How To Turn Off Windows Defender Temporarily or Permanently

Need to turn off Windows Defender? Now officially called Microsoft Defender Antivirus, Windows Defender is the built-in antivirus protection included with Windows 10 and 11. You can temporarily disable it through the Windows Security app if you're troubleshooting software, dealing with a false positive, or switching antivirus programs.

But permanently disabling Windows Defender is a different story. Windows automatically turns real-time protection back on, and newer versions of Windows include safeguards that prevent you from easily switching off antivirus protection for good.

We'll walk you through how to turn off Windows Defender in Windows 11 and Windows 10, explain what to do if it keeps turning back on, and show you how to safely switch to another antivirus program.

How to turn off Windows Defender temporarily

You can temporarily disable Windows Defender by turning off real-time protection in the Windows Security app. This stops Microsoft Defender Antivirus from continuously scanning files and programs as you open or download them.

The steps are straightforward and don't require installing additional software. However, Microsoft Defender will eventually turn real-time protection back on automatically.^[1]

How to disable Windows Defender in Windows 11

Follow these steps to temporarily turn off Microsoft Defender Antivirus on Windows 11:

1. Open Windows Security. Click the Start button, type Windows Security in the search bar, and select the Windows Security app from the results. (Or click on the app icon if it's pinned to your taskbar.)

2. Select Virus & threat protection. From the Windows Security dashboard, click Virus & threat protection to open your antivirus settings.

3. Open your protection settings. Scroll to the Virus & threat protection settings section and click Manage settings.

4. Turn off real-time protection. Find the Real-time protection setting and switch the toggle from On to Off.

5. Confirm your choice. If Windows displays a User Account Control prompt asking whether you want to allow changes to your device, select Yes. You may need administrator permission to make this change.

That's it. Microsoft Defender's real-time antivirus protection is now temporarily disabled. You can still run manual scans, but Windows won't continuously scan files in real time until protection is restored.

Important: This doesn't uninstall Microsoft Defender or turn off every Windows security feature. Your firewall and other protections are managed separately. Windows will also automatically turn real-time protection back on after a period of time, so don't rely on this method to keep Defender disabled permanently.^[1]

How to turn off Windows Defender in Windows 10

Windows 10 uses a similar process, although the appearance of the Windows Security app may differ slightly.

1. Click Start, then open Settings.

2. Select Update & Security, then Windows Security.

3. Click Virus & threat protection.

4. Under Virus & threat protection settings, select Manage settings.

5. Switch Real-time protection to Off and approve the change if prompted.

The same limitation applies: Windows will eventually reactivate real-time protection.

Keep in mind that Windows 10 reached the end of standard support on October 14, 2025. Microsoft offers Extended Security Updates (ESU) for eligible devices, but those updates don't provide the same long-term support as moving to a supported operating system. Learn more about Windows 10 security updates and extended support.

How to permanently disable Windows Defender

Windows 11 doesn't offer a standard setting to permanently disable Microsoft Defender Antivirus. Turning off real-time protection only works temporarily, and Microsoft's tamper protection feature helps prevent unauthorized changes to important antivirus settings.^[1][2]

If you want to stop using Defender as your primary antivirus, the most reliable supported approach is to install another compatible antivirus program. Windows can then recognize the new software as your active antivirus provider.

Install another antivirus program

Microsoft Defender Antivirus is designed to work with other antivirus products. When you install and activate a compatible third-party antivirus, it generally stops acting as your primary real-time antivirus provider.^[3]

Here's how to make the switch:

1. Choose a reputable antivirus program that's compatible with your version of Windows. Our best antivirus for Windows guide compares programs based on protection, features, and performance.
2. Download the installer directly from the antivirus provider's official website.
3. Follow the installation instructions and make sure the new antivirus is activated and its real-time protection is enabled.
4. Open Windows Security and select Virus & threat protection.
5. Under Who's protecting me?, select Manage providers to check which antivirus program is active.

You don't need to manually disable Defender before installing another antivirus. Windows handles the transition when it recognizes a compatible, properly functioning security product.

Depending on the configuration, Microsoft Defender may enter passive mode or remain available for limited scanning features, such as periodic scanning. This doesn't mean both programs are necessarily providing simultaneous real-time antivirus protection.

If you're still using Windows 10, see our recommendations for the best antivirus for Windows 10. You can also compare the best free antivirus programs if you don't want to pay for a replacement.

Can you disable Windows Defender using Group Policy or the Registry?

You may come across tutorials recommending the Windows Registry, Local Group Policy Editor, or PowerShell commands to permanently disable Microsoft Defender Antivirus.

