Security and Privacy – Free Tech Tutor

How to Reset a Forgotten Windows 11 Password: 4 Methods That Work

Locked out of Windows 11? Reset your forgotten password in minutes using Microsoft account recovery, PIN reset, security questions, or PC reset. Back to normal fast.

Being locked out of your own Windows 11 computer is one of the most stressful tech problems you can face. One minute you’re trying to log in, and the next you’re staring at a login screen with no way through — and everything you need is on the other side.

The good news: Windows 11 has several built-in ways to recover access, and the fastest takes under two minutes. Knowing which method fits your situation is the key. This guide covers how to reset a forgotten Windows 11 password using four different approaches, starting with the easiest and ending with the option that works even when all else fails.

Quick Answer

If you forgot your Windows 11 password and your PC uses a Microsoft account, go to account.live.com/password/reset on any phone or device, verify your identity, and set a new password — it works at the lock screen immediately. For a local account, look for the Reset password link below the password field at the lock screen and answer your security questions.

Which Type of Account Do You Have?

The right method depends on your account type. Here’s how to tell:

Microsoft account — Your login is an email address (e.g., @outlook.com, @hotmail.com, or any email you used to register with Microsoft). Windows 11 defaults to this.
Local account — A plain username with no email, created offline just for this PC.
Not sure? At the lock screen, if the sign-in name looks like an email address, it’s a Microsoft account. A single name like “John” with no @ symbol means it’s local.

Here’s how the four reset methods compare at a glance:

Method	Works for	What you need	Approx. time
Microsoft account reset	Microsoft account	A second device + recovery email/phone	2–5 min
Windows Hello PIN reset	Microsoft account	Microsoft password or verification code	2–3 min
Security questions	Local account	Answers to your 3 security questions	1–2 min
Reset this PC	Microsoft or local account	Access to the lock screen (USB may be needed)	20–60 min

Method 1: Reset a Microsoft Account Password (Quickest Fix)

This works whenever your PC signs in with a Microsoft account email.

On any device — phone, tablet, or another computer — open a browser.
Go to account.live.com/password/reset.
Enter the email address tied to your Windows account, then click Next.
Choose how you want to verify your identity: by email, text message, or authenticator app.
Enter the code you receive.
Create and confirm a new password.
Return to your Windows 11 lock screen and enter the new password.

Pro tip: Once you’re back in, set up a PIN under Settings > Accounts > Sign-in options. A short PIN is easier to remember than a long password and is just as secure on your device.

Troubleshooting tip: If you’ve lost access to the recovery email or phone number, click I don’t have any of these at the verification step. Microsoft’s account recovery form lets you prove ownership through account history.

Method 2: Reset a Windows Hello PIN

Windows 11 often uses a PIN for daily sign-ins instead of your full password. If you forgot the PIN specifically, there’s a dedicated reset link at the lock screen.

At the lock screen, click the PIN entry field.
Below the field, click I forgot my PIN.
Sign in with your Microsoft account password or a verification code sent to your phone or email.
Click Continue, then type and confirm a new PIN.
Click OK — your new PIN works immediately.

Note: This option only appears for accounts linked to Microsoft. If you see no “I forgot my PIN” link, your account is local — move to Method 3.

Method 3: Answer Security Questions (Local Account)

When creating a local account, Windows 11 lets you set up three security questions. If you did, account recovery is fast.

At the lock screen, type any password and press Enter — even if it’s wrong.
Click the Reset password link that appears below the password field.
Answer all three security questions correctly.
Type a new password, confirm it, and press the arrow.
Windows logs you in right away.

Troubleshooting tip: If Reset password doesn’t appear, no security questions were configured for that account. Move to Method 4.

Method 4: Reset This PC (Last Resort)

If none of the above applies, Windows 11’s built-in reset tool gets you back in — with a choice to keep or erase your files.

At the lock screen, click the Power icon in the bottom-right corner.
Hold Shift on your keyboard and click Restart at the same time.
Your PC boots into the Windows Recovery Environment.
Go to Troubleshoot > Reset this PC.
Choose Keep my files (reinstalls Windows but saves your documents and photos) or Remove everything (full clean wipe).
Follow the on-screen prompts — Windows reinstalls and lets you set up your account fresh.

Troubleshooting tip: If Keep my files fails partway through, Windows may prompt you for installation media. You can create a free Windows 11 USB installer using the official Media Creation Tool from Microsoft’s website. If you’re also seeing boot issues alongside login problems, our guide on fixing a Windows 11 black screen covers getting into Recovery when the screen won’t cooperate. Similarly, if the PC is very slow to reach the login screen, see how to fix Windows 11 slow startup after you regain access.

Common Mistakes to Avoid

Not knowing your account type before you start. Trying Microsoft’s web reset on a local account wastes time. Check whether it’s a Microsoft or local account first — the lock screen usually shows the email.
Using your PC to reset a Microsoft account when you’re locked out of it. You need another device (phone, tablet, library computer). Have one ready before you start.
Choosing “Remove everything” before trying “Keep my files.” Always try the gentler option first. A full wipe is rarely needed and loses installed apps and settings.
Skipping recovery setup after getting back in. Add a recovery phone number and backup email at account.live.com/proofs/manage the moment you regain access. Five minutes now prevents this happening again.
Confusing the Windows PIN with the Microsoft account password. They’re separate credentials. Resetting one at the lock screen does not change the other — make sure you’re resetting the right one for your situation.
Downloading third-party “Windows password crackers.” These tools are almost always unnecessary, often malicious, and slower than Windows’ built-in recovery. Stick to the official methods above.

Frequently Asked Questions

Can I reset my Windows 11 password without losing my files?

