Disabling Windows Defender on Windows 11: Complete Step-by-Step Guide

If you’ve ever tried running older applications on Windows 11 or noticed performance slowdowns, you might have wondered how to disable Windows Defender. Like many users, you could run into problems with certain apps being blocked or deleted, even when you know they’re perfectly safe. Or maybe you’re just looking to install a third-party antivirus and want to avoid software conflicts. Whatever the reason, the need to turn off Microsoft Defender (the modern name for Windows Defender) is both common and surprisingly complicated.

Windows 11 tries very hard to keep its built-in security running around the clock, automatically reactivating real-time protection, and sometimes blocking even safe software. Unfortunately, this makes permanently disabling Defender a challenge for many, and the official options can seem hidden or only partially effective. This guide will walk you through every effective method—temporary and permanent—so you’re never stuck battling Microsoft’s security features to use your computer the way you want.

Should You Disable Windows Defender on Windows 11?

Microsoft Defender is generally a great, low-hassle antivirus option for the vast majority of Windows 11 users. It’s free, integrated, and provides both antivirus and firewall protection. However, there are valid reasons to consider turning it off, at least momentarily, such as:

• Compatibility. If you install a different antivirus, running two at once can lead to conflicts or doubled resource usage. Some security suites even require you to fully disable Defender first.
• Performance. On older systems or when running resource-intensive programs, Defender can cause slowdowns or take up memory and CPU you’d rather allocate elsewhere.
• Specialized Tasks. Developers, power users, and IT staff may need to test software that’s sometimes flagged by Defender or run scripts Defender instantly removes. It can also affect legacy apps and portable tools from external drives.
• Troubleshooting. Sometimes, temporarily disabling security features is the only way to track down issues or conflicts with other applications.

Keep in mind that turning off Defender—even briefly—always carries some risk. Always be certain you have another security solution, or are aware of the security implications.

Matter 1.4 Offers Major Innovations in Energy Management and Cross-Platform Compatibility

Quick Method: Temporarily Turn Off Real-Time Protection

The simplest way to disable Windows Defender is to turn off real-time protection through the Windows Security app. This approach is designed for one-off scenarios where you just need Defender out of the way for a few moments. However, it will reactivate automatically after a short while or once you restart the system.

1. Press Windows + I to open Windows Settings.
2. Navigate to Privacy & Security → Windows Security.
3. Click Virus & threat protection.
4. Under Virus & threat protection settings, select Manage settings.
5. Switch Real-time protection to Off.

Tip: If Defender recently deleted a file or blocked an app, try rerunning it after toggling off the setting. Just be aware that this is a temporary solution. Real-time protection will turn itself back on automatically, sometimes even while you’re still using the computer.

How to Permanently Disable Windows Defender on Windows 11

For users who want to turn off Defender for good, Windows doesn’t make it easy, but it is possible—at least on some editions. There are two main routes: Group Policy Editor (Pro, Enterprise, Education editions) and Registry Editor (all editions).

Using Group Policy Editor (Windows 11 Pro/Enterprise/Education)

1. Press Windows + R, type gpedit.msc, and press Enter.
2. Go to Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus.
3. On the right, find Turn off Microsoft Defender Antivirus and double-click it.
4. Select Enabled and click OK.
5. Restart your PC to apply the changes.

This method disables Defender, but only if you are using a Pro edition or higher. Remember to disable tamper protection first: go to Windows Security, then Virus & threat protection → Manage settings, and turn off Tamper protection.

Using Registry Editor (Works on All Editions)

The Registry Editor method is riskier but works for everyone, including Windows Home users. Always perform a backup of your registry before making changes.

1. Open the Start menu, type regedit, and select Run as administrator.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender.
3. Right-click on the right panel and choose New → DWORD (32-bit) Value.
4. Name it DisableAntiSpyware and press Enter.
5. Double-click on it and set the value to 1. Then, click OK.
6. Restart your computer.

To reverse these changes in the future, simply delete the DisableAntiSpyware entry you created and restart.

