled Folder Access
Turn this on under Virus & threat protection settings if you want ransomware protection for specific folders.
4. Keep Windows Update on
Definition and engine updates arrive through Windows Update, so keep it enabled.
How to use it
1. Run a quick or full scan
Use Windows Security's scan options if you suspect an issue, even though real-time protection runs continuously.
2. Review threat history
Check Protection History for anything Defender has already caught and quarantined.
3. Add exclusions carefully
Only exclude files or folders you fully trust, since exclusions weaken real-time coverage.
Safety and privacy
- Defender is already installed with Windows; you do not need to download it from a third-party site — be wary of any 'Defender download' offered outside Microsoft's own domains.
- If you install a third-party antivirus, confirm in Windows Security which engine is currently active to avoid confusion about which product is protecting you.
- Bundled software
- None — it is a built-in Windows component, not a separate installable bundle.
- Privacy
- Defender uses cloud-delivered protection and sends file reputation data to Microsoft for detection purposes; this can be adjusted in Windows Security's privacy settings. Review Microsoft's privacy documentation for details.
Known risks
- Fewer bundled extras than paid suites (no built-in VPN or password manager).
- Some advanced configuration (exclusions, ASR rules) is easier to manage via Group Policy or Intune in managed environments than through the consumer UI.
What's new
Current release
Defender's engine and definitions update automatically through Windows Update. Check Microsoft's own Windows Security support documentation for feature-level changes.
Pros and cons
Pros
- Free and already installed, no download required
- Competitive independent lab results in recent years
- No subscription, account, or upsell prompts
- Automatically manages handoff with third-party antivirus products
Cons
- No bundled VPN, password manager, or identity monitoring
- Fewer granular controls than some paid suites
- Advanced configuration is easier in managed/enterprise environments than for home users
- Marketing-driven third-party suites may outperform it on specific lab metrics in some test rounds
Verdict
Microsoft Defender is a genuinely solid, free baseline for most Windows users and requires no action beyond keeping Windows updated. Consider a paid suite only if you specifically want bundled extras like a VPN or identity monitoring, or a supplemental on-demand scanner like Malwarebytes for periodic second opinions.
Frequently asked questions
Does Microsoft Defender support Windows 11?
Yes. Defender is built into Windows 11 and Windows 10 and requires no separate installation on either.
Where do I download Microsoft Defender?
There is nothing to download — it ships with Windows and is managed through the built-in Windows Security app. Be wary of any 'Defender download' offered outside Microsoft's own domains.
Is Microsoft Defender free?
Yes. It is included with every Windows 11 and Windows 10 license at no extra cost, with no subscription or upsell.
Does Microsoft Defender send data to Microsoft?
It uses cloud-delivered protection, which sends file reputation data to Microsoft for detection purposes; this can be adjusted in Windows Security's privacy settings.
What doesn't Microsoft Defender cover?
It does not include a bundled VPN, password manager, or identity monitoring, and its configuration options are simpler than those in some paid third-party suites.