Yes. Methods 1, 2, and 3 all recover access without touching any files. Even Method 4 (Reset this PC) has a “Keep my files” option that preserves your documents and photos while reinstalling Windows.

What if I forgot both my Windows 11 password AND my PIN?

If your account is connected to Microsoft, reset the Microsoft account password at account.live.com/password/reset. Once you’re back in, you can set a fresh PIN under Settings > Accounts > Sign-in options.

Is there a way to reset a local account password with no security questions?

Without security questions set up, your options are limited to using a second administrator account on the same PC, or resetting the PC entirely (Method 4). There’s no simple backdoor for a local account with no recovery options configured. If you suspect unauthorized access played a role, it’s also worth learning how to remove malware from Windows 11 once you’re back in.

How do I know if I have a Microsoft or local account?

At the lock screen, a Microsoft account shows an email address as the username. Once logged in, go to Settings > Accounts > Your info — it will clearly say “Microsoft account” or “Local account.”

Can I reset my Windows 11 password from my phone?

Yes — for Microsoft accounts. Open a browser on your phone, go to account.live.com/password/reset, and follow the steps. You’ll receive a verification code by text or email and can set a new password in minutes.

Why doesn’t the “Reset password” link appear at my lock screen?

The link only shows for local accounts that have security questions set up. Microsoft account users won’t see it because recovery happens online. If you’re on a local account with no questions, you’ll need another admin account or Method 4.

How do I stop this from happening again?

For Microsoft accounts, add a recovery phone number at account.live.com/proofs/manage. For local accounts, go to Settings > Accounts > Sign-in options and set up security questions. Setting up Windows Hello (face or fingerprint) also means you’ll almost never need to type a password again.

Conclusion

Getting locked out of Windows 11 is fixable in minutes when you know which method fits your account type. Microsoft account users should go straight to the web reset; local account holders should check for security questions at the lock screen. Keep “Reset this PC” as a true last resort — the “Keep my files” option means you don’t have to lose anything.

Once you’re back in, take five minutes to set up a recovery phone number and a PIN or Windows Hello sign-in. And if you want to add an extra layer of security to sensitive files, check out our guide on how to password protect a folder in Windows 11 — so even if someone else does get to your login screen, your most important files stay protected.

Stop Spam Emails in Gmail for Good: 7 Methods That Actually Work

Tired of Gmail spam? Block senders, report messages, and set up filters in minutes. 7 free, proven methods to clean up your inbox for good — no paid tools needed.

If your Gmail inbox is buried under newsletters you never signed up for, fake delivery notices, and “exclusive offers” from companies you’ve never heard of, you’re in good company. Gmail sees billions of spam messages every single day — and even its excellent AI filter can’t catch every one.

The good news is that a few quick changes can stop spam emails in Gmail dramatically. In this guide, you’ll learn seven free, built-in methods to clean up your inbox — no third-party app required.

Quick Answer

To stop spam emails in Gmail, open the unwanted message, click the three-dot menu (⋮), and select “Block [sender]” or “Report spam.” For newsletters, use Gmail’s built-in Unsubscribe button near the sender’s name at the top of the email. Setting up custom Gmail filters and never replying to spam complete the fix — most people see a clear improvement within a few days.

Why You’re Getting So Much Spam

Before jumping to the fixes, it helps to know where all this spam is coming from:

Data breaches: Your email address was exposed when a website you use got hacked.
Email harvesting: Bots scan websites for publicly listed addresses and add them to spam lists.
Purchased lists: Some companies sell your email address to advertisers without your knowledge.
Pre-ticked marketing boxes: You signed up for a service and missed a pre-checked “send me offers” option.

Gmail’s AI filters catch roughly 99.9% of spam automatically. But once spammers have your address, they share it widely — which is why a few extra steps from you make a real difference.

Dealing with spam on your phone too? Check out our guide on how to stop spam calls on iPhone and Android.

Method 1: Block a Specific Sender

Blocking prevents all future emails from a specific address from reaching your inbox.

Open the spam email in Gmail.
Click the three-dot menu (⋮) in the top-right corner of the message.
Select Block “[Sender Name].”
Click Block to confirm.

From now on, emails from that address land in your Spam folder, not your inbox.

Pro tip: Blocking works best for persistent, known senders. If spam is coming from constantly rotating addresses (like noreply@random123.xyz), a custom filter (Method 4) will be more effective.

Method 2: Report Spam to Train Gmail’s Filter

Every time you report a message as spam, you teach Gmail’s AI to recognize similar patterns — not just for you, but for other Gmail users too.

Click the checkbox next to the spam email.
Click the Report Spam button (the stop-sign icon with an exclamation mark) in the toolbar.
Gmail moves the email to Spam and logs your feedback.

Troubleshooting tip: If Gmail keeps missing spam from the same sender, try opening the email first and then clicking Report Spam from inside the message — this sends a stronger signal to Google’s filter.

Method 3: Unsubscribe from Unwanted Newsletters

For legitimate promotional emails you never wanted, Gmail’s built-in unsubscribe tool is faster and safer than hunting for tiny unsubscribe text at the email’s footer.

Open the newsletter or promotional email.
Look for the blue Unsubscribe link right next to the sender’s name at the very top of the email.
Click Unsubscribe and confirm in the pop-up window.

Most senders remove you within 10 business days.

Pro tip: If the blue Unsubscribe button doesn’t appear, scroll to the bottom of the email. Under laws like CAN-SPAM and GDPR, legitimate senders must include an unsubscribe link somewhere — though it’s sometimes in very small print.

