Most laptops come with strong built-in security, including sign-in protection, drive encryption, a firewall, and antivirus software. To keep your laptop safe, turn these features on, install updates, watch for phishing and scams, and protect the laptop from theft when you’re out. When it’s time to sell or recycle your laptop, back up your files and erase your data with a full reset.
In this laptop security and safety glossary, we explain built-in security features, common security risks, virus and theft protection, and how to dispose of a laptop securely. For more laptop terms, visit our laptop glossary.
Built-In Laptop Security Features
Windows 11 laptops include several layers of built-in security that protect your sign-in, your files, and the system itself. Most are on by default, but it’s worth checking that each one is turned on. Many HP laptops add extra protection, such as a webcam privacy shutter and HP Wolf Security features.
| Security feature | What it does | Where to check it |
|---|---|---|
| Windows Hello | Sign in with your face, fingerprint, or a PIN instead of a password | Settings > Accounts > Sign-in options |
| Device encryption or BitLocker | Encrypts your drive so your files can’t be read if the laptop is lost or stolen | Settings > Privacy & security > Device encryption |
| Microsoft Defender Antivirus | Scans for and blocks viruses, malware, and ransomware | Windows Security > Virus & threat protection |
| Firewall | Blocks unwanted network connections | Windows Security > Firewall & network protection |
| TPM 2.0 | A security chip that protects encryption keys and sign-in data | Built in; required for Windows 11 |
| Secure Boot | Helps make sure only trusted software loads when the laptop starts | Built in; managed in the BIOS |
| Automatic updates | Installs security fixes as soon as they’re available | Settings > Windows Update |
| Webcam privacy shutter | Physically covers the camera when you’re not using it | On the laptop’s camera, on many HP models |
TPM stands for Trusted Platform Module. Device encryption is available on many Windows 11 Home laptops, while BitLocker is included with Windows 11 Pro.
HP security features
Many HP laptops include HP Wolf Security protections, such as HP Sure Start, a BIOS that can repair itself after an attack, and HP Sure Click, which opens risky websites and files in an isolated container. Business models add more advanced protection; see our professional laptops glossary and business security glossary. Chromebooks have their own built-in protections, explained in our Chromebook glossary.
Common Laptop Security Risks and Virus Protection
The biggest security risks for most laptop users are phishing emails and texts, fake websites, malicious downloads, scams that pretend to be tech support, and unsecured public Wi-Fi. Built-in antivirus blocks many threats, but safe habits stop the attacks that trick people into giving up passwords or installing harmful software.
| Security risk | What it is | How to protect yourself |
|---|---|---|
| Phishing | Emails, texts, or messages that trick you into sharing passwords or clicking harmful links | Don’t click unexpected links; go to the website directly instead |
| Malware and viruses | Harmful software that damages files, spies on you, or slows your laptop | Keep antivirus on and download apps only from trusted sources |
| Ransomware | Malware that locks your files and demands payment | Keep backups and install updates |
| Tech support scams | Pop-ups or calls claiming your laptop has a virus and asking for remote access or payment | Close the pop-up and never give remote access to unknown callers |
| Unsecured public Wi-Fi | Open networks where others may see your traffic | Avoid sensitive tasks or use a trusted virtual private network (VPN) |
| Weak passwords | Passwords that are easy to guess or reused across sites | Use a password manager and turn on two-factor authentication |
Does a Windows laptop need antivirus?
Windows 11 includes Microsoft Defender Antivirus, which runs automatically and protects against viruses, malware, and ransomware. For most home users, Defender plus regular updates and safe habits provides solid protection. Some people choose additional security software for extra features like identity protection or a VPN.
How to run a virus scan
- Open Windows Security from the Start menu.
- Select Virus & threat protection.
- Choose Quick scan, or select Scan options for a Full scan.
- Follow any prompts to remove threats.
Learn more in our security software glossary, our AI privacy and security glossary, and our laptop updates glossary.
Laptop Theft Protection
To protect your laptop from theft, never leave it unattended in public, lock the screen when you step away, and turn on Find my device so you can locate or lock it if it goes missing. Drive encryption keeps your files safe even if someone takes the laptop. In shared spaces like offices and dorms, a security cable lock adds physical protection.