However, these methods aren't reliable permanent-disable solutions on modern Windows installations. Microsoft's tamper protection feature is designed to prevent changes to certain security settings, and older Group Policy settings for turning off Defender may no longer behave as those tutorials describe.^[2][4]

Changing system policies or Registry values without understanding their effects can also create security problems. For most home users, there's little reason to make these changes when Windows already supports switching to another antivirus provider.

If you're trying to stop Defender from interfering with a particular file or application, consider the troubleshooting options below instead of disabling antivirus protection across your entire computer.

How to turn Windows Defender back on

If you've temporarily disabled real-time protection, you can turn it back on using the same settings menu.

1. Open Windows Security from the Start menu.

2. Select Virus & threat protection.

3. Under Virus & threat protection settings, click Manage settings.

4. Switch Real-time protection back to On.

Windows may already have restored protection automatically. If so, you don't need to do anything else.

If you've installed another antivirus, Defender's real-time protection settings may be unavailable because the other program is managing antivirus protection. Check Manage providers to confirm that an antivirus program is active before making further changes.

What to do if Windows Defender won't turn off

Sometimes Windows Defender won't stay disabled, or the option to turn it off isn't available. This doesn't necessarily mean something is wrong with your computer. Windows includes safeguards designed to prevent malware and unauthorized users from changing your security settings.

Windows Defender keeps turning itself back on

If you switch off real-time protection and later find it enabled again, that's expected behavior. Microsoft automatically restores real-time protection after a period of time to help prevent your computer from remaining unprotected.^[1]

If Defender is interfering with a trusted application, try resolving the specific conflict instead of repeatedly disabling your antivirus. If you want a different antivirus altogether, install a compatible replacement.

The real-time protection setting is grayed out

If you can't change the real-time protection toggle, several things could be responsible:

• Administrator permissions: Your Windows account may not have permission to modify security settings.
• Organization-managed settings: A work or school administrator may control antivirus protection through device management policies.
• Another antivirus is active: Microsoft Defender may no longer be managing real-time protection.
• Tamper protection or security policies: Certain settings may be protected against unauthorized changes.

Start by checking Manage providers in Windows Security. If you're using a work or school computer, contact your IT administrator rather than trying to override its security policies.

Windows Defender is blocking a trusted app or file

Sometimes antivirus software incorrectly flags a legitimate program as malicious. This is called a false positive.

Before changing your protection settings, verify that the file came from a trusted source and that the detection isn't identifying a genuine threat.

If you're confident the file is safe, Windows Security lets you create an exclusion so Defender won't scan a specific file or folder. Microsoft recommends considering a narrowly scoped exclusion instead of turning off all antivirus protection, but warns that excluded items won't receive the same protection.^[1]

To find the setting, open Windows Security, select Virus & threat protection, and click Manage settings. Scroll to Exclusions and select Add or remove exclusions.

Only exclude the specific item you've verified. Avoid excluding entire drives, download folders, or other broad locations where malware could hide.

Is it safe to turn off Windows Defender?

Temporarily turning off Windows Defender can be useful for troubleshooting, but leaving your computer without active antivirus protection increases your exposure to malware, ransomware, and other threats.

When real-time protection is off, Defender isn't continuously checking files and programs as you access them. That means malicious software may have an opportunity to run before you detect it.

There are a few reasons you might consider temporarily disabling Defender:

• Troubleshooting a software conflict: You suspect antivirus scanning is interfering with a trusted program.
• Investigating a false positive: Defender is flagging a legitimate file, and you need to determine why.
• Testing performance: You want to determine whether antivirus activity is contributing to a slowdown.

Even in these situations, turning off protection should be a last resort. Microsoft Defender provides a solid baseline of protection, and our testing found it effective against several common threats. Before disabling it, consider what's prompting you to make the change and whether there's a better solution.

These guides can help you decide what to do next:

• Worried about performance? Learn whether antivirus software slows down your computer and what you can do about it.
• Not sure Defender offers enough protection? See whether Windows Defender is good enough for your security needs.
• Wondering if you need antivirus at all? Find out whether antivirus software is necessary and what risks you face without it.

Bottom line: Should you disable Windows Defender?

You can safely turn off Windows Defender for a short troubleshooting session if you understand the risks and restore protection afterward. But leaving your computer without real-time antivirus protection isn't a good long-term strategy.

Windows 11 doesn't provide a simple permanent-disable option, and Windows automatically restores real-time protection after you've temporarily turned it off. If your goal is to stop using Defender altogether, installing another compatible antivirus is the better approach.

Microsoft Defender Antivirus offers capable built-in protection, so you don't necessarily need to replace it. But if you want additional features or a different security experience, compare your options in our roundup of the best antivirus software we've tested.

FAQs