Method 4: Create a Gmail Filter to Auto-Delete Spam

For spam that keeps slipping through — especially from rotating addresses on the same domain — a custom filter catches the whole pattern at once.

Click the search bar at the top of Gmail.
Click the filter icon (the sliders icon) on the right side of the search bar.
Fill in the filter fields:
- From: A domain, e.g., @spamsite.com
- Subject: A repeated keyword, e.g., investment opportunity
- Has the words: Any phrase that appears in every spam message
Click Create filter.
Tick Delete it (or Skip the Inbox + Mark as read if you’d prefer to review first).
Optionally check Also apply filter to matching conversations to clean up past spam instantly.
Click Create filter.

Real-world example: You keep getting emails about “exclusive crypto deals” from dozens of different addresses. Set “Has the words” to exclusive crypto deals and Gmail deletes them automatically before they ever reach your inbox.

Method 5: Manage Spam on the Gmail Mobile App

The same tools are available on Android and iPhone — just in a slightly different spot.

Block a sender on mobile:

Open the Gmail app and tap the email.
Tap the three-dot menu (⋮) in the top-right corner.
Tap Block “[Sender Name].”

Report spam on mobile:

Tap the email, then tap the three-dot menu (⋮).
Tap Report spam or Move to Spam.

Unsubscribe on mobile:

Open the promotional email and tap the Unsubscribe link near the sender’s name at the top.

Method 6: Use Priority Inbox to Push Spam Down

Gmail’s Priority Inbox learns which senders matter to you and pushes everything else lower — so even spam that squeaks through the filter is less disruptive.

Click the Settings gear (top right) → See all settings.
Go to the Inbox tab.
Under Inbox type, select Priority Inbox.
Click Save Changes.

Gmail will increasingly learn your email habits and surface what matters. It also makes it obvious which emails are not important — making them easy to bulk-report or delete.

Method 7: Protect Your Email Address Going Forward

The most effective long-term fix is stopping spammers from getting your address in the first place.

Use Gmail plus-addressing: When signing up for websites, use yourname+sitename@gmail.com (e.g., john+amazon@gmail.com). Gmail delivers it normally, but if that tagged address starts getting spam, you know exactly which company leaked it — and you can filter it with one rule.
Use a disposable email for one-time sign-ups (services like Temp Mail work well).
Uncheck pre-ticked marketing boxes carefully during sign-up forms.
Never reply to spam — even a “please remove me” reply confirms your address is active and can trigger more spam.

Already flooded? Check if your address appeared in a known breach at HaveIBeenPwned.com — it’s free and takes 10 seconds. And while you’re doing some Google account housekeeping, it’s worth checking whether your Google account storage is running low too.

Common Mistakes to Avoid

Mistake	Why It’s a Problem	The Fix
Clicking “Unsubscribe” inside suspicious emails	Confirms your address is active to bad actors	Only use Gmail’s blue Unsubscribe button or links from senders you recognize
Deleting spam without reporting it	Doesn’t train Gmail’s filter — the same spam keeps coming	Always hit Report Spam before or instead of deleting
Blocking one address per spammer	Spammers constantly rotate to new addresses	Create a domain-level or phrase-based filter instead
Replying to spam to complain	Confirms your address is live, inviting even more spam	Never reply — mark as spam and ignore completely
Using your primary Gmail for every sign-up	Bots harvest it and it ends up on shared spam lists	Use plus-addressing or a separate throwaway email for public sign-ups

Frequently Asked Questions

Why is Gmail not filtering spam automatically?

Gmail catches over 99% of spam automatically, but new spammer tactics can occasionally sneak through. Manually reporting those emails retrains the filter for your account quickly — doing this consistently for a week usually produces a noticeable improvement.

Does blocking a sender in Gmail delete their emails?

No. Blocking routes future emails from that address to your Spam folder — it doesn’t delete them. Gmail automatically purges the Spam folder every 30 days, but you can also manually clear it by clicking “Delete all spam messages now” inside the Spam folder.

How do I delete all spam emails at once in Gmail?

Click Spam in the left sidebar, then click “Delete all spam messages now” at the top of the page. This permanently removes every email currently sitting in your Spam folder.

Is it safe to use the Unsubscribe button in Gmail?

Gmail’s blue Unsubscribe button (which appears near the sender’s name at the top of the email) is safe — Gmail processes these requests through verified channels. It is significantly safer than clicking unsubscribe links buried inside emails from unfamiliar or suspicious senders.

Can spam emails give me a virus?

Simply opening a spam email in Gmail’s browser or app is generally safe because Gmail’s viewer doesn’t execute scripts. However, downloading attachments or clicking links inside spam emails can be dangerous. Never open attachments from senders you don’t recognize.

Why do I keep getting spam after blocking a sender?

Spammers frequently switch to new addresses to bypass individual blocks. Create a Gmail filter targeting a shared domain (e.g., @spammydomain.com) or a repeated phrase in the subject line to catch the whole pattern at once.

How long does it take Gmail to stop spam after I report it?

Gmail updates its spam filter for your account almost immediately after you report a message. Reporting similar spam consistently over a few days typically produces a big drop. If a specific pattern persists, create a custom filter (Method 4) for instant, permanent relief.

Conclusion

Stopping spam emails in Gmail comes down to four habits: report every spam message you see, block persistent senders, create filters for repeating patterns, and protect your email address going forward with plus-addressing. Most people see their spam levels drop significantly within a week.

Start right now — go to your Spam folder and click “Delete all spam messages now.” Then report the next spam that lands in your inbox. Two clicks, and Gmail’s filter gets smarter immediately.

If you use Outlook alongside Gmail and want the same clean-inbox experience there, see our guide on fixing Outlook email delivery issues.