Ways to protect your laptop from theft
- Turn on Find my device: Go to Settings > Privacy & security > Find my device so you can locate your laptop from your Microsoft account
- Lock the screen: Press the Windows key + L whenever you step away
- Encrypt your drive: Device encryption or BitLocker keeps your files private if the laptop is stolen
- Use a security cable lock: Many laptops, especially business models, have a lock slot for a cable lock
- Keep it with you when traveling: Carry your laptop in your carry-on and keep it in sight at airport security
- Use a discreet bag: A plain backpack draws less attention than an obvious laptop case
- Write down your serial number: It helps with police reports and insurance claims
What to do if your laptop is lost or stolen
- Locate it. Sign in at your Microsoft account and use Find my device to see its last known location.
- Lock it. Use the Lock option to sign out users and display a message.
- Change your passwords. Update passwords for your email, banking, and other important accounts.
- Report it. File a police report with your serial number, and notify your employer or school if it’s their device.
- Contact your insurer. Check whether homeowners, renters, or device insurance covers the loss.
For travel tips, see our laptop weight and carry-on guide and laptop bags and cases glossary.
Secure Laptop Disposal
Before you sell, donate, trade in, or recycle a laptop, back up your files, sign out of your accounts, and reset the laptop with the Remove everything option. Choosing to clean the drive during the reset makes your old files much harder to recover. Then recycle the laptop through a certified electronics recycler or a take-back program, never in household trash.
Step-by-step: wipe a laptop before you get rid of it
- Back up your files. Save everything you want to keep to cloud storage or an external drive.
- Sign out of accounts. Sign out of your Microsoft account, browsers, and apps, and remove the laptop from your account’s device list.
- Turn off Find my device. This lets the next owner set up the laptop.
- Reset the laptop. Go to Settings > System > Recovery > Reset PC, choose Remove everything, then turn on Clean data in Additional settings to wipe the drive more thoroughly.
- Recycle or donate. Take the laptop to a certified electronics recycler, retailer take-back program, or donation program.
Laptop batteries contain lithium and should never go in the trash. Learn how to recycle them safely in our laptop battery guide, and see reset details in our backups, troubleshooting, and resets glossary. To learn about HP recycling and refurbished programs, see our recycling glossary.
Laptop Security and Safety FAQs
How do I make my laptop more secure?
To make a laptop more secure, turn on Windows Hello sign-in, device encryption, and automatic updates, and keep Microsoft Defender Antivirus on. Use a password manager, turn on two-factor authentication, and avoid clicking unexpected links.
Does my laptop need antivirus software?
Windows 11 laptops include Microsoft Defender Antivirus, which protects against viruses, malware, and ransomware automatically. For most home users, Defender plus regular updates and safe browsing habits provides solid protection.
How can I tell if my laptop has a virus?
Signs of a virus include sudden slowdowns, unexpected pop-ups, new browser toolbars or home pages, apps you didn’t install, and security settings that turn off on their own. Run a full scan in Windows Security to check.
How do I protect my laptop from theft?
To protect a laptop from theft, keep it with you in public, lock the screen when you step away, turn on Find my device, and encrypt the drive. A security cable lock adds protection in shared spaces.
Can I track my lost laptop?
Yes, you can track a lost Windows laptop if Find my device was turned on. Sign in to your Microsoft account to see the laptop’s last known location and lock it remotely.
Is public Wi-Fi safe for my laptop?
Public Wi-Fi can be risky because other people on the network may be able to see unencrypted traffic. Avoid banking and other sensitive tasks on public Wi-Fi, or use a trusted VPN.
How do I wipe my laptop before selling it?
To wipe a laptop before selling it, back up your files, sign out of your accounts, turn off Find my device, then go to Settings > System > Recovery > Reset PC and choose Remove everything with Clean data turned on.
How do I dispose of an old laptop safely?
To dispose of an old laptop safely, erase your data with a full reset, then take the laptop to a certified electronics recycler or take-back program. Never put a laptop or its lithium battery in household trash.