Using PowerShell or Command Prompt

If you prefer using the command line, you can disable Defender’s real-time monitoring via PowerShell. This is usually not fully permanent, but it is useful for power users and automation.

1. Press Windows, search for PowerShell, right-click and select Run as administrator.
2. Type:

Set-MpPreference -DisableRealtimeMonitoring $true

This command disables real-time protection, but not all protection features. Remember: as with temporary methods, this setting may reset after a reboot or update.

To add or remove the registry entry from the command line, open Windows Terminal (Admin) and use:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f

Completely Replace Microsoft Defender with Another Antivirus

If your goal is to stop using Defender in favor of another antivirus solution, the process is much simpler. Microsoft Defender is designed to automatically disable its main protection features as soon as it detects another registered antivirus. You can learn more about this process in the article on security technologies.

1. Download and install your preferred antivirus (Malwarebytes, Bitdefender, Webroot, Avast, Norton, etc.).

Once installed, Defender stops performing background malware scans. However, Defender’s periodic scanning may continue unless you disable it completely. If you ever uninstall the third-party antivirus, Defender automatically reactivates. Normally, you won’t be able to have a computer without any active antivirus.

Pro suggestion: You can let Defender perform occasional scans, even if you use another antivirus as your primary, to add an extra layer of protection.

How to Disable Microsoft Defender Firewall

The Defender firewall is independent of the antivirus engine and must be disabled separately. Some network configurations or scenarios require you to do this to troubleshoot problems or adjust the connection.

1. Open Windows Security.
2. Click on Firewall & network protection.
3. Select the network type (Private, Public, Domain) for which you want to disable the firewall.
4. Turn off Microsoft Defender Firewall.
5. Repeat for other network profiles if necessary.

This does not affect your malware protection, only network traffic filtering.

Third-Party Tools to Disable Defender (Advanced Users)

Some expert users prefer community tools that remove Defender and other security features in a single step. One example is Windows Defender Remover, a project on GitHub.

These tools allow you to:

• Remove or disable Defender, the Windows Security app, and related services like VBS, Application Guard, or SmartScreen.
• Run scripts (.exe or .bat) as administrators for complete removal.
• Prepare Windows installation ISOs by disabling Defender from the start (advanced technique).

Caution: Some antivirus solutions or similar tools may be falsely detected as malware by certain systems. Only download utilities from trusted sources and use them with caution.

Keep in mind: These tools can affect virtualization features, Hyper-V, and security-related updates in Windows. Research thoroughly before using them.

Issues with Defender Reactivating Itself

One of the most common problems is Windows Defender automatically activating even after being disabled. This is usually due to:

• Windows updates that reset configurations.
• Tamper Protection remains active and blocks changes to the registry or policies.
• Only real-time protection is disabled, not full protection.
• No additional antivirus is detected.

Recommendation: Disable Tamper Protection before making changes and verify that your settings remain after major updates. Some Windows security updates may revert these adjustments and require you to apply them again.

Risks and Precautions When Disabling Windows Defender

Disabling Defender increases the risk to your system from threats like malware, ransomware, or exploits if you don’t have additional protection in place.

• Always use a reliable antivirus if you disable Defender permanently.
• Back up your registry and system before modifying it.
• Do not use unverified scripts or tools from unknown sources.
• Keep your system updated and periodically check your security status.

To reactivate Defender, simply reverse the policy changes or remove the third-party applications. Windows will automatically restore protection. The most important thing is to keep your computer safe and protected.

Flipper Zero Explained: The Ultimate Guide to the Geek Multi-tool

Disabling Microsoft Defender in Windows 11 isn’t as straightforward as flipping a switch, especially if you are looking for a definitive solution to “disable windows defender windows 11.” But with the right combination of settings and alternatives, you can regain control of your system. Just make sure to evaluate the risks carefully and have an alternative protection plan. Stay informed, stay secure, and let your PC run exactly how you want without unnecessary interruptions from the antivirus.