How to Stop Spam Calls on iPhone and Android (Step-by-Step Guide)

Getting too many spam calls? Block robocalls on iPhone and Android with these free, step-by-step fixes — built-in filters, carrier tools, and call-blocking apps. Works on both platforms.

Every day, millions of people pick up their phones only to hear a recorded voice pitching a car warranty, a fake IRS deadline, or a “free cruise.” Spam calls — also called robocalls (automated calls dialed by a computer) — are one of the most universal tech frustrations today. They waste your time, can pull you into scams, and never seem to stop no matter how many times you hang up.

The good news: your phone already has powerful tools to stop spam calls, and your carrier probably offers a free filter too. In this guide, you’ll learn exactly how to stop spam calls on iPhone and Android in just a few minutes — using built-in settings, free carrier tools, and the best call-blocking apps.

Quick Answer

To stop spam calls on iPhone, go to Settings > Phone > Silence Unknown Callers and toggle it on. On Android, open the Phone app, tap More > Settings > Spam and Call Screen and enable spam protection. Also register your number at donotcall.gov and contact your carrier for their free call-filtering service.

Why You’re Getting So Many Spam Calls

Robocallers use automated systems to dial millions of numbers every hour. A common trick is “neighbor spoofing” — faking a local area code so the call looks familiar and you’re more likely to answer. Your number probably landed on a list that’s bought and sold between telemarketers and scammers.

Hanging up doesn’t stop future calls — and calling back can actually confirm your number is active. The fix is at the phone level, not the call level.

How to Stop Spam Calls on iPhone

Step 1: Turn On “Silence Unknown Callers”

This is Apple’s built-in spam filter. It sends calls from numbers not in your contacts, recent calls, or Siri suggestions directly to voicemail — silently.

Open the Settings app.
Scroll down and tap Phone.
Tap Silence Unknown Callers.
Toggle it on (the switch turns green).

Unknown numbers will go straight to voicemail. You’ll still see a missed call notification, so nothing important disappears without a trace.

Pro tip: This setting works best when your contacts are up to date. If there’s a number you want to receive — like a new doctor’s office — save it first.

Troubleshooting tip: If you start missing calls from delivery services or appointment reminders, check your voicemail regularly. They’ll leave a message, and you can call back and add them to your contacts.

Step 2: Use Your Carrier’s Free Spam Filter

All major U.S. carriers offer free call-filtering tools that work at the network level — catching spam before it even reaches your phone:

Carrier	Service Name	How to Get It
AT&T	AT&T Call Protect	Download the free app or activate in myAT&T
Verizon	Verizon Call Filter	Activate at My Verizon or the Call Filter app
T-Mobile	Scam Shield	Active by default; app available for extra features

Pairing your carrier’s filter with Silence Unknown Callers gives you two independent layers of protection.

Step 3: Block Individual Numbers on iPhone

When a spam call does get through:

Open the Phone app and go to Recents.
Tap the ⓘ (info icon) next to the number.
Scroll down and tap Block this Caller.
Confirm by tapping Block Contact.

How to Stop Spam Calls on Android

The steps vary slightly by phone model and Android version, but the core options are the same. If you’re also dealing with your Android phone running slowly, see our guide on why your Android phone is slow and how to fix it.

Step 1: Enable Spam Protection in the Phone App

If your phone uses the Google Phone dialer (standard on Pixel phones and many other Android devices):

Open the Phone app.
Tap the three-dot menu (top right) and select Settings.
Tap Spam and Call Screen (may appear as “Spam protection” on some versions).
Toggle on See caller and spam ID and Filter spam calls.

Google will automatically screen suspected spam calls and display a warning before you answer.

Using a Samsung Galaxy? Open the Phone app > tap the three-dot menu > Settings > Caller ID and spam protection > turn on Caller ID and spam. The filter works the same way.

Pro tip: On Pixel phones, the Call Screen feature lets Google’s AI answer the call for you and transcribe what the caller says in real time. You can decide whether to pick up, hang up, or mark it as spam — without ever speaking to the caller yourself.

Step 2: Block Numbers Manually on Android

Open the Phone app and go to Recents.
Long-press the number you want to block (or tap the info icon).
Select Block / report spam.
Check the box to report it as spam, then tap Block.

Reporting it as spam helps improve detection for everyone using the same network or app.

Step 3: Activate Your Carrier’s Free Filter

The same carrier services that work on iPhone also work on Android — AT&T Call Protect, Verizon Call Filter, and T-Mobile Scam Shield. Download your carrier’s app and sign in with your account to activate. These tools run at the network level and work alongside your phone’s built-in protection.

Register with the Do Not Call Registry

Visit donotcall.gov — the official FTC (Federal Trade Commission) website — and register your number. It won’t stop scammers who already break the law, but it does reduce calls from legitimate telemarketers who face heavy fines for violations. Registration is free and permanent; you only need to do it once.

Best Third-Party Call Blocking Apps

For an extra layer of protection, these apps are widely used and well-regarded:

App	Platform	Free?	Best For
Hiya	iOS & Android	Yes (basic)	Caller ID + spam blocking
YouMail	iOS & Android	Yes (basic)	Visual voicemail + blocking
RoboKiller	iOS & Android	No (~$5/mo)	Aggressive blocking + Answer Bots

Troubleshooting tip: If a third-party app is blocking too many legitimate calls, check its block list settings. Most apps let you whitelist specific numbers or area codes so important callers always get through.

Common Mistakes to Avoid

Calling back unknown numbers. This confirms your number is active and often lands you on more spam lists. If someone important called, they’ll leave a voicemail.
Pressing “2” to opt out of a robocall. Legitimate opt-outs work; scammer opt-outs often don’t — and pressing any key can flag your number as “live,” triggering more calls.
Only blocking calls after they happen. Set up proactive filtering now — Silence Unknown Callers on iPhone or spam protection on Android — before the next wave hits.
Ignoring your carrier’s free filter. Many people don’t know their carrier offers a network-level service. It catches spam before your phone even rings and costs nothing extra.
Relying on just one layer of protection. The best defense is layered: phone setting + carrier filter + optional third-party app. A single layer will still miss calls.
Assuming the “IRS” or “Social Security” call is real. Government agencies contact you by mail first — they never demand immediate payment over the phone or threaten arrest. Hang up without engaging.

Frequently Asked Questions

Can spam callers get around my block list?
Yes — robocallers rotate numbers constantly, so blocking individual numbers only goes so far. Proactive filters like Silence Unknown Callers, Android spam protection, and carrier-level tools are more effective than one-by-one blocking.

Will “Silence Unknown Callers” on iPhone block all spam?
It silences calls from numbers not in your contacts, recent calls, or Siri suggestions. It won’t always catch spam from numbers that have reached you before. Pair it with your carrier’s free filter for the best protection.

Is the Do Not Call Registry still effective?
It works against legitimate telemarketers who face FTC fines for violations. It does not stop scammers who already break the law. Still worth registering at donotcall.gov, but don’t rely on it as your only defense.

Do call-blocking apps sell my data?
Some do. Read the privacy policy before installing any app. Hiya and YouMail are generally considered reputable. If privacy is your top concern, stick to your phone’s built-in tools and your carrier’s filter.

What should I do if I answered a spam call and gave my information?
If you gave financial information, contact your bank immediately. If you gave your Social Security number, visit IdentityTheft.gov for guidance. Act quickly — the sooner you respond, the better chance you have of limiting damage.

Can I block entire area codes on iPhone or Android?
Not with built-in tools. Third-party apps like RoboKiller offer area code blocking if you need it. Most native phone settings only block individual numbers.

Does using a VPN stop spam calls?
No. A VPN protects your internet traffic, not your phone calls. Spam calls travel through your carrier’s phone network, which a VPN doesn’t touch.

Conclusion

Stopping spam calls is about layering a few simple defenses: turn on your phone’s built-in filter, activate your carrier’s free network-level service, and register with the Do Not Call Registry. Together, these free steps eliminate the vast majority of robocalls with almost no ongoing effort.

While you’re tuning up your phone, check out our guides on why your iPhone battery drains so fast and how to free up storage on your iPhone — two more quick fixes that make a real difference every day.

How to Remove Malware from Windows 11 (Free, Step-by-Step Guide)

Worried your Windows 11 PC has a virus? Follow these 8 free steps to remove malware using Windows Defender and Malwarebytes. Back to normal fast.

You notice your PC is suddenly sluggish, ads are popping up where they shouldn’t, or your browser keeps redirecting to strange websites. These are classic warning signs that malware — short for malicious software — may have infected your Windows 11 computer.

Malware includes viruses, spyware, adware, and ransomware: software designed to harm, spy on, or exploit your device. It gets in through suspicious email attachments, shady downloads, or malicious websites. The good news is you can remove most infections yourself, for free, using tools already built into Windows 11.

This guide walks you through removing malware from Windows 11 step by step — no tech expertise required.

Quick Answer

To remove malware from Windows 11, open Windows Security → Virus & threat protection → Scan options → select Microsoft Defender Offline scan → click Scan now. This deep scan runs before Windows loads, catching threats that hide from normal scans. For stubborn infections, follow up with a free Malwarebytes scan.

Signs Your Windows 11 PC May Have Malware

Before scanning, check whether your PC shows any of these common symptoms:

Your PC is significantly slower than usual
Unexpected pop-up ads appear, even on your desktop
Your browser homepage or default search engine changed without your input
Unknown programs appear in your app list
Windows Security or Task Manager won’t open
CPU, RAM, or disk usage is unusually high in Task Manager
Friends report receiving strange messages or emails from your accounts

If you spot two or more of these signs, run a scan right away.

Step 1: Update Windows Defender Before You Scan

Outdated virus definitions mean Windows Defender may miss brand-new threats. Always update before scanning.

Click Start, type Windows Security, and open the app.
Click Virus & threat protection.
Under “Virus & threat protection updates,” click Check for updates.
Wait for the update to finish before moving on.

Pro tip: Keep automatic updates turned on so Defender’s definitions are always current. Go to Settings → Windows Update and confirm that automatic updates are enabled.

Step 2: Run a Full Scan with Windows Defender

Windows Defender — officially called Microsoft Defender Antivirus — is built into Windows 11 and is genuinely effective. Independent security labs consistently rank it among the best free antivirus options available.

In Windows Security, click Virus & threat protection.
Click Scan options.
Select Full scan (not Quick scan — Full scan checks every file on your PC).
Click Scan now.

A full scan can take 30–60 minutes depending on how many files you have. Let it run to completion.

Troubleshooting tip: If the scan won’t start or Windows Security refuses to open, that itself can indicate malware actively blocking your defenses. Skip ahead to Step 4 (Safe Mode) or Step 5 (Malwarebytes) to work around it.

Step 3: Run a Microsoft Defender Offline Scan

Some malware digs in deep enough that it cannot be fully removed while Windows is running. The Offline scan restarts your PC and scans before Windows loads — the point where most malware can’t hide or fight back.

Go to Windows Security → Virus & threat protection → Scan options.
Select Microsoft Defender Offline scan.
Click Scan now, then confirm by clicking Scan.
Your PC restarts automatically and runs the scan (about 15 minutes).

This is the most powerful built-in scan available on Windows 11. Use it whenever you suspect a serious infection.

Step 4: Scan in Safe Mode for Stubborn Infections

If malware is actively blocking your scans, boot into Safe Mode first. In Safe Mode, Windows runs with the bare minimum of programs — most malware can’t load or interfere.

Click Start → Settings → System → Recovery.
Under “Advanced startup,” click Restart now.
Choose Troubleshoot → Advanced options → Startup Settings → Restart.
Press 4 to start in Safe Mode.
Once in Safe Mode, repeat Steps 2 and 3.

Step 5: Run Malwarebytes Free (Second Opinion Scan)

No single tool catches everything. Malwarebytes (malwarebytes.com) is a well-trusted free tool that specializes in finding adware, spyware, and potentially unwanted programs that antivirus software sometimes misses.

Download Malwarebytes from malwarebytes.com (the free version is sufficient).
Install and open the application.
Click Scan and let it run to completion.
Review any detected items and click Quarantine to remove them.
Restart your PC when prompted.

Not sure which tool to lead with? Here is how the two free options compare:

Tool	Type	Cost	Best for
Windows Defender	Built-in, always-on antivirus	Free	Continuous real-time protection and deep Offline scans
Malwarebytes Free	On-demand manual scanner	Free	Second-opinion scans for adware, spyware, and unwanted programs

Pro tip: The free version of Malwarebytes is a manual scanner — it won’t run in the background. That’s fine. Use it after a suspected infection as a second opinion alongside Windows Defender.

Step 6: Remove Suspicious Startup Programs

Malware often adds itself to your startup list so it reloads automatically every time you boot. Checking and cleaning this list is an essential step.

Press Ctrl + Shift + Esc to open Task Manager.
Click the Startup apps tab.
Look for any programs you don’t recognize or didn’t install yourself.
Right-click a suspicious entry and select Disable.

If you’re unsure whether a program is legitimate, search its exact name online before disabling it. Disabling is safe — you can re-enable anything you need later.

Step 7: Reset Your Browser Settings

Adware commonly hijacks your browser — changing your homepage, default search engine, or installing unwanted extensions. Resetting your browser clears all of this.

In Google Chrome:

Click the three-dot menu (top right) → Settings.
Scroll down and click Reset settings.
Click Restore settings to their original defaults → Reset settings.

Microsoft Edge and Firefox have similar reset options under their Settings menus. Also visit your browser’s Extensions or Add-ons page and remove anything unfamiliar. If your browser keeps crashing even after the reset, our guide on fixing Google Chrome crashes on Windows 11 walks through deeper fixes.

Step 8: Repair System Files with SFC

Malware can corrupt Windows system files, causing ongoing problems even after the infection is gone. The System File Checker (SFC) scans for and repairs that damage — completely free.

Click Start and search for Command Prompt.
Right-click it and choose Run as administrator.
Type sfc /scannow and press Enter.
Wait for the scan to complete (10–15 minutes).
Restart your PC when it finishes.

If your PC still feels sluggish after removing malware, our guide on How to Speed Up a Slow Windows 11 PC (12 Easy Fixes) covers additional free performance fixes.

Common Mistakes to Avoid

Only running a Quick Scan. Quick Scans only check the most common infection spots. Use Full Scan or Offline Scan for a thorough clean-up.
Downloading “anti-malware” tools from pop-up ads. Fake security warnings that say “Your PC is infected — click here to fix it” are scams or malware in disguise. Only download tools directly from trusted sites like malwarebytes.com or microsoft.com.
Skipping the browser reset. Even after removing malware, a hijacked browser keeps redirecting you. Always check your extensions and reset browser settings.
Paying for “PC cleaner” tools that appear after a scare. Legitimate malware removal is free. Windows Defender and Malwarebytes Free handle the vast majority of infections at no cost.
Not restarting after quarantine. Some files are fully removed only on restart. Always reboot after any scan that detects threats.
Ignoring Windows Update. Many infections exploit unpatched vulnerabilities. Keeping Windows 11 up to date closes those doors. If Windows Update isn’t cooperating, see our guide on How to Fix Windows Update Not Working on Windows 11.

Frequently Asked Questions

Does Windows 11 have built-in malware protection?

Yes. Microsoft Defender Antivirus is built into Windows 11 and active by default. It provides real-time protection, cloud-based detection, and Offline scanning — all at no cost, with no installation needed.

How do I know if my PC has a virus?

Common signs include sudden slowdowns, unexpected pop-ups, browser redirects, unfamiliar installed programs, or unusually high CPU or disk usage in Task Manager. If you notice two or more of these, run a Full Scan right away.

Is the Malwarebytes free version good enough?

Yes, for manual clean-up after a suspected infection. The free version scans and removes existing threats. You don’t need the paid tier unless you want continuous real-time protection layered on top of Windows Defender.

Can malware survive a Windows 11 reset?

Very rarely. A full Windows reset that removes all files and apps eliminates almost all malware. Firmware-level infections and threats on connected external drives are the rare exception. A full reset is a last resort — the steps in this guide handle the vast majority of infections.

How long does a full Windows Defender scan take?

Typically 30–60 minutes, depending on how many files are on your PC. A Microsoft Defender Offline Scan takes around 15 minutes because it runs before Windows fully loads.

What should I do if malware keeps coming back?

Scan your startup programs and browser extensions carefully, and also run a scan on any connected external drives. If threats keep reappearing, try the Microsoft Defender Offline scan from Safe Mode for the deepest possible clean. As a last resort, a clean reinstall of Windows 11 will eliminate any persistent infection. If Windows is also freezing or behaving erratically, tackle that alongside the malware removal.

Do I need a paid antivirus on Windows 11?

For most home users, Windows Defender combined with careful browsing habits provides solid protection. Paid antivirus suites add extras like VPN access, password managers, and identity monitoring — useful, but not required for strong baseline security.

Conclusion

Removing malware from Windows 11 doesn’t require expensive software or a trip to a repair shop. Update Windows Defender, run a Full and Offline scan, follow up with Malwarebytes, clear suspicious startup programs, reset your browser, and repair system files with SFC. Most infections clear up completely with these free, built-in tools.

Once you’re clean, stay protected by keeping Windows 11 updated, being cautious with email attachments, and downloading software only from trusted sources.

Found this helpful? Browse our other free Windows 11 fix guides and solve your next tech problem in minutes.

How to Password Protect a Folder in Windows 11 (3 Free Methods)

Learn how to password protect a folder in Windows 11 — free step-by-step methods for Home and Pro users. No paid software needed.

If you’ve tried to lock a folder in Windows 11, you’ve probably hit the same wall: there’s no built-in “right-click and add a password” option. That’s a real frustration when you need to protect sensitive files — tax returns, personal photos, financial records — on a shared or family PC.

The reason is that Microsoft replaced the old simple approach with two more advanced tools (EFS and BitLocker), but both require Windows 11 Pro or higher. Most everyday users run Windows 11 Home and never get access to them.

The good news: you can still password protect a folder in Windows 11 for free, and it takes under two minutes. This guide covers three reliable methods — one that works on every edition, and two built-in options for Pro users — with clear steps and no jargon.

Quick Answer

To password protect a folder in Windows 11 for free, download 7-Zip (from 7-zip.org), right-click your folder, click Show more options if needed, choose 7-Zip > Add to archive, set the format to .7z or .zip, enter a password under Encryption, and click OK. Then delete the original unprotected folder after confirming the archive opens correctly and requires a password.

Why Windows 11 Doesn’t Lock Folders by Default

Windows 11 does not include a simple folder-password option in the right-click menu. Microsoft’s two built-in encryption tools — EFS (Encrypting File System) and BitLocker — are powerful, but they’re restricted to Windows 11 Pro, Enterprise, and Education editions.

If you’re on Windows 11 Home, EFS and BitLocker are unavailable. The free, open-source tool 7-Zip fills that gap completely, using AES-256 encryption — the same standard used by banks and governments worldwide.

How to check your Windows 11 edition:

Press Windows key + R, type winver, and press Enter.
A popup shows your edition: either “Windows 11 Home” or “Windows 11 Pro.”

Method 1: Use 7-Zip to Password Protect a Folder (Works on All Editions)

7-Zip is a free, open-source compression tool trusted by millions worldwide. It wraps your folder into an encrypted archive that requires a password to open. It works on Windows 11 Home and Pro alike.

Step 1: Download and Install 7-Zip

Go to 7-zip.org and download the installer that matches your system (most users need the 64-bit version). Run the installer — it takes under a minute and installs nothing unwanted.

Step 2: Create a Password-Protected Archive

Right-click the folder you want to protect. In Windows 11, if you don’t see 7-Zip in the menu, click Show more options at the bottom of the menu first.
Hover over 7-Zip, then click Add to archive…
In the Archive format dropdown, choose .7z or .zip.
Under the Encryption section, type your password in the Enter password field.
Re-enter the same password in the Re-enter password field.
Confirm the Encryption method shows AES-256.
Click OK. 7-Zip creates an encrypted archive next to your original folder.

Step 3: Delete the Original Unprotected Folder

Open the archive to confirm it asks for your password and the files are inside. Then delete the original folder. If you skip this step, your files are still accessible without any password.

Pro tip: Use .7z format for better compression and slightly stronger encryption. Use .zip if you plan to share the archive — though the recipient will also need 7-Zip to open a password-protected .zip file.

Troubleshooting tip: If 7-Zip doesn’t appear in your right-click menu even after clicking “Show more options,” try restarting Windows Explorer. Press Ctrl + Shift + Esc, find “Windows Explorer” in the Processes tab, right-click it, and select Restart.

Method 2: Use EFS Encryption — Built Into Windows 11 Pro

EFS (Encrypting File System) is baked directly into Windows 11 Pro. It encrypts your folder at the file system level — only the Windows user account that encrypted the folder can open the files inside. No extra software required.

How to Encrypt a Folder with EFS

Right-click the folder and choose Properties.
On the General tab, click Advanced…
Check the box labeled Encrypt contents to secure data.
Click OK, then click Apply.
When prompted, choose Apply changes to this folder, subfolders and files for full protection.

A small padlock icon will appear on the folder in File Explorer to confirm encryption is active.

Important: Windows will immediately prompt you to back up your encryption key. Do this right away. If your Windows installation breaks or your user profile is damaged, you’ll permanently lose access to those files without the backup key.

Troubleshooting tip: If the “Encrypt contents to secure data” checkbox is greyed out, your drive is formatted as FAT32 instead of NTFS. EFS only works on NTFS drives. To check: right-click the drive in File Explorer, choose Properties, and look for “File system: NTFS.” If it shows FAT32, use 7-Zip instead.

EFS Limitations to Know

EFS is tied to your Windows user account — not a separate standalone password. That means:

Anyone logged into Windows with your account can still access the encrypted files.
EFS does not fully protect against someone physically removing your hard drive (unless the drive is also BitLocker-encrypted).
Always use a strong Windows login password alongside EFS for meaningful protection. If you ever lose access, our guide on how to reset a forgotten Windows 11 password walks you through your options.

Method 3: Use BitLocker for Full Drive Encryption (Windows 11 Pro Only)

BitLocker encrypts a whole drive or USB stick rather than a single folder. It’s the strongest built-in option available in Windows, but it’s overkill if you only need to secure a few documents on your main PC.

Best use case: Password-protecting a USB flash drive you carry with sensitive files.

How to Enable BitLocker on a Drive

In File Explorer, right-click the drive (not a folder — the entire drive or USB stick).
Click Turn on BitLocker.
Choose Use a password to unlock the drive.
Enter and confirm a strong password.
Save the recovery key (to your Microsoft account, a file, or a printed copy).
Click Start encrypting.

Every file on that drive is now encrypted. Anyone who plugs in the USB will need your password to access anything. To keep your whole system secure, it’s also worth keeping Windows updated — see our guide on How to Fix Windows Update Not Working on Windows 11.

Which Method Should You Use?

Method	Works on Home?	What It Protects	Ease of Use
7-Zip (encrypted archive)	✅ Yes	Specific folders and files	Easy
EFS (built-in encryption)	❌ Pro only	Folders on NTFS drives	Moderate
BitLocker	❌ Pro only	Entire drives	Moderate

For most Windows 11 Home users, 7-Zip is the clear winner — free, fast, and genuinely secure. Pro users who want seamless, always-on folder protection will find EFS more convenient for everyday use. And if you carry sensitive files on a USB drive, BitLocker has you fully covered.

While you’re organizing and securing your files, it’s a good time to clear out old ones too — see our guide on How to Free Up Disk Space on Windows 11.

Common Mistakes to Avoid

Not deleting the original folder after archiving. The encrypted archive means nothing if the original, unprotected folder is still sitting right next to it. Always delete it once you’ve confirmed the archive opens and requires a password.
Using a weak or obvious password. Passwords like “123456,” your name, or your birthday can be cracked in seconds. Use a passphrase with mixed characters — something like “BlueSky!Rain42” — or generate one with a free password manager like Bitwarden.
Forgetting the password with no backup. AES-256 encryption has no backdoor. A forgotten 7-Zip password means your files are permanently inaccessible. Store your password in a password manager before encrypting anything important.
Skipping the EFS key backup. Windows warns you to export your EFS certificate for a reason. If your Windows installation breaks or you reinstall the OS, you cannot recover EFS-encrypted files without that backup key. Export it and store it on a separate USB drive.
Thinking a “hidden” folder is secure. Setting a folder’s attribute to “Hidden” in File Explorer is not security. Anyone who enables “Show hidden files” in File Explorer settings can see it immediately. Hidden folders offer zero protection.
Assuming EFS blocks access for your own account. EFS blocks other Windows user accounts — not yours. If someone knows your Windows login password, EFS alone won’t stop them. A strong Windows login password is essential alongside EFS.

Frequently Asked Questions

Can I password protect a folder in Windows 11 without any software?

Yes, if you have Windows 11 Pro or Enterprise. Use the built-in EFS: right-click the folder, go to Properties > Advanced, and check “Encrypt contents to secure data.” Windows 11 Home users need a free tool like 7-Zip, since EFS is not available on that edition.

Is 7-Zip safe to use for encrypting files?

Yes. 7-Zip uses AES-256 encryption — the same standard used by governments and financial institutions. It is open-source, widely security-audited, and trusted by IT professionals globally. Always download it from the official site at 7-zip.org.

What happens if I forget my 7-Zip archive password?

There is no password recovery. AES-256 encrypted archives cannot be unlocked without the correct password — not by you, not by 7-Zip’s developers, not by anyone. Store your password in a trusted password manager like Bitwarden (free) before locking any important files.

Does Windows 11 have a native folder lock feature?

No. Windows 11 does not include a right-click lock-with-password option for individual folders. Microsoft’s built-in tools (EFS and BitLocker) are limited to Pro, Enterprise, and Education editions. Windows 11 Home users need a free third-party tool like 7-Zip.

What is the difference between EFS and BitLocker?

EFS encrypts individual files and folders, tied to your Windows user account. BitLocker encrypts an entire drive. EFS is best for protecting specific files on your main PC; BitLocker is better for securing a portable USB drive or a laptop that could be lost or stolen.

Will encrypting a folder slow down my PC?

With EFS, Windows decrypts files on the fly when you open them — the performance impact is minimal on modern hardware and barely noticeable for everyday documents. With 7-Zip, there is a brief delay when extracting files, but no ongoing performance hit since the archive is only opened when you need it. If your PC already feels sluggish, our guide on how to speed up a slow Windows 11 PC can help.

Can someone bypass folder encryption by removing my hard drive?

With EFS alone, it may be possible with advanced recovery tools if the drive is not also BitLocker-encrypted. With BitLocker protecting the full drive, everything is unreadable without the key — even on another PC. For most home use, EFS paired with a strong Windows login password is sufficient protection.

Conclusion

Protecting your private files in Windows 11 doesn’t require expensive software or advanced technical skills. For Windows 11 Home users, 7-Zip delivers free, military-grade AES-256 encryption in under two minutes. Pro users get the added convenience of EFS for seamless, always-on folder protection — with BitLocker ready for securing entire drives.

Whatever method you choose, follow three simple rules: use a strong password, back up your encryption key, and delete the original unprotected files. Ready to lock your data down? Head to 7-zip.org and secure your first folder today. And if you’re looking to clean up and speed up your PC at the same time, don’t miss our guide on How to Speed Up a Slow Windows 11 PC.